Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gjelJYUqduB0SY8h1_zYOE60_xc.roa
File: gjelJYUqduB0SY8h1_zYOE60_xc.roa (raw, json)
Hash identifier: scflprWzI2dG91hBtETZmjoFC4sOglLLaSxVg5aEUJo=
Subject key identifier: 82:37:A5:25:85:2A:76:E0:74:49:8F:21:D7:FC:D8:38:4E:B4:FF:17
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 0195F20330584FA2939A29D014EE00F49FCC
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gjelJYUqduB0SY8h1_zYOE60_xc.roa
Signing time: Tue 01 Apr 2025 15:40:49 +0000
ROA not before: Tue 01 Apr 2025 15:40:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214790
IP address blocks: 5.8.44.0/24 maxlen: 24
5.101.47.0/24 maxlen: 24
5.188.51.0/24 maxlen: 24
5.188.200.0/24 maxlen: 24
5.189.219.0/24 maxlen: 24
5.189.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:03:30:58:4f:a2:93:9a:29:d0:14:ee:00:f4:9f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Apr 1 15:40:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8237a525852a76e074498f21d7fcd8384eb4ff17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:b5:d7:a9:fa:ae:2a:b7:9b:ff:4d:74:43:
d3:c2:e3:00:ac:29:4e:ae:71:9a:e6:f6:ce:c3:ea:
ce:44:ac:ca:c2:c2:d0:7a:c5:91:f8:51:0e:eb:ff:
1e:08:95:62:16:b4:90:e0:4a:37:ae:8d:1a:6b:8a:
f9:22:08:0c:e9:28:c0:d7:41:00:c6:52:f7:c7:54:
4b:aa:f8:30:97:f2:1b:7a:66:0b:98:00:28:74:a4:
71:53:cb:cb:58:32:bd:95:c6:3d:95:53:33:03:2d:
87:ed:31:25:b2:3b:25:b1:aa:0a:6e:d7:16:bc:f0:
7e:63:0d:75:db:59:c2:28:a9:a0:a6:7c:cb:53:0c:
4d:5a:8b:d9:2a:eb:e0:e4:75:fa:fd:48:1d:c5:e1:
b2:69:27:b9:19:f9:79:99:64:72:5e:ca:0d:99:eb:
22:2a:54:6f:af:72:0e:c9:3d:c3:7f:36:fb:6b:19:
b9:c0:8a:f1:42:1c:d1:5d:17:78:ab:ed:c2:df:e2:
84:41:47:61:da:64:89:1c:d2:da:f8:b8:21:05:ce:
ad:59:04:00:7a:86:2c:46:3c:3e:b9:d6:e8:0d:a0:
fb:21:2c:58:f0:14:cc:b4:ca:d1:bc:c6:8a:65:a9:
7c:b4:3c:90:86:e8:3f:01:78:a2:95:d4:96:28:5a:
d0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:37:A5:25:85:2A:76:E0:74:49:8F:21:D7:FC:D8:38:4E:B4:FF:17
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/gjelJYUqduB0SY8h1_zYOE60_xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.44.0/24
5.101.47.0/24
5.188.51.0/24
5.188.200.0/24
5.189.219.0/24
5.189.254.0/24
Signature Algorithm: sha256WithRSAEncryption
03:05:00:4c:45:7b:17:9f:bf:4a:37:e9:4b:9e:ef:ef:d6:99:
3d:7e:c8:73:55:93:d7:55:cc:29:ae:7f:ab:d4:d8:cc:95:8e:
1b:c1:b0:02:ac:77:b9:a3:04:24:67:97:a7:f1:33:4f:41:84:
02:d6:24:30:1d:75:f0:58:d9:0e:70:2d:59:2f:4d:36:20:52:
6e:8c:89:16:5c:3c:57:bd:e8:b3:64:a9:6b:45:35:3d:63:8d:
d9:2c:2c:23:53:5a:9d:7a:ad:66:1e:9f:94:da:e6:26:eb:41:
d4:f1:a9:9c:c6:f6:23:f0:39:98:fc:0c:8c:10:bf:51:76:13:
47:40:11:9c:46:f5:40:d2:83:df:1a:78:5f:2b:c3:33:ba:70:
5e:24:23:9e:4d:bc:2f:ac:03:26:8a:ee:8f:ff:fb:8f:3c:a5:
ff:04:14:67:fd:40:55:a7:5c:99:fa:9d:cb:a8:46:4f:b0:d1:
d1:53:2f:a1:c2:52:5a:28:f6:a8:58:c4:8b:b4:31:77:f2:b7:
45:fb:87:a3:b2:43:c8:82:a6:bc:44:43:a1:12:85:d9:6c:19:
ce:a6:d7:11:02:7b:d8:d6:7e:74:c4:59:6a:c7:9b:fc:13:28:
b7:28:d5:74:fa:ef:09:be:0b:ac:4c:49:ac:05:18:39:0f:cf:
86:13:63:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net