Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5aN_IrFiLo_EMqGGk-Kn2CrjTgY.roa
File: 5aN_IrFiLo_EMqGGk-Kn2CrjTgY.roa (raw, json)
Hash identifier: 98gn79V8Q2sYu2NAR39+RnIDkF+h3CD17GUU7Bvdk5s=
Subject key identifier: E5:A3:7F:22:B1:62:2E:8F:C4:32:A1:86:93:E2:A7:D8:2A:E3:4E:06
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 019546DDE78FF2B7BDFF7FF42B6D6889AF83
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5aN_IrFiLo_EMqGGk-Kn2CrjTgY.roa
Signing time: Thu 27 Feb 2025 10:05:02 +0000
ROA not before: Thu 27 Feb 2025 10:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204412
IP address blocks: 195.136.121.0/24 maxlen: 24
195.136.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:dd:e7:8f:f2:b7:bd:ff:7f:f4:2b:6d:68:89:af:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Feb 27 10:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5a37f22b1622e8fc432a18693e2a7d82ae34e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:de:23:bc:bd:83:e4:f1:b0:28:91:73:96:
54:92:b3:85:2d:ca:d5:5b:78:ba:42:09:a1:a8:f6:
b8:9d:63:ef:1e:8e:57:51:81:c5:82:76:e0:c8:bf:
02:7f:65:22:c8:96:1b:f7:80:47:c6:b4:3d:05:8e:
09:17:30:2a:ab:f3:4e:94:05:a3:f0:05:52:42:42:
34:48:4a:93:65:4a:55:e2:d1:4e:63:b3:e7:dd:c7:
09:1b:b4:b1:1b:5e:08:0f:3f:a1:89:f7:ed:2e:78:
25:eb:a0:58:c0:71:6c:f2:4b:53:a7:8c:3b:44:6b:
b1:3f:fc:13:e1:d4:64:b5:02:42:d8:37:73:fc:ab:
9e:01:b3:6c:ba:bb:42:27:e5:0b:75:44:6d:a4:89:
dc:63:a9:1a:5c:28:a6:54:82:2b:c3:08:45:96:fd:
54:a5:34:8f:a6:95:97:e1:eb:6a:5c:24:3b:42:2d:
98:8d:c0:92:1a:42:5a:e9:21:66:fe:0d:e2:aa:33:
4f:bd:c8:91:95:7e:dc:b8:d9:b2:a3:59:55:d8:91:
1c:f2:21:7f:4b:d2:6e:f7:96:a1:cc:27:10:9d:7a:
6e:86:19:59:21:3c:7a:ff:30:2d:4b:d2:4c:ac:6a:
e5:5d:b8:e3:8d:a5:f4:64:1f:7b:3c:4c:cf:3b:3e:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A3:7F:22:B1:62:2E:8F:C4:32:A1:86:93:E2:A7:D8:2A:E3:4E:06
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/5aN_IrFiLo_EMqGGk-Kn2CrjTgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.121.0/24
195.136.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b0:e9:73:7d:30:e7:fc:e0:f2:99:e2:1d:18:b5:e2:95:ea:
bf:d3:24:d0:27:0f:84:ee:49:b0:ef:0a:a4:02:a4:7e:bd:02:
76:8a:ae:b0:6d:cd:4c:fc:90:32:1d:bc:f6:65:ef:2c:82:3e:
7e:f2:4b:4e:e5:cd:bc:bd:5c:b9:9b:53:be:1c:35:b5:c1:5d:
b4:0a:e9:d7:a6:80:10:59:ac:54:3e:81:fd:c9:62:68:83:70:
20:04:91:6d:75:17:97:b6:08:2b:6d:30:8d:17:a6:c1:8c:05:
7f:bb:fe:ae:74:3f:30:b1:36:31:48:9a:fd:51:50:be:ab:08:
36:f1:83:98:22:8b:5c:d2:48:eb:01:0f:41:5e:c8:df:95:da:
f5:97:3f:5f:ed:ba:02:07:b4:5f:ac:86:f9:da:b4:7f:78:4b:
96:f6:2a:a8:c7:99:b7:ed:c0:16:6b:0d:68:04:a5:d1:68:90:
b6:54:5b:0f:d8:06:6e:8b:ad:42:34:4f:22:fa:cc:69:da:5e:
12:83:e6:de:34:02:3c:42:ec:4b:14:ba:1b:dc:f0:fb:6a:33:
21:97:be:26:98:fa:0a:e8:6c:40:13:1c:d6:e6:17:99:72:99:
d0:c1:90:d5:d8:34:42:fe:c8:e2:c1:23:c6:3f:1b:8c:b9:19:
f3:95:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net