Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa
File: 0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa (raw, json)
Hash identifier: Jd7eKXaBRsHjAr5MfT0g+jpObBfFUUjm1+l++40pejo=
Subject key identifier: D2:9C:14:58:8F:D9:62:CF:42:D4:79:62:2C:DF:A6:9E:96:38:22:69
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B9AA37C6062996B8AD1C1AC2C582B
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203499
IP address blocks: 5.154.98.0/24 maxlen: 24
109.167.46.0/24 maxlen: 24
151.237.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9a:a3:7c:60:62:99:6b:8a:d1:c1:ac:2c:58:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d29c14588fd962cf42d479622cdfa69e96382269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:3a:ac:a3:15:a6:6b:37:54:5d:20:91:1b:
63:b7:8c:80:cf:2a:f6:9c:54:5b:68:9e:23:15:11:
25:1e:bf:1c:6c:5b:b0:e0:e5:b8:d3:06:d9:28:d3:
f6:cc:1f:8c:b0:29:9d:05:fd:44:8f:47:0c:51:9c:
54:63:75:cd:32:c5:61:3d:a0:8f:d3:a1:18:3a:cf:
cf:aa:80:97:cf:90:7c:77:74:5b:3e:91:4f:df:96:
58:6f:23:3c:53:23:d4:ea:52:c2:0f:51:50:d8:6b:
a5:a8:ea:7b:2a:a9:70:e1:20:6a:09:5e:01:c7:f9:
ff:89:e4:1c:26:59:08:63:4b:d8:b1:99:af:7a:4a:
bd:34:fb:df:6e:59:37:6a:83:d7:3f:d6:27:14:45:
08:ad:e0:ba:33:9f:c4:15:d7:91:a4:79:bb:50:a1:
e9:1e:56:f2:39:03:ad:77:0c:d4:68:55:f6:9f:8b:
4d:a2:56:44:82:ec:91:45:7a:f8:05:e1:d5:f1:7e:
07:b3:b0:12:a2:1f:5a:23:d8:0d:e4:ab:41:96:09:
f5:b4:5e:06:aa:32:9b:32:76:bc:5c:86:87:aa:29:
cf:dc:58:7c:2f:6f:e2:02:88:88:96:13:56:98:f9:
13:21:51:3b:49:a3:31:25:21:47:af:9b:00:54:2a:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:14:58:8F:D9:62:CF:42:D4:79:62:2C:DF:A6:9E:96:38:22:69
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/0pwUWI_ZYs9C1HliLN-mnpY4Imk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.98.0/24
109.167.46.0/24
151.237.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:af:42:28:e9:13:eb:30:b1:70:d1:0a:98:2b:26:89:96:23:
8c:ce:98:74:7f:a1:3f:c7:e3:92:18:eb:02:38:90:23:5f:c9:
7d:a8:89:2b:12:fa:d6:8d:46:3f:09:c7:12:94:82:0a:68:5b:
9a:46:ef:6b:34:25:e3:60:b1:8c:a8:50:df:3f:b7:c9:5a:9d:
e3:84:f4:7b:67:06:2d:7d:0f:29:e9:57:4f:e8:42:dd:64:28:
f9:a7:1a:3c:09:72:3e:93:e1:f0:59:6f:97:6c:80:be:28:56:
04:3e:e3:6c:96:f1:4f:12:0d:97:aa:7a:74:cf:49:f5:ab:e5:
03:f4:d3:fc:6a:9a:ef:bb:c7:2e:07:2e:a1:25:04:4d:a6:9e:
ae:6c:ed:28:79:4e:f4:b1:c9:b0:df:16:35:ec:ed:2c:f8:01:
a3:31:93:22:c1:b3:3b:d7:f3:63:4f:30:8f:5e:80:c9:33:bb:
04:e7:52:29:f8:85:1c:37:c9:02:8b:d4:9b:11:e3:22:c5:32:
5a:49:a4:b1:05:2f:1e:43:fb:b4:61:bf:76:bd:f8:54:26:fa:
98:28:44:bc:e8:4d:a8:ba:38:77:2f:51:0a:fb:c8:ab:95:61:
c1:93:fa:b9:57:4c:8b:99:d3:40:08:7f:b4:1f:5d:ea:4a:97:
62:ac:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net