Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa
File: 5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa (raw, json)
Hash identifier: LxqMIG4f6G1y41E4bvnnaVLXMyv0wjoLuCjGmeNYJdQ=
Subject key identifier: E6:BC:27:B7:B5:37:CC:D7:5A:9A:38:7D:86:12:7F:1C:0F:D5:0A:AA
Certificate issuer: /CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Certificate serial: 0195D23E8F2623E4943DA5E052B0E709C18D
Authority key identifier: 2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa
Signing time: Wed 26 Mar 2025 11:37:50 +0000
ROA not before: Wed 26 Mar 2025 11:37:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209523
IP address blocks: 5.198.192.0/19 maxlen: 19
5.198.193.0/24 maxlen: 24
5.198.194.0/24 maxlen: 24
45.158.68.0/22 maxlen: 22
185.97.140.0/22 maxlen: 22
185.97.140.0/24 maxlen: 24
185.97.141.0/24 maxlen: 24
2a02:e58::/32 maxlen: 32
2a02:e58:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d2:3e:8f:26:23:e4:94:3d:a5:e0:52:b0:e7:09:c1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d9e31c9029ee44bd681b515330335c6a1cfdeee
Validity
Not Before: Mar 26 11:37:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6bc27b7b537ccd75a9a387d86127f1c0fd50aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:30:64:45:05:c2:a3:7c:68:5a:07:f0:1e:
a1:87:4c:5e:e7:f7:ca:a7:a5:74:47:6a:6d:c6:d2:
3e:69:42:7b:90:77:c4:b9:fa:ef:41:c2:14:f6:78:
a5:32:6c:5e:be:01:2e:8a:0f:eb:8c:77:f8:6a:c7:
8f:46:78:60:2a:a2:b0:2a:9d:0a:b7:04:48:b5:73:
37:cb:1f:a1:a8:d9:df:f0:1c:bc:bf:53:b3:61:5d:
20:aa:8e:d3:b9:54:98:b5:53:f3:59:08:f3:e6:62:
a7:35:81:f7:e0:af:15:ed:1c:da:eb:2c:07:84:6f:
54:07:ba:77:8e:e5:8d:6b:e4:2e:fd:68:be:b9:6f:
89:1f:ef:e9:18:19:93:ed:f5:f5:df:41:9f:7e:42:
d0:d0:41:73:74:e8:6d:3b:56:e4:bb:23:f3:7b:09:
99:8d:fb:b8:4a:90:c1:2f:5f:9a:74:2c:15:1c:a3:
ae:ba:62:0d:0f:ce:fd:ce:e5:5f:39:47:43:22:23:
d1:55:dd:3d:7a:c1:a7:f2:89:2e:80:a5:d0:ef:96:
5f:b1:19:7c:99:c3:94:68:bf:c3:ef:42:de:15:17:
1b:ea:71:3c:82:0c:06:65:09:47:0e:7d:31:12:49:
9e:12:3a:ca:0a:a2:ec:4e:2e:e3:eb:45:b5:0c:6e:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BC:27:B7:B5:37:CC:D7:5A:9A:38:7D:86:12:7F:1C:0F:D5:0A:AA
X509v3 Authority Key Identifier:
keyid:2D:9E:31:C9:02:9E:E4:4B:D6:81:B5:15:33:03:35:C6:A1:CF:DE:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/5rwnt7U3zNdamjh9hhJ_HA_VCqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/15d896-2f69-4697-a6fc-08da6652a867/1/LZ4xyQKe5EvWgbUVMwM1xqHP3u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.192.0/19
45.158.68.0/22
185.97.140.0/22
IPv6:
2a02:e58::/32
Signature Algorithm: sha256WithRSAEncryption
56:de:9a:80:09:6d:c2:69:45:06:0b:4d:3f:6e:09:15:ff:5f:
d2:7c:fe:1d:54:0f:eb:55:ad:07:97:35:b6:6e:a5:78:3c:24:
4e:b5:b9:03:09:d4:3c:5a:e9:16:85:97:6d:62:77:16:85:55:
bd:25:eb:60:a4:88:3f:c3:a6:9f:01:48:93:06:d5:bd:cb:a9:
96:90:bf:0c:43:67:37:57:ef:38:9a:0a:ca:ca:ad:b6:a0:db:
c1:ee:12:ca:9c:7a:e2:b9:a5:50:f0:fd:3a:ed:34:f8:ae:8e:
f6:7e:6d:17:f1:3d:2d:35:2a:18:9f:3e:75:e0:e8:14:99:88:
ff:c2:45:9a:42:25:08:10:b3:5f:b0:bd:0e:1c:52:2c:b4:8b:
db:a9:39:7b:c3:b2:2d:78:c9:6b:a0:fc:bf:cd:7e:1a:1c:17:
97:ef:36:df:7c:99:cb:d2:75:50:f6:18:71:27:12:a8:8c:ab:
69:69:49:2f:98:11:11:7f:75:c7:f0:44:86:81:41:c8:7a:38:
15:29:c2:2c:57:c9:9f:d2:d1:cf:46:2b:c2:75:02:b9:fd:f8:
75:4d:2d:30:dc:69:bb:08:8c:3a:a6:f3:bd:cd:97:5c:b7:49:
4a:e0:28:17:e3:82:4d:cf:0b:98:7b:75:77:10:eb:d4:a1:23:
20:29:45:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net