Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/yg4sGgC5KBzP9wrpfNuvhuojK2M.roa
File: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (raw, json)
Hash identifier: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=
Subject key identifier: CA:0E:2C:1A:00:B9:28:1C:CF:F7:0A:E9:7C:DB:AF:86:EA:23:2B:63
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0194258F5CAEC391543C4DC8FF084DEA60F6
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/yg4sGgC5KBzP9wrpfNuvhuojK2M.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198731
IP address blocks: 5.1.32.0/21 maxlen: 21
81.173.40.0/23 maxlen: 23
85.184.224.0/22 maxlen: 22
185.45.28.0/22 maxlen: 22
185.64.232.0/22 maxlen: 22
2a00:bc40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5c:ae:c3:91:54:3c:4d:c8:ff:08:4d:ea:60:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca0e2c1a00b9281ccff70ae97cdbaf86ea232b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d3:03:a5:ff:60:27:6d:20:8a:ca:8c:67:6d:
5e:8f:fa:1c:49:11:0a:9d:41:bc:bb:d3:86:d2:c0:
25:27:d9:43:5d:cf:61:94:2f:33:7f:f4:de:13:91:
42:8e:b7:4d:7c:84:5c:48:d3:c5:a1:48:c7:eb:30:
e9:e4:b1:3d:c2:3e:0f:b8:ff:00:76:2a:f0:47:5c:
84:90:34:89:c6:db:6a:c9:0b:0d:82:1c:ba:8d:d4:
3b:99:d7:31:86:36:83:4c:5b:d2:11:5f:aa:9e:04:
f5:35:ec:c9:f2:79:7e:0a:b8:a4:d8:09:f4:55:35:
7e:43:c8:45:37:f8:d3:be:32:b9:b0:c1:c0:86:74:
8b:5a:c0:68:da:3c:bc:ef:21:6e:a3:f5:38:81:8e:
4c:d5:9b:29:5f:ee:28:17:b7:42:56:86:9d:9f:91:
dd:d8:27:35:a3:93:9a:27:86:a2:f1:2f:dc:77:8a:
50:7b:93:95:50:fc:23:82:99:e4:17:a3:61:57:0e:
ac:09:b7:43:13:cd:50:4b:6a:72:11:3a:6d:12:e0:
45:64:8d:fc:57:f3:32:b8:4c:a8:dc:8b:dd:b8:f1:
cf:80:36:bf:4b:41:c4:07:31:3e:44:52:dc:41:77:
34:d6:5d:37:e5:ad:d1:a7:81:f6:ae:03:1c:ad:a4:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0E:2C:1A:00:B9:28:1C:CF:F7:0A:E9:7C:DB:AF:86:EA:23:2B:63
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/yg4sGgC5KBzP9wrpfNuvhuojK2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.32.0/21
81.173.40.0/23
85.184.224.0/22
185.45.28.0/22
185.64.232.0/22
IPv6:
2a00:bc40::/32
Signature Algorithm: sha256WithRSAEncryption
6e:fb:23:dc:ff:e1:aa:a9:b9:25:74:07:e1:10:31:28:87:62:
87:ee:b7:12:42:42:d0:10:c9:4a:b4:4e:2b:e2:6e:9d:ba:89:
68:b5:cb:29:41:95:b4:ae:50:d4:67:96:a0:ac:c8:55:4c:84:
dd:2d:9e:94:02:6d:a1:5e:c6:92:cf:1e:ca:18:a2:73:5e:ca:
7e:82:0e:17:2d:90:e4:ea:a9:62:fc:ae:4c:42:ff:e3:a5:af:
06:05:a6:f5:0a:e4:cf:30:b2:f1:87:af:08:3a:1a:32:e5:ef:
98:2e:b2:e8:b7:fc:cf:46:4c:68:cd:c6:aa:a4:e1:d1:54:2e:
7b:82:02:0d:85:92:bc:3c:09:66:bc:84:5b:8c:b5:08:ff:82:
e6:6a:18:a1:8b:d6:20:47:fc:13:ab:55:00:be:69:3b:38:82:
e3:13:e0:80:b5:e2:0b:37:24:94:58:a2:c4:4a:5b:bb:1a:d9:
45:86:b3:ea:86:51:ac:6f:70:d3:a6:55:a4:7f:76:dd:56:2e:
5b:81:6e:8a:fe:89:fa:f8:2d:98:76:ee:6e:21:c9:cf:98:19:
5d:74:e3:f0:34:8f:26:33:4f:1c:89:4e:9f:00:cc:13:d5:33:
7c:e1:78:27:3b:32:3e:39:2b:3e:f5:a2:76:1f:90:ef:2b:b0:
22:3e:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net