Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/Xjz46GAzHTdy9Og4DKomwuVi-1g.roa
File: Xjz46GAzHTdy9Og4DKomwuVi-1g.roa (raw, json)
Hash identifier: NqL6rYTZkhuuc0nFfTByZAzgwSO1D7DNJ/FzmVF0OjQ=
Subject key identifier: 5E:3C:F8:E8:60:33:1D:37:72:F4:E8:38:0C:AA:26:C2:E5:62:FB:58
Certificate issuer: /CN=5140b5cb5986084126f68d6032316d3b1b57696e
Certificate serial: 0194206846BDA30276C534DF93C6AE89D1CB
Authority key identifier: 51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/Xjz46GAzHTdy9Og4DKomwuVi-1g.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199462
IP address blocks: 185.101.76.0/24 maxlen: 24
185.101.77.0/24 maxlen: 24
185.101.78.0/24 maxlen: 24
185.101.79.0/24 maxlen: 24
2001:67c:11bc::/48 maxlen: 48
2a06:1b80::/29 maxlen: 29
2a06:1b80::/32 maxlen: 32
2a06:1b81::/32 maxlen: 32
2a06:1b82::/32 maxlen: 32
2a06:1b84::/32 maxlen: 32
2a06:1b85::/32 maxlen: 32
2a06:1b86::/32 maxlen: 32
2a06:1b87::/32 maxlen: 32
2a06:1b87:100::/48 maxlen: 48
2a06:1b87:200::/48 maxlen: 48
2a06:1b87:300::/48 maxlen: 48
2a06:1b87:400::/48 maxlen: 48
2a06:1b87:500::/48 maxlen: 48
2a06:1b87:600::/48 maxlen: 48
2a06:1b87:700::/48 maxlen: 48
2a06:1b87:800::/48 maxlen: 48
2a06:1b87:900::/48 maxlen: 48
2a06:1b87:a00::/48 maxlen: 48
2a06:1b87:b00::/48 maxlen: 48
2a06:1b87:c00::/48 maxlen: 48
2a06:1b87:d00::/48 maxlen: 48
2a06:1b87:e00::/48 maxlen: 48
2a06:1b87:f00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:46:bd:a3:02:76:c5:34:df:93:c6:ae:89:d1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5140b5cb5986084126f68d6032316d3b1b57696e
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e3cf8e860331d3772f4e8380caa26c2e562fb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:75:c0:8a:66:3d:e6:33:25:28:7a:0f:47:
f6:35:7d:e7:9d:40:86:0d:08:95:54:b3:d0:84:c0:
dc:2a:97:d7:87:03:13:19:f4:c5:30:28:e7:b2:89:
ff:01:4d:d2:55:a2:e1:75:5b:47:30:6d:14:e4:93:
51:7a:2c:30:db:a1:c8:56:87:b4:59:4a:16:99:78:
ce:65:74:dc:f3:4a:32:e3:dc:35:67:b2:69:85:cb:
0e:ff:9d:f5:d2:06:b6:22:63:06:87:0c:a4:37:50:
f5:3b:aa:a7:59:3b:da:a4:5d:17:fd:96:0a:d7:72:
72:27:45:b6:32:21:a9:d2:bf:a8:d4:8a:f0:c2:27:
af:6f:77:f8:83:de:17:88:06:1a:68:c5:37:e1:46:
1f:6b:86:10:63:7d:74:4e:01:b3:2d:39:26:00:02:
8c:a8:88:a8:6b:cc:45:e0:90:d9:3a:02:94:cf:56:
42:27:b5:f6:92:af:96:0b:c0:d7:ba:4f:2a:70:85:
40:ab:01:70:a0:96:f8:b3:55:0e:61:8c:08:59:70:
4c:4d:84:58:be:91:a6:f6:b4:e4:34:76:5c:ce:32:
c5:2a:93:9d:b6:3d:e3:38:e6:8a:ae:5a:b1:24:48:
57:75:47:b6:8f:e6:c9:bd:a3:14:d1:0f:5b:cc:46:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:F8:E8:60:33:1D:37:72:F4:E8:38:0C:AA:26:C2:E5:62:FB:58
X509v3 Authority Key Identifier:
keyid:51:40:B5:CB:59:86:08:41:26:F6:8D:60:32:31:6D:3B:1B:57:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UUC1y1mGCEEm9o1gMjFtOxtXaW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/Xjz46GAzHTdy9Og4DKomwuVi-1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d19f2d-9659-48b1-b1e8-de13a552df63/1/UUC1y1mGCEEm9o1gMjFtOxtXaW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.76.0/22
IPv6:
2001:67c:11bc::/48
2a06:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
01:85:d0:e3:0c:70:b0:8b:3a:0e:de:c4:3b:f8:94:ea:83:04:
28:96:b6:72:0b:87:9d:3e:c9:15:6f:9f:65:1f:88:e9:31:8c:
4e:48:fa:68:2b:1e:e2:eb:6c:1e:b3:73:bf:e8:87:dd:0e:fe:
7c:bf:00:32:68:69:62:60:a7:0e:4d:4c:bd:9f:83:0a:71:68:
f0:28:f6:24:d6:a9:8e:2e:a5:45:cd:67:ee:b1:78:22:a9:11:
52:8f:2e:4e:0e:ca:0d:88:34:8c:92:7d:6d:f7:99:c2:b6:36:
c1:f9:ad:d5:8e:ef:03:31:1a:87:fa:20:f7:1a:98:c7:91:4d:
90:4e:20:2e:2a:10:67:a5:9d:4f:0c:45:ec:d6:d6:35:78:2e:
b5:9e:81:4d:50:51:61:79:73:7f:60:5b:8c:af:47:f2:a8:ff:
b2:46:3a:0d:3e:83:5e:80:19:d3:8a:32:dd:a8:50:ce:15:e0:
cc:c8:2b:71:a9:08:fb:03:d7:d8:45:d3:07:c5:ff:d4:d6:22:
2c:73:70:b3:d2:e0:cb:d5:0d:0c:fb:b7:46:9d:73:77:cd:f9:
3e:f3:79:b3:cf:31:8e:32:f0:99:b5:b1:15:70:46:1f:63:c3:
2a:82:38:b8:94:8f:b3:14:57:19:b0:74:88:00:26:e6:dc:39:
fd:37:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net