Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa
File: 5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa (raw, json)
Hash identifier: +MtkJFHMNS/IgvjNh3QorGfog9rrCct1jj019c8Teh4=
Subject key identifier: E6:7A:C6:29:6E:45:45:EA:D1:1D:D3:B5:0F:2D:D5:8A:EA:01:A3:6C
Certificate issuer: /CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Certificate serial: 0194258F918CF3BE4F31D73955D54909D33E
Authority key identifier: 48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44478
IP address blocks: 193.84.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:91:8c:f3:be:4f:31:d7:39:55:d5:49:09:d3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f59bac51d4852d2fc96e8b4cfbb9fff8b4a939
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e67ac6296e4545ead11dd3b50f2dd58aea01a36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:89:32:d3:3d:c0:78:04:d4:c3:6a:79:76:
0c:f7:65:ae:cf:e2:d8:97:25:a2:19:89:3b:31:af:
38:fc:3f:45:3c:d6:7d:48:06:22:e3:c6:ae:2e:df:
e5:63:ad:e9:ed:58:33:a9:74:78:06:8f:fe:32:9b:
6b:30:0d:f6:df:fc:56:0a:5e:84:65:8f:64:1c:d3:
75:81:3f:04:42:89:c1:93:87:11:15:29:be:18:10:
6a:30:6b:73:6f:7a:69:22:89:6a:14:08:f1:36:9f:
01:60:3c:73:8a:bb:88:71:7c:b1:03:65:e2:6d:8a:
a9:69:65:30:98:45:00:92:2e:d6:b5:8f:5f:53:44:
65:8b:d4:27:ac:43:b3:5e:62:32:80:36:91:cd:df:
34:7d:47:93:82:cc:63:2b:79:27:aa:75:4a:bb:71:
6f:5a:68:48:cb:7d:a8:d4:5e:6e:a8:b1:3a:46:e0:
4d:c7:fa:73:77:88:19:c6:36:a2:eb:0e:f5:a5:da:
2c:38:0a:4e:83:d6:b5:7f:9c:3c:8a:75:63:3a:f8:
a7:53:3f:c0:37:23:fe:a1:01:79:d9:c2:d0:53:53:
a7:21:af:07:d7:de:55:8e:04:cf:6b:48:38:13:a4:
72:98:4e:ee:28:cf:78:54:c6:dc:45:46:9b:81:97:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7A:C6:29:6E:45:45:EA:D1:1D:D3:B5:0F:2D:D5:8A:EA:01:A3:6C
X509v3 Authority Key Identifier:
keyid:48:F5:9B:AC:51:D4:85:2D:2F:C9:6E:8B:4C:FB:B9:FF:F8:B4:A9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPWbrFHUhS0vyW6LTPu5__i0qTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/5nrGKW5FRerRHdO1Dy3ViuoBo2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40484c-b99f-4dbb-b5db-8c2eac03df86/1/SPWbrFHUhS0vyW6LTPu5__i0qTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.76.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a3:cf:50:bd:bd:22:b1:fd:28:77:8f:a5:e2:94:94:5f:17:
d2:fa:05:2d:90:e0:04:d5:74:f2:00:ca:38:75:eb:37:e7:27:
d8:cb:77:47:dd:73:c9:02:2c:e7:50:2d:91:d7:7b:c3:84:b9:
e9:fc:dc:68:b8:a1:6d:98:b4:ee:45:7f:67:03:97:23:bb:d9:
f0:a0:2c:bd:d3:98:23:ff:0a:9c:c9:14:3c:f7:26:5c:90:0f:
db:a1:bb:92:d9:12:82:0b:86:83:2e:24:ed:e1:2a:a2:b6:4d:
6b:21:66:84:df:ec:75:55:7e:a8:a8:3d:a7:ad:30:70:3e:ab:
35:7d:ed:e5:73:6f:d7:1e:bc:4f:61:6c:4e:bd:87:80:3e:83:
a6:b4:0b:03:1f:99:74:eb:65:50:96:0f:5b:0f:53:d0:42:5d:
bb:af:f9:e2:01:78:90:a7:c8:43:77:b4:0e:16:f0:b3:50:df:
6b:84:01:f6:21:b5:46:89:30:6a:95:1a:c1:a2:13:5b:51:cf:
26:b7:6d:46:99:5f:35:bc:f8:e2:fb:02:70:9c:a4:57:72:d3:
64:5b:f1:eb:1d:f3:15:14:42:d7:47:24:ea:b5:eb:a7:8d:ec:
49:60:03:eb:8e:1a:ac:cd:f6:38:fc:15:5e:49:eb:f7:6a:9a:
64:fd:4b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net