Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/5FhhHCPWa4-v3je2lNasEQ6KBEA.roa
File: 5FhhHCPWa4-v3je2lNasEQ6KBEA.roa (raw, json)
Hash identifier: egC6kLz81t2QzmqWPKo0ntXC4597XNyXx7ou4kY8DDw=
Subject key identifier: E4:58:61:1C:23:D6:6B:8F:AF:DE:37:B6:94:D6:AC:11:0E:8A:04:40
Certificate issuer: /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial: 0194252180DDF3706BF19FDA8B99E41CE913
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/5FhhHCPWa4-v3je2lNasEQ6KBEA.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211316
IP address blocks: 147.12.16.0/20 maxlen: 24
185.101.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:80:dd:f3:70:6b:f1:9f:da:8b:99:e4:1c:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e458611c23d66b8fafde37b694d6ac110e8a0440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:fe:94:63:a9:73:3a:f1:35:2b:79:8a:48:
09:2e:ec:67:4c:c1:51:52:22:d7:16:ab:26:64:1f:
11:f7:e4:2e:39:fd:1b:5c:71:82:9c:65:2a:5d:52:
8e:7b:6f:51:be:bd:6a:5f:da:06:03:f7:c5:ac:20:
bd:88:18:7d:f9:e1:ea:d2:62:7e:bd:6e:6a:0c:10:
0a:11:56:e3:f0:70:21:8a:1e:1c:7c:b1:30:85:05:
1e:3b:46:74:70:09:bb:c9:28:24:65:4a:4b:45:df:
77:e5:5b:a9:34:a8:ef:3e:cf:31:b2:f5:93:bf:a4:
fe:f3:80:02:17:99:43:48:04:c7:33:2b:bd:c1:3f:
29:28:1b:d2:22:ad:3f:06:33:64:89:b9:d7:f3:57:
f8:d1:84:1f:60:79:f5:36:b5:96:95:19:df:cd:d6:
f6:a6:32:4b:28:22:0e:83:15:d6:f7:fa:06:be:43:
b6:a7:93:82:ef:2b:cd:ce:39:9d:bd:ab:f2:dd:f4:
fe:b4:7c:a0:14:3c:0a:c7:ac:ac:7c:41:77:d5:c6:
a3:4f:10:42:be:a0:f6:80:77:04:ab:fa:26:1e:f0:
5d:5f:88:bd:17:d9:80:e4:6c:42:18:b2:41:6b:4e:
18:a2:2c:08:f8:d6:6a:bf:97:21:05:a4:49:49:63:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:61:1C:23:D6:6B:8F:AF:DE:37:B6:94:D6:AC:11:0E:8A:04:40
X509v3 Authority Key Identifier:
keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/5FhhHCPWa4-v3je2lNasEQ6KBEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.12.16.0/20
185.101.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:6e:3a:96:71:22:10:a8:df:c1:4b:5d:7c:aa:fa:ba:95:0e:
38:01:05:e0:11:1a:ad:51:05:7f:41:8f:a9:88:ad:0d:d1:79:
7d:1c:34:ee:1e:7d:65:63:d1:b5:e4:89:54:da:80:93:20:62:
96:2c:c0:8a:c5:ee:7c:7d:05:ad:60:65:58:2d:2a:fb:e8:ef:
82:54:89:e8:17:1e:77:26:8e:f3:43:15:d7:eb:8b:9a:71:b7:
d0:1c:ff:e9:4f:15:75:75:76:39:06:e4:0d:97:56:75:63:b0:
d2:44:b2:94:a4:fb:ce:50:fc:44:5a:75:58:fb:4b:66:60:c9:
fd:e4:e4:85:45:6e:7b:3c:89:78:9f:1e:db:50:b3:cb:13:8a:
18:18:0a:30:80:c6:8a:f7:99:83:1e:e9:43:db:de:60:44:f4:
da:31:f3:90:8b:e5:8b:23:c9:60:a7:f0:4f:01:3c:74:1c:b1:
44:45:d0:3a:0b:32:f3:d8:bc:01:e3:68:99:3f:29:bc:cb:2c:
24:c1:30:64:fe:f2:5d:87:97:98:a0:f1:24:13:64:b5:6f:aa:
55:a1:cb:e0:95:22:4d:15:61:a4:6a:4c:45:fd:bf:47:75:3b:
ad:c0:a3:c6:2d:90:6b:37:2a:72:a8:2b:0e:d6:11:e3:17:e1:
e3:00:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:05 2025 by rpki-client on console.sobornost.net