Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/SyALsZDSYtge1NmYRoKzwbP5Vv8.roa
File: SyALsZDSYtge1NmYRoKzwbP5Vv8.roa (raw, json)
Hash identifier: rjh76rxbo7HoAknp3g/P2hhQiBIAvMqHmifN8tVtg/g=
Subject key identifier: 4B:20:0B:B1:90:D2:62:D8:1E:D4:D9:98:46:82:B3:C1:B3:F9:56:FF
Certificate issuer: /CN=3938a81a44127741d949a355a47f3cb599389a78
Certificate serial: 019425FC2CDB4D0F262D3B3D5742E94D48E0
Authority key identifier: 39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/SyALsZDSYtge1NmYRoKzwbP5Vv8.roa
Signing time: Thu 02 Jan 2025 07:47:51 +0000
ROA not before: Thu 02 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211285
IP address blocks: 5.183.24.0/23 maxlen: 24
5.183.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2c:db:4d:0f:26:2d:3b:3d:57:42:e9:4d:48:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a81a44127741d949a355a47f3cb599389a78
Validity
Not Before: Jan 2 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b200bb190d262d81ed4d9984682b3c1b3f956ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6a:2a:a5:c6:f7:b6:ee:a7:18:1b:a2:30:d9:
ec:98:76:4c:ef:c4:65:c6:2c:07:a0:fe:86:69:cd:
61:74:92:08:02:b8:bb:07:29:e4:1a:d7:84:c3:a5:
21:5b:f6:8b:cc:fe:4a:8a:2c:fb:48:46:c1:dd:ce:
ea:c8:be:de:7e:51:0f:93:bf:ba:4b:77:21:4f:12:
ac:b1:c7:cd:38:a6:5f:59:d5:d4:ee:ea:6e:a0:fa:
67:7d:e3:80:ad:f5:8e:76:36:22:22:d9:0b:a5:be:
b9:9a:ff:ee:5e:09:49:9a:2a:23:73:8b:43:95:1b:
32:a5:dd:ea:3e:4b:fb:82:2a:55:42:2e:62:f0:b1:
85:dc:36:dd:b1:a3:6b:27:e7:20:7c:0d:58:07:0f:
e9:90:eb:02:65:5d:9a:3e:71:69:f0:4a:cd:d6:9c:
e0:ef:c6:0b:6b:65:c6:3d:76:3c:d4:45:13:85:b3:
33:a4:ab:ca:e7:c8:ab:91:fc:d4:57:26:2d:5c:48:
cc:32:0f:8e:41:38:96:09:51:01:27:2d:33:1c:f2:
14:34:aa:62:cf:3e:21:35:71:39:f1:44:5b:61:1a:
fd:7c:fb:fe:d3:a0:c7:e9:d3:e4:25:91:db:7c:37:
d7:02:5e:0e:77:ab:da:b2:ca:75:7c:f1:72:bc:48:
ee:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:0B:B1:90:D2:62:D8:1E:D4:D9:98:46:82:B3:C1:B3:F9:56:FF
X509v3 Authority Key Identifier:
keyid:39:38:A8:1A:44:12:77:41:D9:49:A3:55:A4:7F:3C:B5:99:38:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTioGkQSd0HZSaNVpH88tZk4mng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/SyALsZDSYtge1NmYRoKzwbP5Vv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/02cab5-59b4-4d90-a5db-fd214cacfb62/1/OTioGkQSd0HZSaNVpH88tZk4mng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.24.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:a1:49:6d:5d:2d:3e:93:87:67:33:7c:c5:e5:06:66:22:9a:
f5:6f:28:48:ba:2d:6a:c8:c6:b8:cd:dd:06:2a:1e:5d:49:6e:
50:ea:3e:21:b8:b9:32:18:53:c5:27:f7:43:ab:25:ca:c2:a0:
d5:f5:bf:ab:28:d6:fe:ba:d0:2b:6d:53:87:a1:47:b1:f7:da:
bd:a4:2c:15:b9:02:78:9d:0b:13:b8:1a:07:11:4b:01:a8:dd:
91:e2:87:fd:5c:8b:ec:7a:e0:19:67:d5:83:bf:bb:f3:28:5a:
2e:f4:a9:dd:15:25:87:58:4a:40:f1:6f:26:ab:ac:03:04:d1:
82:80:d4:27:cb:7e:03:58:0d:9f:e0:5f:01:8c:c3:5c:fd:4a:
8c:97:9a:9b:48:7f:a0:97:f2:f2:b5:f5:5d:73:d5:c6:9d:95:
63:b4:39:52:09:b1:82:20:c7:d8:4c:a7:56:8f:0f:20:68:f1:
5d:53:0d:06:18:51:24:4f:86:33:25:2f:25:04:17:4b:72:c3:
43:16:30:70:fc:96:49:82:e3:57:35:78:89:f4:68:33:48:e7:
ce:a4:ea:11:4d:7b:7c:7d:02:13:a9:08:23:ce:5f:a0:b7:25:
53:d9:25:79:5e:63:e9:d7:86:70:1d:28:d3:14:8a:b3:c3:fc:
bb:df:88:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net