Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa
File: B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa (raw, json)
Hash identifier: 0LrUFyOJZXBRyQDcmvsLMHIZlAZinGZnG68VlQ7rxjU=
Subject key identifier: 07:E1:1B:72:FF:89:FC:DE:FE:0C:AA:79:10:5A:F3:8E:68:98:47:0D
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0195EC973F2D6DC823B758FEE721262769AD
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa
Signing time: Mon 31 Mar 2025 14:24:49 +0000
ROA not before: Mon 31 Mar 2025 14:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 5.39.252.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.144.178.0/24 maxlen: 24
31.192.244.0/24 maxlen: 24
103.136.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:97:3f:2d:6d:c8:23:b7:58:fe:e7:21:26:27:69:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 31 14:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07e11b72ff89fcdefe0caa79105af38e6898470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:24:e9:09:76:5c:32:1b:a7:01:8b:de:8c:
e8:ab:e1:d7:40:15:d7:c5:32:83:b3:fb:0f:9a:eb:
ba:eb:6b:b1:d0:80:15:14:41:ff:dd:2c:0a:46:94:
88:d1:ca:67:47:26:84:33:24:7f:d9:95:ea:07:96:
8b:81:14:e5:ca:78:a0:55:7f:ab:93:e9:c9:d3:03:
fc:30:ac:76:72:d8:f2:5f:05:34:f5:01:02:a0:51:
c4:63:a3:f8:20:56:a2:c9:7f:8c:4b:93:02:42:0f:
97:3e:e2:86:7e:cd:8b:3a:ac:07:2f:90:9f:b9:6b:
90:8c:6e:46:a6:4c:8a:d6:7d:05:21:8e:c8:5d:0a:
f2:79:ae:94:8c:be:19:5a:f8:f5:cc:d3:fa:c1:45:
09:d5:3d:7a:f1:83:1d:45:cf:c9:6f:74:7a:60:dd:
e6:3b:bf:50:5a:67:ae:14:d7:03:60:ec:91:ce:86:
05:fd:b0:f9:23:bd:70:30:4b:ca:56:9b:c3:81:c8:
7b:40:54:a4:5c:48:45:d3:7b:bb:8a:f8:c0:e2:40:
d7:77:ba:ce:0e:9f:dc:74:eb:2b:b7:de:35:84:ab:
9a:84:58:3e:65:dc:6b:d2:c4:ec:2d:93:bc:ff:ee:
7c:8c:a4:18:a1:d3:e1:5c:d2:ba:ee:3f:0b:08:3d:
7c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E1:1B:72:FF:89:FC:DE:FE:0C:AA:79:10:5A:F3:8E:68:98:47:0D
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/B-Ebcv-J_N7-DKp5EFrzjmiYRw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.252.0/24
5.39.254.0/24
5.144.178.0/24
31.192.244.0/24
103.136.68.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:54:7a:3d:f3:a3:41:76:11:37:69:0e:31:d0:d4:98:79:b5:
b0:f2:70:ba:95:a6:e0:1c:47:87:2d:e8:43:50:e2:ff:3e:ea:
95:66:15:15:b4:dd:e8:b1:77:f0:7e:1b:b9:43:a0:90:6a:53:
43:33:46:d0:47:75:38:6e:f3:bd:f2:1f:29:9a:94:f1:3a:34:
42:07:72:b1:b1:77:33:03:38:22:71:7e:ac:25:6b:70:09:2b:
da:aa:ef:48:0d:07:be:c4:cf:b4:78:2c:bf:b3:0f:a8:26:a6:
dc:21:9b:e3:b6:ed:39:d9:8b:7e:60:ab:d8:bc:7f:a0:a1:48:
cb:d1:81:a9:58:5e:c6:54:d9:63:46:f7:94:78:eb:7c:2f:e1:
d0:d2:ec:e7:6f:0e:8f:72:e9:50:ee:49:66:92:3f:d6:5d:15:
38:a2:e6:2c:69:1b:1e:e4:7b:26:25:dc:e3:4c:fb:71:f7:d5:
bc:5c:3c:a9:e1:15:fd:3b:cc:c4:d2:2c:f7:5d:5b:34:60:b2:
22:7d:51:fd:38:12:8f:8d:45:04:85:37:1c:aa:93:47:66:c7:
c9:8e:6b:1d:b2:f5:ec:a2:11:56:b4:5a:24:21:ec:ac:dd:10:
83:84:ed:be:b2:4c:64:ae:7e:c3:39:18:d1:c3:ea:84:8f:ca:
ce:e6:be:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net