Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/Hw4lne_Zx7QdAWSuYYhERC-BrKY.roa
File: Hw4lne_Zx7QdAWSuYYhERC-BrKY.roa (raw, json)
Hash identifier: 5ycr19RvTqq4OQ6fLgeeMdSRmnWtTkBiC0fCWT6H0gY=
Subject key identifier: 1F:0E:25:9D:EF:D9:C7:B4:1D:01:64:AE:61:88:44:44:2F:81:AC:A6
Certificate issuer: /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial: 019421B1F8BE65087A8704C689F8775F101B
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/Hw4lne_Zx7QdAWSuYYhERC-BrKY.roa
Signing time: Wed 01 Jan 2025 11:48:19 +0000
ROA not before: Wed 01 Jan 2025 11:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34912
IP address blocks: 5.150.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:be:65:08:7a:87:04:c6:89:f8:77:5f:10:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f0e259defd9c7b41d0164ae618844442f81aca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:c1:ee:77:4b:9b:de:8c:72:c0:c9:cc:31:
f8:f6:5c:31:9b:d7:0e:f9:87:6f:75:3b:97:b6:fd:
be:86:0c:13:de:cf:e2:d3:64:b6:40:c5:a0:08:ba:
ab:48:7d:f4:d3:b1:4f:2d:b5:bb:c1:f7:89:80:13:
7f:d9:49:56:1d:09:ec:84:95:22:bc:15:87:cb:e8:
43:a3:38:1d:f7:f0:9c:f8:a1:bf:e0:08:f1:d0:1c:
9f:34:59:5f:87:23:5e:6d:01:a6:8a:a0:ce:c7:08:
28:8d:aa:4c:61:e3:d6:e6:8c:d2:09:fa:0d:ba:49:
85:e0:67:72:1b:a9:f8:c5:8a:33:75:29:ae:6d:de:
4d:0b:09:6a:27:36:35:60:d9:b6:db:8f:d9:20:c4:
f9:84:61:2f:c8:2d:ba:83:2f:11:aa:ca:c2:f8:0e:
8f:86:0a:c1:24:60:03:c9:5b:aa:b1:10:f4:f0:54:
fa:1c:01:d5:f4:c1:a0:de:58:d3:1c:2a:38:4e:8f:
85:96:bc:ab:45:09:08:b6:07:a8:ae:7c:c5:29:eb:
c3:58:36:34:c8:cb:c0:d0:fa:d9:cb:65:24:d9:42:
94:b9:46:6a:7b:89:33:39:da:4b:4d:62:8e:80:de:
70:ec:ff:ec:d6:f1:c6:6a:30:20:f5:f6:67:b1:7d:
6b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0E:25:9D:EF:D9:C7:B4:1D:01:64:AE:61:88:44:44:2F:81:AC:A6
X509v3 Authority Key Identifier:
keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/Hw4lne_Zx7QdAWSuYYhERC-BrKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.144.0/21
Signature Algorithm: sha256WithRSAEncryption
32:4c:33:02:47:2f:8d:83:41:dd:40:85:48:1f:0d:6b:3c:cb:
48:75:ad:65:e6:93:61:7c:4a:d9:07:07:cb:1a:52:13:e6:d0:
e2:35:85:51:c5:73:9f:11:f8:08:d6:ad:f1:5c:82:5c:da:32:
44:b8:41:ca:84:54:6f:5a:97:16:bd:2b:7e:ab:9f:a7:ad:85:
c9:0f:78:04:85:c2:8a:d5:d4:b3:49:e1:ca:82:8f:70:af:fd:
fd:f2:25:14:17:d7:dc:cc:f0:5a:7e:d3:4a:1c:76:46:91:3b:
03:11:8d:fa:88:1e:13:db:9c:85:68:c6:e2:3f:04:96:35:97:
ef:fb:29:53:48:6e:4d:56:a4:b1:e7:db:83:70:64:e1:1d:fe:
43:3a:11:51:54:4a:a9:99:5e:0b:e8:65:9c:1f:13:52:6d:0c:
21:33:d4:58:41:ce:ef:43:ec:66:9c:61:3e:b9:ae:e8:6c:2b:
44:3c:87:b7:3a:74:f8:1f:80:3d:1d:88:2f:49:63:c2:b2:ca:
1c:e0:1c:1a:5c:47:f8:ad:67:16:4e:d5:1c:cd:bb:6d:9f:9d:
c4:f3:43:ea:24:e4:84:d8:3a:54:f7:f8:83:d3:ef:57:12:1c:
38:6f:fc:bd:e0:15:88:48:79:52:b6:6b:c4:14:0d:b0:c7:2c:
ec:b1:78:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:04 2025 by rpki-client on console.sobornost.net