Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/jjRAP4ezNIauFNs_aNj_HcTXDg0.roa
File: jjRAP4ezNIauFNs_aNj_HcTXDg0.roa (raw, json)
Hash identifier: o0gv44QEwsOJL94wmCAslkIjvRv25nKBwW1R2foY/Ys=
Subject key identifier: 8E:34:40:3F:87:B3:34:86:AE:14:DB:3F:68:D8:FF:1D:C4:D7:0E:0D
Certificate issuer: /CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Certificate serial: 01941FFA52549EB3A1281D1194025189FE78
Authority key identifier: 28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/jjRAP4ezNIauFNs_aNj_HcTXDg0.roa
Signing time: Wed 01 Jan 2025 03:48:06 +0000
ROA not before: Wed 01 Jan 2025 03:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60475
IP address blocks: 5.253.196.0/22 maxlen: 24
5.253.196.0/24 maxlen: 24
5.253.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:52:54:9e:b3:a1:28:1d:11:94:02:51:89:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284e5eb112e13a42703dbb387ba577a2e793ac3a
Validity
Not Before: Jan 1 03:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e34403f87b33486ae14db3f68d8ff1dc4d70e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:55:19:1b:33:21:f4:ce:09:73:7a:85:07:
8c:82:98:08:00:19:11:63:01:63:7d:2a:7b:c9:99:
7c:e3:74:c9:1c:63:f6:f0:3e:14:df:31:41:b8:48:
cc:39:29:ae:a6:32:6f:7c:ce:96:e9:15:6b:2d:dd:
29:fe:29:8a:56:f3:f1:ec:cf:ad:16:4a:1d:15:c6:
a3:50:48:ab:81:c5:89:fb:56:60:ba:7e:fd:f5:dd:
eb:52:cf:7b:9e:67:07:d6:b2:ce:5d:04:42:74:6b:
cc:5c:16:db:2e:e0:36:0b:18:43:50:34:8c:cc:c7:
82:a1:62:7d:13:8b:b0:e7:4b:21:9c:f7:f0:2f:b7:
59:49:fd:0c:56:a4:e5:86:e0:e8:47:e4:33:41:13:
57:8d:8b:07:18:69:fe:90:40:28:e9:9f:46:c5:b7:
21:64:1f:dc:8d:04:90:30:ac:1d:f7:8e:fc:7d:80:
0f:a5:d9:fa:62:ac:cb:d0:e5:b7:9e:54:88:0f:b8:
d8:78:33:38:7a:70:1d:59:53:62:33:8e:fb:f8:93:
21:d0:ae:e1:87:e4:b7:da:72:43:4f:89:10:99:e1:
d2:fb:a9:1c:e1:0d:92:27:79:c4:fd:d7:47:a5:ee:
a8:21:8d:9a:85:b0:9e:7b:9b:1f:b3:95:62:7b:58:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:34:40:3F:87:B3:34:86:AE:14:DB:3F:68:D8:FF:1D:C4:D7:0E:0D
X509v3 Authority Key Identifier:
keyid:28:4E:5E:B1:12:E1:3A:42:70:3D:BB:38:7B:A5:77:A2:E7:93:AC:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KE5esRLhOkJwPbs4e6V3oueTrDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/jjRAP4ezNIauFNs_aNj_HcTXDg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6def1-f425-49a5-aaaf-07cbeddd6418/1/KE5esRLhOkJwPbs4e6V3oueTrDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.196.0/22
Signature Algorithm: sha256WithRSAEncryption
65:2e:24:db:3f:17:cc:46:cc:0b:60:28:fc:4f:34:ed:43:3c:
2e:61:fe:b7:a4:01:b3:32:df:6d:6a:b4:92:b3:ea:f5:42:f7:
42:3d:f5:99:69:27:ac:6a:c1:62:08:2d:4b:96:7f:27:64:54:
75:7e:ef:d4:87:ea:7c:99:43:43:6f:b2:e6:08:71:c8:f3:6c:
d2:bd:2c:8f:a2:be:6a:3b:0c:87:3b:4a:e1:cd:44:3a:1e:3e:
6e:46:85:01:2d:94:3e:37:29:05:fa:61:78:19:42:d9:ee:f2:
7d:45:73:20:36:39:40:14:10:39:f6:c4:af:b1:91:d3:dd:cc:
c1:7b:2f:d7:68:9b:4f:f1:01:69:ab:51:25:fa:d2:0c:72:b4:
1e:8d:64:30:c3:1d:f4:99:05:9b:81:2e:c8:e8:13:93:55:1f:
4e:68:1f:78:88:0d:38:bb:fb:d7:07:6d:96:91:29:1d:56:6b:
5f:49:e9:c2:a6:9f:b1:85:f5:6e:c4:38:6a:ce:cd:72:c9:0a:
78:4b:87:3e:bc:5f:1d:2d:42:16:d8:fe:7f:4d:68:89:74:4e:
81:26:14:01:6f:91:cf:b4:01:54:95:5b:4e:72:70:06:59:32:
1d:a4:6a:96:9c:a3:44:cb:d3:92:0b:25:04:61:c5:d4:97:d4:
1d:3d:7a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:57 2025 by rpki-client on console.sobornost.net