Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/5Es4zPvDm3MMXSDOXrPDEzILG78.roa
File: 5Es4zPvDm3MMXSDOXrPDEzILG78.roa (raw, json)
Hash identifier: WNzo+YIvuvagGYiyG4uSKV3fWrNNz4wRZQOVkyJIxJc=
Subject key identifier: E4:4B:38:CC:FB:C3:9B:73:0C:5D:20:CE:5E:B3:C3:13:32:0B:1B:BF
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 0194F17F532902F6140AFDDC076722CF80F1
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/5Es4zPvDm3MMXSDOXrPDEzILG78.roa
Signing time: Mon 10 Feb 2025 20:14:00 +0000
ROA not before: Mon 10 Feb 2025 20:14:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202220
IP address blocks: 176.97.51.0/24 maxlen: 24
203.25.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:7f:53:29:02:f6:14:0a:fd:dc:07:67:22:cf:80:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Feb 10 20:14:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e44b38ccfbc39b730c5d20ce5eb3c313320b1bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:15:d7:79:8d:5f:ae:d4:e9:0b:ee:0e:f2:
d0:92:b5:96:72:0a:04:ae:9c:4d:11:03:d1:d3:dc:
e0:4f:c2:4b:42:59:6f:8d:ad:20:7e:2e:f2:dc:9a:
bd:8c:e7:b4:64:25:8f:0f:1b:1c:a2:76:39:9c:bd:
9d:41:20:4b:73:b2:d7:c5:ea:64:62:f5:16:23:3d:
1c:0b:3e:42:88:16:94:99:4a:29:11:c1:f8:87:05:
80:97:7b:33:eb:38:b7:05:24:2a:2e:aa:fe:f6:73:
2e:09:d9:47:68:93:60:6c:64:2a:17:ef:59:d5:cb:
a6:e0:69:9b:b3:15:78:bb:2e:70:ca:0c:2f:54:ba:
c1:37:57:f3:a9:cf:41:d0:76:bd:be:61:e7:d7:ff:
9e:e6:79:3e:d5:43:b5:8b:7d:00:0a:a9:d0:e5:1a:
98:0e:46:7b:22:58:5f:8e:e8:7a:c5:f6:24:2d:4f:
2e:21:89:e7:45:ea:b7:b4:97:54:8e:ab:71:7b:67:
b3:5c:59:f2:f7:0f:98:17:ef:4f:56:b6:87:f2:c3:
85:19:9a:ef:be:2c:77:59:9a:1a:ad:b7:40:bf:83:
5c:ec:2d:a5:c1:63:fd:a7:08:2c:74:d1:70:17:b6:
8e:3e:dc:03:cb:f3:ea:ea:a2:b3:ce:f7:a3:29:07:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4B:38:CC:FB:C3:9B:73:0C:5D:20:CE:5E:B3:C3:13:32:0B:1B:BF
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/5Es4zPvDm3MMXSDOXrPDEzILG78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.51.0/24
203.25.190.0/24
Signature Algorithm: sha256WithRSAEncryption
54:02:6f:bc:25:2f:05:b9:4b:5b:01:40:ac:c5:ce:5b:dd:e4:
f6:96:02:40:24:e9:a8:40:83:c2:65:25:23:15:09:39:2e:76:
33:ab:64:2a:42:75:1c:3c:06:8d:45:05:ef:ac:3e:fb:80:04:
57:c1:92:33:4a:44:3e:64:cd:09:f6:fc:f2:5c:44:b4:c4:7a:
c3:ca:00:ee:b2:fd:9b:fe:80:de:62:4f:38:68:b0:8f:b9:6b:
65:f4:9d:e9:ef:fd:25:3a:92:de:e0:ef:cc:2d:81:c4:05:ce:
1e:73:c6:69:3f:a3:36:6f:b2:ee:00:35:cf:71:b0:59:77:64:
88:30:07:eb:0d:ac:5a:63:94:0b:fb:19:48:9c:d1:f5:39:e7:
3b:4f:b0:96:ff:b3:af:f9:91:8e:c5:8b:4d:df:6b:d3:47:b3:
9f:79:98:b3:2c:5c:79:f5:e8:28:68:3c:56:fc:d4:1c:cf:fe:
c0:cc:7b:b9:69:e9:ce:b3:c3:c7:f4:e6:99:79:51:a3:1f:63:
1e:3a:d2:40:ff:c6:fe:ab:20:d6:08:35:40:05:61:ef:ec:2c:
d8:11:7a:a3:ba:a4:bd:d3:81:f0:15:86:31:8e:e6:7d:e1:6b:
9f:40:b3:ab:6d:10:a4:42:ff:56:82:78:50:59:dc:59:64:bd:
81:b2:43:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net