Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/puq4xJLJj3Ye9-l7Qm1pQoi476s.roa
File: puq4xJLJj3Ye9-l7Qm1pQoi476s.roa (raw, json)
Hash identifier: G2Li6+AfeOAUSmi7wpAtNBu3kmiVbttw5S1BoI/oOJg=
Subject key identifier: A6:EA:B8:C4:92:C9:8F:76:1E:F7:E9:7B:42:6D:69:42:88:B8:EF:AB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0195F0C49583D8703C240A97B5932ED5110D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/puq4xJLJj3Ye9-l7Qm1pQoi476s.roa
Signing time: Tue 01 Apr 2025 09:52:49 +0000
ROA not before: Tue 01 Apr 2025 09:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211001
IP address blocks: 104.239.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:c4:95:83:d8:70:3c:24:0a:97:b5:93:2e:d5:11:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 1 09:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6eab8c492c98f761ef7e97b426d694288b8efab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:fa:b0:e7:8b:d8:a0:55:f1:43:08:b3:94:
1e:13:d6:18:2a:1d:6d:00:ec:3d:d2:54:07:a3:e9:
4d:f9:65:a3:b2:47:de:01:80:e5:6c:3f:80:56:d7:
b5:d6:b0:8a:0e:8c:bb:76:96:f0:e2:5f:a5:bf:5d:
e6:cb:e6:ec:d5:4c:e9:4b:90:77:df:88:eb:b7:13:
1d:62:97:4b:3c:23:f3:ff:d3:8f:8b:f5:52:96:97:
60:8d:45:b0:f7:22:97:30:67:9d:5a:69:d3:eb:4c:
28:33:f7:60:0e:54:c4:05:5c:4a:ef:98:a5:ef:a7:
02:05:a6:97:b1:e1:b4:2a:31:be:36:fb:b6:85:2e:
98:36:d9:d3:20:74:4a:e0:16:61:a3:34:9e:4c:b0:
63:5c:38:b1:12:78:25:69:5c:3e:88:74:d6:2a:cc:
b8:9e:a6:4e:4e:c0:16:ab:56:1d:f7:2e:7f:e3:22:
49:63:76:e0:2b:07:8b:b2:90:ea:53:c8:88:e9:e6:
6c:7d:52:25:7f:02:e3:f4:d4:03:90:3d:ed:f5:81:
99:94:5a:bc:07:84:27:17:28:e4:55:5a:23:e4:d6:
09:36:32:e1:cb:da:5f:3e:5c:ee:9e:a3:1e:b9:74:
da:bd:50:46:b6:c2:6f:42:42:3c:34:32:fe:e2:9f:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:B8:C4:92:C9:8F:76:1E:F7:E9:7B:42:6D:69:42:88:B8:EF:AB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/puq4xJLJj3Ye9-l7Qm1pQoi476s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.47.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a4:f6:de:4d:4f:d1:08:a3:47:03:17:c8:4d:1a:27:e0:03:
db:47:ab:2e:49:40:6c:d3:06:0e:e1:2c:de:d9:d6:8f:2f:bc:
cf:c4:03:b9:a0:4c:3f:98:f7:31:57:d3:52:0f:eb:be:59:06:
7d:e8:b5:ca:7d:8d:e7:fb:49:51:a3:10:91:4d:7e:b6:aa:a7:
f0:ef:04:1c:b2:36:1e:cf:bd:f4:80:2a:80:01:ce:81:af:e5:
ab:31:7d:89:c5:ba:fc:97:f3:61:cd:0a:3f:1c:e5:78:8f:df:
55:2e:75:7f:b9:cb:06:84:8c:ed:11:53:7a:94:7e:34:55:56:
2d:76:06:44:2d:50:c3:06:36:29:ee:c7:16:b1:ed:98:40:ec:
cd:80:ff:80:10:81:c6:9d:ff:d3:ee:77:5e:56:5a:14:5f:e4:
5f:79:24:33:6e:ca:f0:e2:8a:89:91:a1:21:24:eb:25:02:d8:
a4:87:88:e7:aa:92:6c:82:72:de:24:23:26:ab:50:2d:0b:25:
97:37:36:15:13:2e:3a:79:f8:ec:ea:de:82:37:24:b9:87:68:
fc:72:ab:c9:3b:17:ab:a7:d5:b7:7d:7c:35:37:f6:2e:c5:b7:
bb:13:c0:f6:f6:ab:b9:68:e4:7b:58:e2:95:50:42:20:4c:06:
8a:85:0b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:29 2025 by rpki-client on console.sobornost.net