Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/54-UEvGfxV4WPcy4WxLxIFxxE-U.roa
File: 54-UEvGfxV4WPcy4WxLxIFxxE-U.roa (raw, json)
Hash identifier: ojna0RnGjI7OjDPWs+roB1Amf6WKyl5pMZi5IPEPWP8=
Subject key identifier: E7:8F:94:12:F1:9F:C5:5E:16:3D:CC:B8:5B:12:F1:20:5C:71:13:E5
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 019420D599B6AB39627074C17E0B8C5AAFBF
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/54-UEvGfxV4WPcy4WxLxIFxxE-U.roa
Signing time: Wed 01 Jan 2025 07:47:36 +0000
ROA not before: Wed 01 Jan 2025 07:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206600
IP address blocks: 195.244.159.0/24 maxlen: 24
212.70.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:99:b6:ab:39:62:70:74:c1:7e:0b:8c:5a:af:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 07:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e78f9412f19fc55e163dccb85b12f1205c7113e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:68:85:75:3e:37:e3:60:5d:85:19:dd:cf:
a4:d7:28:dc:2d:0b:c8:bb:e8:fc:86:b4:ac:31:ec:
41:2d:3a:79:5d:09:15:94:87:33:b3:88:e0:c5:da:
61:f4:a1:ed:e6:f5:46:59:c8:09:ea:b4:d6:ce:9b:
39:a1:16:fa:8d:9e:80:23:1e:2b:8c:9c:d9:73:c7:
48:66:1d:4a:d2:c6:7e:88:b6:02:4b:65:b0:da:b3:
65:f4:31:c7:dd:90:cc:3a:b1:c3:d4:d4:cf:60:6c:
80:8f:3e:18:27:c5:c4:74:9b:14:81:04:f1:78:f3:
d2:15:88:4e:86:f8:4e:35:ce:3c:8b:31:5b:dc:10:
02:7f:20:56:2a:1d:9c:01:98:5e:28:54:b4:45:e1:
c0:e8:d2:6e:a7:76:b9:e5:b2:fd:36:d0:48:4e:ba:
0e:47:95:c2:40:45:be:2b:15:5e:f9:54:0d:14:76:
43:a9:c6:d3:d2:da:4c:34:7a:f3:59:c0:a4:8c:91:
bf:54:cf:4a:6c:04:20:81:57:e4:d5:a2:29:9b:fa:
e2:b8:71:f0:62:ae:0d:12:b0:7b:05:8d:d8:64:b4:
6f:e1:40:76:17:30:91:89:1a:f9:9b:4e:1d:eb:7f:
50:b4:1f:ed:dc:d1:59:3e:ff:14:0c:37:27:72:30:
89:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8F:94:12:F1:9F:C5:5E:16:3D:CC:B8:5B:12:F1:20:5C:71:13:E5
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/54-UEvGfxV4WPcy4WxLxIFxxE-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.159.0/24
212.70.164.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2b:32:76:38:53:50:60:ef:d5:c6:89:db:73:d4:91:e5:4d:
c1:89:bd:95:19:1f:49:e8:d2:3c:ed:13:cd:6f:c9:c6:23:d1:
47:00:eb:0c:bf:35:bf:08:95:1c:9c:ab:44:9d:c2:b8:8a:11:
d2:2c:0d:a3:e0:16:e4:9f:0c:31:15:4b:28:7b:39:87:37:27:
fc:fb:80:20:b9:82:3c:da:b7:48:7d:32:55:db:51:e8:64:07:
a1:dc:be:76:68:0d:01:ce:e0:f1:cd:fc:8f:62:a0:3c:30:85:
c9:4e:cf:5e:18:51:ee:6e:b9:6d:dc:7c:de:aa:4d:0d:f3:19:
f6:39:58:72:c1:a4:d6:44:7b:15:72:df:1d:aa:48:4f:5e:82:
8a:b2:b3:1e:b2:75:80:32:32:c0:96:67:23:12:45:d7:57:eb:
a6:81:0e:89:20:20:38:6d:c5:60:71:a9:a9:6e:44:22:19:c3:
6e:8b:6a:d5:de:83:f0:69:e0:4f:7e:28:28:e2:73:6e:a6:2d:
11:70:1c:6a:57:d0:e2:2f:4f:21:00:57:d2:57:55:04:ad:39:
1c:75:9a:a5:f5:6d:02:e3:c0:bc:37:01:d3:cd:6d:3c:5f:44:
d1:5e:4e:66:2e:97:5c:68:cf:87:6c:3d:76:69:19:02:57:79:
74:23:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net