Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/akdoIFbGGphPsOua6vOPfJFx_n8.roa
File: akdoIFbGGphPsOua6vOPfJFx_n8.roa (raw, json)
Hash identifier: r5YdXtt32oyVRXJKLiujx5qPKEB9WTaTcVsGTt7qfvg=
Subject key identifier: 6A:47:68:20:56:C6:1A:98:4F:B0:EB:9A:EA:F3:8F:7C:91:71:FE:7F
Certificate issuer: /CN=7de98f48e988790d0e0793537941b413d2e60306
Certificate serial: 0195802C9351D57574624FD78DE60F0AE4DC
Authority key identifier: 7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/akdoIFbGGphPsOua6vOPfJFx_n8.roa
Signing time: Mon 10 Mar 2025 13:09:19 +0000
ROA not before: Mon 10 Mar 2025 13:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41849
IP address blocks: 5.252.44.0/22 maxlen: 22
5.252.44.0/23 maxlen: 23
91.102.128.0/21 maxlen: 21
91.102.128.0/22 maxlen: 22
91.102.130.0/24 maxlen: 24
91.102.134.0/23 maxlen: 23
91.102.134.0/24 maxlen: 24
91.102.135.0/24 maxlen: 24
2a01:7140::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:2c:93:51:d5:75:74:62:4f:d7:8d:e6:0f:0a:e4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7de98f48e988790d0e0793537941b413d2e60306
Validity
Not Before: Mar 10 13:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a47682056c61a984fb0eb9aeaf38f7c9171fe7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:9a:af:2d:4b:85:28:fc:35:d1:23:6b:91:
1b:f8:58:3a:21:08:37:1b:23:12:ac:58:60:ca:c7:
d2:a2:b7:d0:b4:0c:c9:97:a7:a4:a2:f8:d9:93:69:
ee:15:d3:a3:74:fa:16:2b:32:93:0a:d2:62:d8:b1:
29:9d:40:ea:8b:8c:07:7a:4c:ae:00:b8:ed:f0:40:
da:5f:ad:48:b0:c5:89:5b:be:ef:fe:f3:96:3e:45:
e5:32:58:f9:79:fe:89:38:94:89:08:01:95:10:15:
59:0f:4e:ba:0b:53:78:21:0b:c1:db:a7:dd:d6:89:
1c:da:d6:4a:6b:b7:ef:18:6c:7e:63:33:52:1b:cc:
02:ad:2c:90:9a:b5:d1:fa:56:31:e1:30:a1:b4:b9:
ee:ab:55:8a:dd:5d:f9:23:19:9c:89:ce:55:fa:8c:
26:1a:02:32:bd:34:f3:9e:00:f5:ab:50:54:a4:21:
1f:df:db:24:c3:11:4a:61:a5:b3:ef:87:29:ff:89:
02:df:9e:a2:1a:1d:39:ea:c2:6c:93:21:d1:c4:2c:
b2:38:84:dd:d5:74:f5:e4:ee:4b:d8:d1:6b:57:c4:
81:5a:ab:08:98:dd:12:5c:da:60:8b:d0:0a:8f:d1:
2e:c4:10:ad:50:28:53:a0:19:78:72:e8:e1:09:8d:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:47:68:20:56:C6:1A:98:4F:B0:EB:9A:EA:F3:8F:7C:91:71:FE:7F
X509v3 Authority Key Identifier:
keyid:7D:E9:8F:48:E9:88:79:0D:0E:07:93:53:79:41:B4:13:D2:E6:03:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/femPSOmIeQ0OB5NTeUG0E9LmAwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/akdoIFbGGphPsOua6vOPfJFx_n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0fc0a-15d4-46cc-a8b9-47632cb5b854/1/femPSOmIeQ0OB5NTeUG0E9LmAwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.44.0/22
91.102.128.0/21
IPv6:
2a01:7140::/32
Signature Algorithm: sha256WithRSAEncryption
36:91:ec:b1:a2:e2:79:a3:0e:1c:16:4d:9d:92:ac:73:63:9f:
78:a1:cd:d4:0a:8c:47:b5:d0:ac:37:b5:a1:be:d4:60:e2:04:
61:88:e6:3c:ee:8e:5b:0f:4c:5d:40:ea:d0:50:55:4d:3b:43:
79:d1:89:ec:ae:0f:d4:7b:df:fb:2b:34:66:9c:05:66:83:f8:
b1:8d:f5:44:0a:3d:c9:82:de:d2:19:90:76:ec:9b:8d:9f:a1:
bc:5a:cc:2c:ce:17:12:16:06:74:aa:bf:7b:eb:7a:24:ae:12:
1f:4a:44:45:fe:32:b1:7b:ab:6b:86:0d:fb:0c:fa:71:62:5b:
bc:28:c2:0e:2e:ca:07:dc:6f:ee:79:06:40:5e:33:46:05:41:
ea:d9:9d:2d:0b:7b:c2:b3:9d:74:78:07:aa:52:3a:aa:e2:4d:
d6:33:6e:f9:cf:ce:54:77:d2:59:17:c2:59:77:39:54:d3:56:
2d:f2:2c:c4:41:e4:a2:ea:07:22:71:bc:4a:fa:2a:38:16:2b:
7e:c3:6e:b9:38:84:3c:c5:b4:a8:26:86:4b:67:57:4b:82:e5:
7f:07:20:36:9d:6e:92:98:c0:89:6a:a4:da:02:8d:f5:a3:80:
94:be:03:17:e5:87:99:08:54:43:b2:49:95:70:6e:88:2e:85:
d5:7c:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net