Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/bJFxuWRTLDK11fnMj6JzG9bfGJc.roa
File: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (raw, json)
Hash identifier: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=
Subject key identifier: 6C:91:71:B9:64:53:2C:32:B5:D5:F9:CC:8F:A2:73:1B:D6:DF:18:97
Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Certificate serial: 019423D6A8B8A88F97DC9AD720A5BC6D7F41
Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/bJFxuWRTLDK11fnMj6JzG9bfGJc.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59508
IP address blocks: 5.159.96.0/22 maxlen: 22
5.159.104.0/21 maxlen: 21
2a09:4140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a8:b8:a8:8f:97:dc:9a:d7:20:a5:bc:6d:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c9171b964532c32b5d5f9cc8fa2731bd6df1897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:00:9d:06:8a:8e:ac:93:d2:64:22:17:26:
ca:09:0e:7d:65:9c:14:3e:82:6e:b6:38:1c:7d:4e:
85:c1:31:ea:3e:05:37:38:b1:dd:6a:65:ef:ba:ee:
5c:9e:3a:44:a9:a6:17:43:35:a6:f0:77:37:46:32:
dd:cb:9d:f2:69:75:4d:c4:9f:b7:67:18:f3:4f:58:
dc:31:b7:60:69:95:e1:bd:21:1d:90:28:c4:42:24:
b2:09:57:2d:67:00:02:73:55:ac:76:30:37:a6:a1:
77:f5:5a:c1:30:64:33:28:6f:e6:cb:ff:71:22:16:
e9:08:29:3c:e4:24:5d:ee:9b:85:80:b4:7c:51:da:
fb:e3:9c:f8:e9:5e:07:81:76:99:1e:3b:cd:b4:e3:
31:81:ae:8a:74:fb:a5:ef:9d:45:29:6e:8e:ba:44:
1a:6e:4f:43:93:b3:5e:e9:dd:04:5b:96:a4:42:75:
16:e7:73:14:f5:75:c9:ff:b8:ad:50:74:86:5f:1f:
81:03:54:4a:02:fa:cc:9b:3f:ec:7c:89:7e:61:2a:
ac:24:40:c5:eb:46:40:6f:14:d1:e9:77:aa:61:36:
f5:61:0b:19:22:2d:64:46:a9:15:17:a3:3a:69:be:
18:1c:e0:fc:b8:fe:fa:64:20:dc:b6:18:4e:77:44:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:91:71:B9:64:53:2C:32:B5:D5:F9:CC:8F:A2:73:1B:D6:DF:18:97
X509v3 Authority Key Identifier:
keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/bJFxuWRTLDK11fnMj6JzG9bfGJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.96.0/22
5.159.104.0/21
IPv6:
2a09:4140::/29
Signature Algorithm: sha256WithRSAEncryption
46:73:21:39:67:9e:10:0f:6a:1d:35:37:d5:ce:75:a3:aa:65:
be:d5:5b:3a:91:68:a4:ec:d5:c5:cc:1d:7f:35:05:bf:76:e1:
b8:6f:b7:cf:be:3c:ed:ce:33:8b:67:f0:4f:0a:d1:cd:1a:d3:
4e:21:da:a1:f3:22:24:5e:74:5c:64:de:97:e1:5b:6f:2c:cf:
09:86:16:78:ed:6a:c3:48:10:8b:d3:43:c2:a7:81:af:4f:70:
02:da:e8:b3:01:37:3f:9c:a9:2a:39:54:00:40:d2:f2:58:67:
1b:80:eb:1c:13:e4:79:1d:b8:63:6f:e0:a5:49:44:0b:46:ab:
8f:71:9a:c9:ba:0d:5f:a6:55:4b:65:0c:6c:27:d9:a7:9e:70:
86:26:5f:0f:a0:5e:2e:66:9a:af:70:8c:82:7b:e6:7a:6c:88:
8d:bb:fc:a4:61:22:b6:99:83:a2:8d:52:07:b0:5b:29:e3:71:
7d:bf:a4:4a:f4:b2:f8:b9:c9:91:a5:ee:0c:c5:f3:09:43:91:
18:08:c0:3a:ab:75:55:73:d8:44:84:f2:3d:9f:9d:be:0a:84:
ef:8e:07:78:10:95:4a:bf:e9:19:33:4d:ed:cb:32:57:ad:af:
98:47:fa:a3:81:b8:ef:64:ad:93:fc:bf:ab:83:5e:f2:53:41:
81:62:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net