Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/w5AAaFloCKYaEQzBxuGEgwR95Zs.roa
File: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (raw, json)
Hash identifier: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=
Subject key identifier: C3:90:00:68:59:68:08:A6:1A:11:0C:C1:C6:E1:84:83:04:7D:E5:9B
Certificate issuer: /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial: 019425211677D74C0E170AA762D742CB2577
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/w5AAaFloCKYaEQzBxuGEgwR95Zs.roa
Signing time: Thu 02 Jan 2025 03:48:32 +0000
ROA not before: Thu 02 Jan 2025 03:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47264
IP address blocks: 185.144.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:16:77:d7:4c:0e:17:0a:a7:62:d7:42:cb:25:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Validity
Not Before: Jan 2 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3900068596808a61a110cc1c6e18483047de59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:9a:a4:e6:bb:30:bb:4d:82:bf:3c:c9:2f:
65:5f:2b:09:97:05:96:bc:98:ac:ec:3a:74:71:a2:
fa:cf:39:1b:b3:2d:02:78:ad:df:4d:09:d8:35:ce:
fc:c1:12:76:42:e0:be:0a:db:e8:6d:d8:9b:69:a9:
57:54:a1:bc:ec:05:41:8c:cd:02:13:12:ca:e0:35:
49:f4:02:db:41:a8:0f:68:f8:eb:86:f6:93:c6:b1:
cf:8f:65:47:9e:b1:88:27:ed:45:2a:ca:0b:a0:bc:
53:3e:c0:86:88:5f:d1:8c:0d:2a:07:5f:4a:39:d5:
1d:5a:c7:4c:5d:e8:5c:64:aa:db:3e:78:73:0b:cc:
81:ca:a9:34:ae:4e:e8:03:1a:3b:e4:e9:28:7a:1d:
8b:61:e9:9c:b2:53:41:b4:7b:1c:7a:85:b5:d3:7e:
ea:2e:4f:ed:e9:b9:c9:8e:60:fd:29:7a:1f:4d:5f:
7b:2a:e4:39:8d:fc:f6:bc:2c:4b:a7:75:0e:0b:16:
22:0e:be:d6:78:47:b8:11:a8:07:f1:21:c0:a1:67:
f1:7b:96:f4:d4:81:d5:37:0d:f1:b3:42:19:ba:cb:
2e:4c:ae:30:58:a7:14:f7:48:90:5b:25:3c:9b:a9:
bc:50:22:01:1c:c7:87:ca:3c:62:83:0e:e5:f5:59:
f1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:90:00:68:59:68:08:A6:1A:11:0C:C1:C6:E1:84:83:04:7D:E5:9B
X509v3 Authority Key Identifier:
keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/w5AAaFloCKYaEQzBxuGEgwR95Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f6:36:1b:2f:6c:37:ca:a7:78:01:7d:08:89:78:78:69:82:
97:9c:0b:86:56:2b:53:1f:05:06:7b:07:09:02:da:28:1e:5f:
eb:ff:d6:13:6b:98:ec:d9:6c:09:bf:e0:8c:db:93:2a:59:84:
91:b9:73:b1:78:44:c9:75:aa:ee:9e:bd:dc:97:d6:d2:a8:16:
f7:24:af:94:43:5e:7d:d9:48:78:b9:7a:c2:c5:fe:23:a7:87:
87:04:cc:cf:93:2c:ce:7b:c9:63:ef:03:db:f4:66:01:cb:22:
76:11:dd:1f:64:fe:53:a0:b4:c0:94:36:10:fc:b2:99:a9:1c:
8e:18:ee:83:a7:6b:5f:63:d5:a9:e6:fe:86:60:75:19:12:04:
08:77:9c:c2:53:1d:a2:02:b7:23:18:5b:b3:34:a8:81:b5:91:
e0:5c:02:59:1d:1c:38:ce:7a:2e:4b:1e:bd:bb:c5:31:61:95:
45:39:4c:15:a9:e4:5c:91:01:3c:db:e7:0f:89:fc:54:c9:5c:
87:51:ca:82:27:de:cb:dd:5f:ef:2b:50:48:d7:b7:f8:b9:e7:
b4:de:30:ae:60:aa:84:b7:83:e7:c1:a1:fa:60:cb:e2:8c:6c:
d0:04:05:be:bf:99:cf:85:1a:85:43:ca:47:b4:d7:ce:8e:c7:
d9:be:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:25 2025 by rpki-client on console.sobornost.net