Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/5ocQoC11UYHE7MAlgaQGWvaczPU.roa
File: 5ocQoC11UYHE7MAlgaQGWvaczPU.roa (raw, json)
Hash identifier: iv7afAQf2xr0bGM68RWq9ferYnOWxEUOxL5FekniOKY=
Subject key identifier: E6:87:10:A0:2D:75:51:81:C4:EC:C0:25:81:A4:06:5A:F6:9C:CC:F5
Certificate issuer: /CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Certificate serial: 019425FD9434C66DF0F57865E19FBF0A5A2E
Authority key identifier: 55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/5ocQoC11UYHE7MAlgaQGWvaczPU.roa
Signing time: Thu 02 Jan 2025 07:49:23 +0000
ROA not before: Thu 02 Jan 2025 07:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8763
IP address blocks: 81.91.160.0/20 maxlen: 20
81.91.170.0/24 maxlen: 24
81.91.172.0/24 maxlen: 24
81.91.173.0/24 maxlen: 24
185.151.140.0/24 maxlen: 24
2a02:568::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:94:34:c6:6d:f0:f5:78:65:e1:9f:bf:0a:5a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b296d6b534fe3a32cc1c3a4e81358f216c93c7
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e68710a02d755181c4ecc02581a4065af69cccf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b7:93:f0:3e:e8:38:a7:8b:a0:4a:f6:07:10:
f7:0d:73:2b:93:47:7d:68:8d:27:3b:67:fe:33:fb:
6b:04:12:6f:8b:16:aa:48:11:f9:9d:78:70:02:e2:
90:c4:70:74:4e:03:41:c5:54:fd:e5:73:40:ce:63:
cb:50:fb:39:74:5f:c4:01:e7:6a:37:93:ba:d0:36:
47:f6:97:e7:55:97:ce:b5:dd:68:95:62:40:1e:fc:
6e:29:6a:c9:77:3b:7d:88:67:69:fd:29:14:2b:8e:
88:58:11:83:55:aa:81:65:63:a2:8a:b6:7b:52:bd:
de:23:69:c0:03:82:c3:41:77:a6:5d:22:57:97:c6:
d8:fe:4e:a6:ce:19:f5:bf:d1:7a:b8:22:0f:9c:df:
f9:31:0d:ad:d6:56:c2:30:17:dc:6e:89:7d:03:80:
b6:91:6e:46:f9:a3:5e:e8:72:95:0a:ae:d0:0d:9b:
c5:f2:7f:96:88:a0:f2:8d:0d:fe:cb:ee:31:a0:96:
d8:cb:b8:10:9b:f8:12:00:26:76:f5:97:26:57:ad:
49:b7:88:fc:3c:3d:f8:ae:8f:28:ff:77:85:28:ad:
0d:66:d0:29:be:5c:13:28:65:9a:41:3c:c3:c6:fe:
27:17:b5:66:b4:5b:7c:f4:7d:27:b0:43:f1:f7:8c:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:10:A0:2D:75:51:81:C4:EC:C0:25:81:A4:06:5A:F6:9C:CC:F5
X509v3 Authority Key Identifier:
keyid:55:B2:96:D6:B5:34:FE:3A:32:CC:1C:3A:4E:81:35:8F:21:6C:93:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbKW1rU0_joyzBw6ToE1jyFsk8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/5ocQoC11UYHE7MAlgaQGWvaczPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d7ab0c-3c22-4c61-a201-dd6cc97c9bdd/1/VbKW1rU0_joyzBw6ToE1jyFsk8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.160.0/20
185.151.140.0/24
IPv6:
2a02:568::/32
Signature Algorithm: sha256WithRSAEncryption
51:0e:a2:c9:ae:06:32:f2:ba:db:e7:4d:e5:e3:cc:1f:d9:a9:
f9:ac:8e:44:78:59:35:52:81:bd:83:c0:bb:fe:7f:2e:45:49:
eb:29:a1:e8:8e:3d:2f:28:52:39:e9:4d:3d:ae:1b:a4:45:11:
f1:56:be:94:40:cf:22:7f:9f:0c:1f:99:90:be:0d:7f:6b:8d:
ee:60:50:06:8e:d3:49:d0:75:c6:59:2a:f8:e5:88:1f:f2:8b:
ef:62:a4:2c:dc:a5:e4:59:be:f7:17:4a:a0:ee:1f:94:f1:6c:
6e:12:74:1d:83:21:e3:ce:be:74:5b:16:dc:30:1f:93:40:4a:
41:15:a8:35:16:c3:35:09:f0:7d:b6:22:ab:ea:7d:15:82:ad:
6e:70:ef:1c:a1:7c:e6:e5:17:f9:17:25:d0:f8:e4:40:2c:6f:
4d:d1:7b:21:4f:1d:1f:6b:e2:20:be:64:fe:ef:81:33:63:bf:
90:11:77:71:26:da:29:90:c9:30:f0:c3:c1:b2:54:bc:98:97:
ae:f2:00:2c:fd:ba:f3:18:c6:91:c8:80:2f:bb:1a:00:08:78:
4e:d4:38:69:ab:59:f8:50:82:5c:82:e6:94:4f:56:6c:fa:4b:
9d:91:e1:e1:94:2e:cc:84:c9:dc:1e:cc:f6:bc:71:11:28:83:
0c:8b:1c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net