Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/u5grIZWsM8V-tAHbtKtyMrwToNU.roa
File: u5grIZWsM8V-tAHbtKtyMrwToNU.roa (raw, json)
Hash identifier: SgJL7BS0zkWOubaOtU4rG+reX7W6MqOgE4ywVhYViQs=
Subject key identifier: BB:98:2B:21:95:AC:33:C5:7E:B4:01:DB:B4:AB:72:32:BC:13:A0:D5
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3CFE093F2FCCFD2E2E269E2B595A8
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/u5grIZWsM8V-tAHbtKtyMrwToNU.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215416
IP address blocks: 5.134.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:cf:e0:93:f2:fc:cf:d2:e2:e2:69:e2:b5:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb982b2195ac33c57eb401dbb4ab7232bc13a0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:03:b8:2f:44:26:f1:92:fc:e0:13:ec:9f:
34:3d:a8:9b:57:a9:42:81:cb:29:74:5d:d5:64:a7:
8c:35:2e:b4:b7:50:47:57:ca:49:c9:a7:5f:bf:42:
35:5d:eb:60:cf:54:92:e3:56:2d:29:0a:00:eb:6f:
95:83:b8:4a:31:2a:0f:af:1d:c3:0b:7f:89:f8:74:
c5:fd:33:cb:e9:0b:ad:92:ab:ee:5d:99:5c:04:66:
00:89:1c:93:05:5c:78:ff:2f:f7:83:2e:7c:cc:c6:
bf:ce:56:a8:d7:1f:bc:0c:1c:27:3d:35:bf:be:f1:
68:2e:15:3e:77:71:20:59:d6:2d:3b:f6:23:40:82:
fb:1e:8a:fe:2b:56:33:d2:e6:13:e3:2b:40:96:06:
9f:b5:ac:a1:cb:8e:a3:fc:c1:18:b6:39:5e:8b:0d:
85:e6:d3:d5:76:e9:77:c5:04:83:63:a3:ee:06:3c:
84:3e:c0:82:ce:90:e1:ea:2c:50:ab:fd:7f:0d:a7:
b3:aa:ef:55:8b:3b:a9:3c:0f:e4:4f:06:13:d4:e4:
24:f8:45:2c:b2:70:c2:59:e0:2e:62:44:58:b5:5a:
c1:6f:42:43:22:00:c4:9b:05:7d:bf:9b:9e:c3:a4:
61:5a:de:9b:ad:77:c3:3d:55:af:85:93:11:2f:36:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:2B:21:95:AC:33:C5:7E:B4:01:DB:B4:AB:72:32:BC:13:A0:D5
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/u5grIZWsM8V-tAHbtKtyMrwToNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.87.0/24
Signature Algorithm: sha256WithRSAEncryption
10:1a:8f:61:04:c5:4a:0b:13:04:bd:3f:7d:86:61:74:55:ee:
76:3b:6c:43:85:c4:b3:68:eb:78:26:06:1a:25:1b:95:20:26:
18:fc:e8:13:9a:c7:cf:a5:fc:ef:2b:57:2c:b0:0a:03:d6:8f:
e5:10:5d:a2:b4:2c:a2:2a:aa:70:f1:4c:70:a0:90:81:ac:d3:
f1:98:55:a0:dc:bd:c8:6b:42:f7:e7:15:2f:0a:14:17:37:97:
ff:d6:ef:92:76:ae:2a:bc:af:86:a3:d9:b6:93:35:0f:b5:39:
6b:1e:c1:8f:17:fa:2a:cd:6e:5c:8b:d9:0c:be:22:6b:9d:a2:
fa:cd:a9:6b:58:23:1b:de:e1:f4:09:9f:e1:a7:20:47:d9:16:
4a:cc:b7:50:2b:0b:9e:15:d6:5a:54:9a:86:94:c8:ca:41:ae:
cd:3e:03:64:49:ea:05:97:6e:3d:62:4f:dd:4a:1d:fe:6c:91:
ef:b6:c0:d8:5c:ac:9f:75:cf:3d:5f:36:04:35:ce:b7:4e:06:
c7:dd:dd:39:07:68:77:f5:e2:c6:9a:82:62:2f:5f:ab:31:e6:
cb:b1:c5:9d:ec:9a:bf:2a:7b:3b:9c:f0:6c:a7:0f:ff:8c:44:
2c:62:ba:37:c9:10:8b:67:9b:8f:ab:87:ff:aa:ef:2b:64:42:
5e:98:03:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net