Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/R9YJ09lrkCB-pPZS6sDh1WdHiMw.roa
File: R9YJ09lrkCB-pPZS6sDh1WdHiMw.roa (raw, json)
Hash identifier: 0WyYXPii70+mVVXnPMwFbDkuZ97F5iEYaEfUM75IFxc=
Subject key identifier: 47:D6:09:D3:D9:6B:90:20:7E:A4:F6:52:EA:C0:E1:D5:67:47:88:CC
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019625EB4F6D6DBE3B846C751ED94CC3885B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/R9YJ09lrkCB-pPZS6sDh1WdHiMw.roa
Signing time: Fri 11 Apr 2025 17:35:00 +0000
ROA not before: Fri 11 Apr 2025 17:35:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35277
IP address blocks: 5.189.252.0/24 maxlen: 24
5.189.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:25:eb:4f:6d:6d:be:3b:84:6c:75:1e:d9:4c:c3:88:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 11 17:35:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47d609d3d96b90207ea4f652eac0e1d5674788cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7e:cc:09:37:31:dc:5a:83:51:c2:5b:c1:f8:
a1:e8:ae:b3:50:69:7e:6e:a6:0e:20:a3:11:92:4d:
db:18:9f:a4:b5:49:d2:82:f9:96:a5:e4:39:fb:f7:
a6:d1:c0:ed:af:f4:ee:42:90:e6:3f:4a:76:02:b9:
61:00:f9:4a:99:88:bb:b7:15:59:2c:a2:90:3b:b3:
6d:88:58:5c:d2:05:ee:77:e7:b3:42:56:f3:44:e1:
2c:50:b8:78:79:d5:c9:12:35:c3:77:a0:f7:b7:a1:
c6:01:e0:54:44:5b:fe:b1:44:0d:ec:66:d2:60:8a:
00:09:0f:00:e1:a2:5b:9e:0a:3d:f9:9d:95:d3:95:
62:80:ab:10:b3:03:e2:33:d2:29:67:98:1b:82:f0:
8a:a3:4e:a0:db:24:29:2d:8d:30:70:20:fa:ea:fe:
75:af:f4:f3:c2:79:39:5b:70:21:2c:ce:b2:b0:3e:
10:c8:e0:f3:63:8f:8d:6c:81:ec:f8:b7:f1:a8:fc:
b8:fd:3d:90:bc:59:5e:e7:c5:e7:5e:b6:59:f8:2b:
b0:11:b4:23:67:30:b0:8a:27:a1:bc:dc:cb:59:41:
89:9f:77:1b:c6:2a:40:96:f1:27:7e:d6:b6:18:f1:
de:53:e9:45:29:4d:ba:29:3a:83:09:b0:4c:81:89:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:09:D3:D9:6B:90:20:7E:A4:F6:52:EA:C0:E1:D5:67:47:88:CC
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/R9YJ09lrkCB-pPZS6sDh1WdHiMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.189.252.0/23
Signature Algorithm: sha256WithRSAEncryption
62:d5:c5:95:7a:40:ce:a9:d9:3c:1e:4b:8b:45:6c:d9:58:ad:
a8:6e:0b:59:34:15:f9:f2:96:3f:f5:d9:60:dd:94:01:0f:e3:
c1:f6:46:bc:48:3f:a7:94:3b:22:98:94:fb:8a:4f:77:23:d1:
3f:f6:07:77:53:23:93:f8:3b:7c:48:ae:bc:92:f8:aa:37:c5:
2f:44:2f:ff:93:e5:c2:9b:34:d4:7f:08:64:91:e8:34:71:55:
3c:c5:d7:ef:35:c2:fa:46:f1:5e:ad:82:64:09:3d:fb:cc:22:
4a:94:07:4e:87:66:5b:34:d1:20:d0:c8:46:26:13:d9:7f:4f:
c2:ac:e2:c4:f7:81:f6:59:04:84:13:db:0a:eb:26:9a:c7:e7:
96:18:c4:04:b5:42:2e:ad:79:06:c5:b6:fa:69:af:a3:c9:33:
e1:57:58:d1:79:7b:8b:b4:3e:b8:c1:9f:8a:ff:4f:15:b5:51:
b1:42:be:0e:f5:aa:de:a2:b6:ff:9b:6c:38:99:5e:1f:f9:70:
0f:51:70:b6:d3:7d:33:6c:9b:48:8a:13:03:08:e8:8a:20:04:
88:fe:ac:af:a0:7a:a5:45:c5:cc:6a:f6:c1:75:41:6a:01:23:
76:a5:5d:e2:8a:60:9c:77:2b:e8:95:69:e8:7e:33:c2:89:aa:
98:1f:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net