Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/dEKlYH2cmj45z4x_T9UVuavDVhs.roa
File: dEKlYH2cmj45z4x_T9UVuavDVhs.roa (raw, json)
Hash identifier: Ol+cnfARbBRUjhEvoMIs6jgxKtNHaBvPnq4IVRHSiu4=
Subject key identifier: 74:42:A5:60:7D:9C:9A:3E:39:CF:8C:7F:4F:D5:15:B9:AB:C3:56:1B
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 019423D7029FADF247639DD73D0E5E01473D
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/dEKlYH2cmj45z4x_T9UVuavDVhs.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211325
IP address blocks: 92.61.180.0/22 maxlen: 22
185.119.240.0/24 maxlen: 24
185.119.241.0/24 maxlen: 24
2a13:f480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:02:9f:ad:f2:47:63:9d:d7:3d:0e:5e:01:47:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7442a5607d9c9a3e39cf8c7f4fd515b9abc3561b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:1c:de:2e:52:49:2c:7b:b2:38:46:96:d5:
a1:5d:88:b3:8c:8b:47:b1:bb:a7:88:02:4f:c5:97:
92:ef:1f:3c:e2:3a:41:bd:cb:f5:e7:5e:01:7e:02:
87:16:c3:f2:cf:cd:4e:d2:0b:83:2f:29:21:3c:76:
ee:a5:9e:f9:a3:98:a4:3c:18:ec:b7:e3:53:fb:be:
c1:36:6c:0f:3c:21:b9:62:9a:d3:80:25:28:e4:6c:
5c:d6:1f:0a:8e:d8:ce:eb:c7:3a:0f:32:13:f0:c4:
7b:c6:7e:db:ad:d7:15:74:b7:51:69:0e:f8:f9:b9:
23:eb:d0:46:03:e1:75:f4:df:21:a8:a5:c7:77:5f:
19:75:b8:de:b5:eb:f8:47:9c:69:65:40:a0:b5:a9:
ec:81:da:97:c2:3c:45:78:34:2a:61:f2:69:29:91:
a9:90:71:53:17:57:b6:43:97:4a:44:34:38:13:97:
7e:44:d6:d3:22:ba:69:51:90:76:35:80:d8:90:e9:
0a:69:49:1d:a4:6d:98:6b:f1:8b:11:0e:29:08:a3:
3c:3c:c9:2e:98:41:ed:01:e8:87:fd:3d:9d:f0:ab:
40:f8:ef:f4:5d:46:f2:e9:47:e5:f0:b4:39:8f:7c:
25:16:3b:8e:c0:83:cc:79:de:2a:60:07:08:af:3c:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:42:A5:60:7D:9C:9A:3E:39:CF:8C:7F:4F:D5:15:B9:AB:C3:56:1B
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/dEKlYH2cmj45z4x_T9UVuavDVhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.180.0/22
185.119.240.0/23
IPv6:
2a13:f480::/29
Signature Algorithm: sha256WithRSAEncryption
2a:bb:f3:12:8e:81:fb:81:72:ce:8f:2c:21:91:f2:c9:38:91:
eb:c0:75:30:60:3a:91:8c:cc:fa:d3:62:7d:fc:7a:ff:c4:4b:
4f:6e:18:5b:2a:98:d3:38:59:2b:02:a4:05:67:61:61:a2:6a:
2b:02:27:76:31:22:7e:18:ec:c0:0e:be:52:c0:b9:50:de:64:
bf:d8:0b:0b:2a:71:64:9a:96:f9:03:49:c6:42:87:06:b4:52:
65:30:8d:1e:67:d3:56:c6:a3:34:7c:c6:9a:68:c2:cd:0d:c1:
8f:ab:eb:b2:75:c2:a6:dd:6c:4c:94:89:98:e3:92:03:9b:7c:
ae:a6:3f:86:85:fa:0d:9f:c5:c1:81:5b:f0:18:26:f7:9a:cf:
fb:d9:c3:64:f3:d9:91:82:d8:75:3b:0f:be:15:76:88:6d:ee:
1d:ef:cd:21:6e:3f:9a:d3:43:db:46:dc:dc:c4:ba:e7:38:0e:
f9:c0:fb:f6:cb:fb:65:5e:82:cb:f0:c9:95:03:47:d0:27:83:
67:bb:ea:0e:0d:e8:6f:32:a9:47:37:c5:ed:22:c8:ff:7d:43:
67:d5:67:ae:45:da:0d:28:83:ed:b3:52:18:9e:34:90:39:72:
5d:84:19:d9:e9:cf:24:7e:1c:00:0d:c9:16:2b:0c:12:28:3e:
7d:47:4d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:31 2025 by rpki-client on console.sobornost.net