Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/m5KZhzzaNthG3-jJZx8ybRo6T08.roa
File: m5KZhzzaNthG3-jJZx8ybRo6T08.roa (raw, json)
Hash identifier: dOhQkYa1UdpFDRYtx3XLJtq4X36EuQIsCs1JyC8nwvU=
Subject key identifier: 9B:92:99:87:3C:DA:36:D8:46:DF:E8:C9:67:1F:32:6D:1A:3A:4F:4F
Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial: 019538878E1EDD6C31C7BB51E8D98E140120
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/m5KZhzzaNthG3-jJZx8ybRo6T08.roa
Signing time: Mon 24 Feb 2025 15:16:02 +0000
ROA not before: Mon 24 Feb 2025 15:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.253.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:87:8e:1e:dd:6c:31:c7:bb:51:e8:d9:8e:14:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Validity
Not Before: Feb 24 15:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b9299873cda36d846dfe8c9671f326d1a3a4f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:ea:b8:50:78:a7:1d:3c:44:75:71:b5:29:
2a:6c:26:5c:6f:d0:71:c2:07:35:60:9f:88:eb:bb:
e0:bb:66:5b:e0:a6:9d:d2:05:ef:30:8c:a1:9c:02:
7e:a1:dc:03:4a:62:dc:38:6f:af:84:67:60:f0:87:
d0:5d:10:3a:70:4d:33:c9:7a:84:1f:9b:a2:54:5b:
2c:cc:5b:fd:52:b0:8d:33:9e:82:44:eb:26:b6:54:
35:6f:02:d6:62:4a:ca:29:e6:30:fa:82:96:f7:e8:
67:55:c0:f9:32:e5:c9:17:f6:60:c3:bf:d1:bc:5e:
a0:5f:ec:6c:5f:fd:11:2a:f7:9b:12:ff:63:d7:96:
1f:87:c6:e1:25:3a:b8:4d:7c:d4:53:09:17:cc:ce:
b2:3b:03:94:56:45:2f:f2:34:22:e2:8b:8e:bd:70:
55:d9:96:55:be:27:55:af:1a:89:d0:56:68:3c:be:
d5:94:b9:19:5c:43:6c:66:40:0f:65:cb:da:c0:83:
aa:75:4b:0b:73:56:5c:cb:cf:60:f7:cf:12:9f:75:
24:dd:de:47:de:bb:8b:94:73:17:b8:9a:65:ea:58:
1a:ba:be:1c:b2:49:21:10:29:c5:92:f6:42:47:74:
c8:8b:b5:2f:97:db:7d:25:f9:b6:a3:31:45:ec:0f:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:92:99:87:3C:DA:36:D8:46:DF:E8:C9:67:1F:32:6D:1A:3A:4F:4F
X509v3 Authority Key Identifier:
keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/m5KZhzzaNthG3-jJZx8ybRo6T08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
30:0d:1b:c3:d6:c7:ca:e6:e7:b9:01:45:fa:14:21:fb:77:0b:
50:6f:a3:f9:d5:bd:e2:2f:34:58:a3:ce:c8:69:61:b8:48:ac:
4c:92:75:01:90:69:1a:d8:ae:84:2c:8a:e3:83:28:95:94:9b:
4d:71:c8:79:26:5d:cd:cb:63:31:5a:76:01:ff:8c:bb:78:9e:
c7:5a:93:9e:3b:8a:49:30:05:fe:c7:0d:ba:70:d7:1d:ac:fa:
8a:94:ec:a5:08:ec:f4:52:23:f5:e4:7c:b3:e3:ee:04:4c:4e:
12:c7:f3:7e:64:de:4f:31:61:9d:d7:20:e1:2c:31:db:be:f1:
cd:e3:05:73:79:f6:f9:26:72:f7:f8:4e:2b:4a:6b:33:60:03:
b6:5f:85:93:c7:8f:23:f7:b2:b8:07:d5:17:de:e9:c8:b1:7c:
dc:b7:66:cb:ed:00:90:a5:d8:28:8b:a3:b0:b2:aa:18:05:0c:
6a:05:25:ac:f9:15:7e:6c:91:aa:7a:8c:09:6d:79:57:33:c1:
b7:18:28:9f:5b:2a:64:cb:62:51:43:f5:b9:df:2b:e1:56:a1:
20:a0:37:76:58:a2:b5:69:91:5e:32:8d:33:04:42:7c:dd:0f:
92:39:52:45:fe:34:f6:35:63:7d:68:24:a8:17:e1:6e:fa:77:
66:0b:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:49 2025 by rpki-client on console.sobornost.net