Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/mYsvImsoUU3Ub9pNivjve1CZzdk.roa
File: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (raw, json)
Hash identifier: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=
Subject key identifier: 99:8B:2F:22:6B:28:51:4D:D4:6F:DA:4D:8A:F8:EF:7B:50:99:CD:D9
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 019422FBA4437B2772250BAFBDA68D344F93
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/mYsvImsoUU3Ub9pNivjve1CZzdk.roa
Signing time: Wed 01 Jan 2025 17:48:24 +0000
ROA not before: Wed 01 Jan 2025 17:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48844
IP address blocks: 5.149.139.0/24 maxlen: 24
37.19.13.64/26 maxlen: 26
37.19.15.128/29 maxlen: 29
2a00:1528:aa00::/48 maxlen: 48
2a00:1528:aa00:c000::/56 maxlen: 56
2a00:1528:aa00:d000::/56 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a4:43:7b:27:72:25:0b:af:bd:a6:8d:34:4f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 17:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=998b2f226b28514dd46fda4d8af8ef7b5099cdd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:ef:1d:fb:ec:64:ad:38:fc:50:d9:7c:37:
50:97:52:50:53:09:ba:d6:df:b8:06:73:09:96:42:
ca:52:a4:57:67:40:f7:87:1c:3c:ce:67:f7:a5:2d:
e1:6d:f1:b0:a7:4d:7e:af:0c:0e:6d:21:40:d3:05:
29:21:44:6d:38:22:ff:76:ba:e1:2e:a9:b9:34:3e:
82:4f:94:22:62:f1:a7:29:81:fa:29:93:58:87:08:
28:ca:19:b7:68:3c:56:3d:ff:d5:bc:a7:8d:85:70:
3b:41:59:7f:32:1a:fb:29:b5:a1:d8:62:bb:0e:2c:
45:92:16:98:69:84:d4:e1:d4:ea:bf:85:35:fa:71:
70:71:20:40:28:93:54:1d:d4:60:46:6c:9e:d5:19:
e4:e7:3e:22:c9:79:78:f9:c2:6e:f2:ce:f5:f1:84:
dc:f7:16:f7:07:52:13:b2:b9:03:23:3b:3c:66:e1:
da:cb:98:b2:c6:ce:78:3d:cf:0a:29:88:3b:3e:4f:
cc:97:d7:21:02:1d:18:72:72:62:b4:42:59:d8:80:
f8:bb:06:4c:4a:e9:31:f3:8e:10:46:1c:7c:2b:8f:
e3:b6:f3:dd:72:fa:fc:99:a1:35:ce:17:8c:5b:8b:
d8:47:f9:61:b5:7e:a8:56:5c:e3:c6:08:f4:49:c9:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:2F:22:6B:28:51:4D:D4:6F:DA:4D:8A:F8:EF:7B:50:99:CD:D9
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/mYsvImsoUU3Ub9pNivjve1CZzdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.139.0/24
37.19.13.64/26
37.19.15.128/29
IPv6:
2a00:1528:aa00::/48
Signature Algorithm: sha256WithRSAEncryption
7a:92:e0:06:51:f4:99:85:97:81:18:dc:e3:c9:ec:b5:73:af:
53:df:b4:25:9b:bb:37:89:91:cd:ac:67:a9:32:82:77:7e:7b:
ab:20:b0:bd:66:4c:4f:97:73:ab:ba:66:11:f7:df:cf:a7:c2:
d7:fb:39:5d:06:b6:70:ac:80:d2:5f:df:be:a2:6c:0c:e3:51:
07:d7:6a:d2:a1:00:70:ec:fe:62:3e:f4:4a:27:80:76:d9:4c:
92:f5:dc:68:70:19:e4:9e:b0:2a:8f:4c:84:7c:d1:68:cf:42:
7e:bb:b1:fb:13:77:b3:6a:cc:d7:9e:9a:dc:c9:01:2c:4d:1b:
4c:5a:ed:a9:79:50:1a:f2:94:24:e0:8f:ea:a5:43:08:aa:df:
1a:20:8d:71:ae:cc:b0:4a:cb:34:fe:06:fc:5e:33:11:e8:43:
7f:a2:1c:d3:6c:5d:29:71:bd:88:2b:2b:b3:34:2c:da:42:11:
4c:f0:1c:82:c7:12:eb:89:1b:4b:eb:41:2f:13:51:b1:ea:62:
f4:97:61:83:73:d7:f2:a8:fe:3c:bf:19:37:09:54:a1:a4:cd:
d1:5c:13:b6:60:0b:4e:26:a5:b7:c4:1a:96:7c:4e:80:7d:55:
67:f9:b4:c3:fd:76:92:a9:04:7c:9e:38:42:30:f2:f0:44:b1:
c0:3c:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:34 2025 by rpki-client on console.sobornost.net