Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa
File: 5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa (raw, json)
Hash identifier: 6mVr252OaOJiHsmGk/+j0aXnhIUGcpjMKQ+02iLXgcA=
Subject key identifier: E5:37:FE:9A:AC:5B:CF:2E:EA:A1:F0:0C:D9:D3:65:EE:5D:6D:DE:65
Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Certificate serial: 019420D59CA7CB1719EB51058564B482922F
Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210591
IP address blocks: 212.70.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9c:a7:cb:17:19:eb:51:05:85:64:b4:82:92:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e537fe9aac5bcf2eeaa1f00cd9d365ee5d6dde65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:cd:89:95:ee:cc:ca:d7:d6:23:11:2d:31:
fd:05:84:b2:8e:bb:e3:50:50:8e:dd:fb:56:39:0f:
77:02:9f:af:d7:e6:f8:aa:23:f0:c3:01:82:75:00:
63:26:d9:04:47:0c:67:71:c4:69:9b:cf:7c:f5:76:
dc:64:45:50:05:78:9f:7c:17:0e:57:92:87:d9:30:
2b:57:2d:1f:ba:d0:d6:40:61:d9:eb:c5:a6:8d:99:
29:bf:1a:62:63:1c:22:b8:b5:c7:6e:7b:e1:33:b1:
99:4e:46:cc:18:51:31:6e:e2:d6:eb:d8:9e:74:9a:
f1:c5:ad:84:54:a4:f0:70:76:54:2b:ed:16:37:d5:
0d:49:02:4d:15:39:ff:a2:19:45:98:6b:b6:95:bd:
17:52:b1:50:25:2d:a3:d1:77:33:c8:3d:88:d5:86:
fb:f8:42:d4:09:53:30:62:86:93:cb:d2:65:6e:14:
5c:4a:b7:12:40:81:e6:85:fd:f0:2b:c1:55:b3:b3:
f2:6d:62:9b:e8:70:ce:cd:c4:5d:f4:89:99:11:31:
68:ff:93:e4:55:20:a6:c1:3c:de:8e:40:a5:db:90:
12:7f:b1:56:84:bd:b6:32:fc:64:a7:d4:de:ed:93:
5c:fd:f4:62:40:81:4d:7a:f4:70:8f:9f:3a:bb:59:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:FE:9A:AC:5B:CF:2E:EA:A1:F0:0C:D9:D3:65:EE:5D:6D:DE:65
X509v3 Authority Key Identifier:
keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/5Tf-mqxbzy7qofAM2dNl7l1t3mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.70.181.0/24
Signature Algorithm: sha256WithRSAEncryption
39:6e:b8:a9:9d:c3:8e:8e:b9:cb:d7:98:89:b8:a0:ad:1a:ad:
eb:f4:7b:e6:25:c0:56:c1:24:56:ba:c1:36:1f:3d:d0:73:60:
7c:d3:53:ba:e7:26:a7:0b:d3:e2:09:d0:6a:b7:4a:c0:f8:49:
13:d8:ef:9a:c5:ba:08:e3:56:45:6f:81:5a:c4:34:31:11:a1:
5d:8c:d2:cc:fa:ed:64:90:8b:d7:a0:e2:c6:8b:d5:b4:ca:5d:
9a:f9:c2:e4:ce:5d:3f:e4:d5:4d:cd:f1:ba:ab:b4:ca:09:17:
f2:14:22:3f:28:9e:8f:8a:bf:20:ae:62:f6:27:84:a9:bd:fb:
58:99:fa:34:9f:e8:4f:b8:6c:28:b7:9b:f3:be:98:f3:e2:29:
d2:7b:c3:38:d0:c1:0c:8e:3d:4e:9f:91:b5:c5:d0:ce:f7:87:
ab:4a:a6:dc:3b:fd:8d:1b:df:6e:e6:ec:c5:2c:00:bb:00:e6:
95:1c:83:46:3d:3d:ed:88:9f:eb:27:ef:fd:47:1f:3d:23:cd:
0f:22:7d:45:8a:5c:ef:b6:8a:60:12:16:8e:40:76:e7:c7:f7:
e2:d1:9f:46:e3:1a:71:4d:08:4f:a7:20:f6:a4:92:dc:59:47:
83:37:09:2c:87:29:45:04:da:ad:78:37:ca:98:27:b8:e3:0a:
95:2e:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:32 2025 by rpki-client on console.sobornost.net