Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/4dgJmFIjsrGv5rSLSqks3SszRsQ.roa
File: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (raw, json)
Hash identifier: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=
Subject key identifier: E1:D8:09:98:52:23:B2:B1:AF:E6:B4:8B:4A:A9:2C:DD:2B:33:46:C4
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 0194228DE6318DA5D9A5804BB857896CEBEA
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/4dgJmFIjsrGv5rSLSqks3SszRsQ.roa
Signing time: Wed 01 Jan 2025 15:48:32 +0000
ROA not before: Wed 01 Jan 2025 15:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199205
IP address blocks: 5.254.184.0/21 maxlen: 21
185.119.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e6:31:8d:a5:d9:a5:80:4b:b8:57:89:6c:eb:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Jan 1 15:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1d809985223b2b1afe6b48b4aa92cdd2b3346c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:19:94:1f:77:d3:f3:93:79:e0:2e:f0:61:
a6:5e:e6:1d:e1:2c:80:31:2f:7f:09:19:77:21:c4:
40:d6:8e:67:d0:3f:be:79:92:0f:44:19:01:1b:10:
04:09:a7:51:f4:b4:dd:97:d2:df:31:de:b0:2e:59:
6d:5a:bf:23:3d:40:89:d4:36:72:45:68:c4:5e:7d:
bc:27:a9:f5:d7:ec:be:db:38:ce:5c:0f:53:a6:55:
ad:b3:02:78:23:d3:1a:b4:bc:98:17:51:2c:b2:78:
78:38:10:73:98:e2:eb:9e:37:9e:44:6c:36:98:5e:
e7:f7:3e:db:b9:64:69:0f:4f:1f:c6:47:c1:7c:d3:
98:fc:0f:2f:80:97:03:76:1d:c7:62:e5:53:45:62:
f0:15:49:db:f8:28:6a:f3:2e:b1:ec:75:c9:c5:8a:
d3:b9:01:07:f3:d2:1d:36:2c:6b:67:56:80:03:bb:
92:ca:29:e0:44:7d:8e:ff:52:1f:87:d4:7c:26:8d:
1f:79:a2:2f:06:2c:33:fc:9b:99:e0:a8:28:55:b0:
1d:3e:e7:0a:f8:61:51:f5:6f:b0:81:e7:4f:42:d3:
f9:41:5c:11:c9:b8:40:e9:97:44:74:0e:9a:f4:b3:
96:ed:c9:25:0c:b2:85:98:e0:a3:4c:2f:30:b2:5d:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D8:09:98:52:23:B2:B1:AF:E6:B4:8B:4A:A9:2C:DD:2B:33:46:C4
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/4dgJmFIjsrGv5rSLSqks3SszRsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.184.0/21
185.119.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:a2:da:f8:e8:78:cc:9b:ad:0b:55:3c:72:33:cd:be:72:cd:
09:4d:d3:83:3f:31:fa:55:18:0f:69:40:37:19:1b:7c:eb:27:
ae:d6:0a:96:ea:b9:c3:23:fd:82:87:b6:17:c4:e1:77:1a:dd:
25:4d:79:d5:69:a0:e1:32:21:af:1d:06:94:12:2e:47:9d:1c:
34:61:1f:04:f6:f3:c8:a1:f0:01:6b:a8:59:f9:73:e3:b5:bf:
00:9f:a7:32:c1:fe:67:18:dc:55:86:1f:b8:79:68:48:d2:f4:
61:89:17:96:20:9a:e9:88:d0:dd:3d:30:84:ee:07:18:fa:c7:
85:f1:ad:cf:41:4b:f5:c4:dd:4c:e9:b1:74:2d:2b:b3:0c:a9:
ec:7a:dc:4e:32:02:94:4e:37:12:df:05:10:aa:9c:2d:63:e7:
94:45:cb:c2:56:e8:91:d2:b4:49:31:7a:b6:f8:e3:83:4d:0c:
ad:9f:15:dc:60:47:90:0b:19:49:87:54:dc:fe:c9:ab:3c:9f:
17:d7:b2:31:00:7b:3d:33:d9:6e:a7:3f:1b:f8:53:a1:ce:82:
50:61:00:34:86:19:6e:c4:92:37:7f:04:f6:ce:93:16:6a:6d:
0b:ec:77:31:c3:b9:f2:6d:72:3a:a4:e1:82:e2:e7:b9:89:98:
17:7b:b3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net