Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa
File: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (raw, json)
Hash identifier: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=
Subject key identifier: E5:84:6D:AA:4E:89:A7:B6:5A:9B:F0:FB:7D:CF:D7:ED:77:C7:F2:CE
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 01942067E8A0A1EFD56F5FBCDBDCB3868428
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12779
IP address blocks: 185.128.76.0/23 maxlen: 24
185.128.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e8:a0:a1:ef:d5:6f:5f:bc:db:dc:b3:86:84:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5846daa4e89a7b65a9bf0fb7dcfd7ed77c7f2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:4b:ed:72:29:36:c2:d5:ce:32:fd:49:dd:
8c:da:23:50:33:a4:bf:02:a3:76:ff:13:b3:0b:eb:
66:1e:7d:bf:87:ce:42:09:c6:dc:8b:e6:2d:da:3a:
27:fb:b8:c2:6e:8d:05:15:e2:c7:e2:2c:5e:ca:5b:
2f:82:a7:79:74:e6:a2:9a:23:ba:49:6f:1e:00:da:
8a:71:3e:dc:4a:a3:7b:96:ca:88:26:75:b1:bb:0a:
db:aa:59:61:6e:57:ef:a5:0f:f2:bd:48:94:03:0b:
5a:23:7c:25:1a:a6:30:6b:64:b6:9c:f9:77:da:fc:
ba:7c:52:95:d7:e5:2d:04:ed:3a:28:12:1a:d1:d4:
e9:ba:d9:3c:fe:c9:46:5e:19:69:35:bb:bc:f1:ce:
41:2c:b6:a1:04:8e:fb:77:cc:2b:32:bb:fc:98:cd:
fe:d6:74:94:24:31:78:6a:87:c6:92:f6:13:42:fa:
aa:9b:d9:62:a6:75:fa:85:d2:c0:d8:01:38:27:92:
bf:36:93:20:38:cf:16:ab:b3:c2:d6:10:e9:35:ca:
ae:99:da:4d:34:ab:cf:87:27:98:71:ff:ba:d1:20:
c9:e6:65:61:25:74:42:6c:d2:46:98:8a:cf:e6:72:
7d:cc:97:cf:ec:a1:ae:36:11:fd:ab:9d:59:79:61:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:84:6D:AA:4E:89:A7:B6:5A:9B:F0:FB:7D:CF:D7:ED:77:C7:F2:CE
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.76.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:cd:74:c3:d9:69:af:23:40:7a:f4:c6:59:89:f5:a2:bf:e2:
63:d7:66:6f:dc:53:08:79:01:f4:03:86:cb:3e:cc:a6:a5:0d:
3c:c5:1c:a8:2d:f6:a1:2b:af:c5:5d:2b:8e:67:86:ee:49:50:
80:ee:f4:b8:da:a9:17:4b:ce:db:e7:38:6e:ba:a6:79:a6:09:
15:47:84:4e:86:56:26:e2:1e:32:a1:9f:a4:7c:a6:26:0c:68:
31:8c:0c:26:9e:ac:50:18:84:fb:e8:e1:50:96:77:dc:2b:67:
5c:47:04:95:2a:65:e3:a5:6d:d9:79:ec:b3:b8:35:be:1f:f5:
63:3e:fe:31:a8:b0:0a:29:df:be:79:61:d6:46:03:97:80:a1:
b9:fe:0d:b0:90:70:e0:b7:fa:fb:52:63:0b:8d:49:18:ed:e9:
43:a6:74:6e:75:35:b8:b1:17:d0:07:96:47:59:63:ee:eb:96:
a3:25:b4:55:47:5d:76:90:4a:7a:02:b9:74:14:59:af:c5:a3:
f0:6b:33:c8:2c:7e:43:e1:d0:83:b7:7f:6a:31:91:89:16:a4:
aa:9b:38:08:6a:6d:49:ad:d8:a7:1f:1a:43:8c:ac:90:b0:b7:
02:90:24:ba:16:ca:c3:5c:5c:53:f1:07:0b:13:d2:d1:52:c0:
2f:c7:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:21 2025 by rpki-client on console.sobornost.net