Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/n8MWvNRKO36sf1pxZSj8cGYzibI.roa
File: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (raw, json)
Hash identifier: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=
Subject key identifier: 9F:C3:16:BC:D4:4A:3B:7E:AC:7F:5A:71:65:28:FC:70:66:33:89:B2
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 019424448B0E0F161B22F5819ABBE8348E8E
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/n8MWvNRKO36sf1pxZSj8cGYzibI.roa
Signing time: Wed 01 Jan 2025 23:47:39 +0000
ROA not before: Wed 01 Jan 2025 23:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62129
IP address blocks: 5.134.88.0/21 maxlen: 21
45.11.100.0/22 maxlen: 22
185.55.204.0/22 maxlen: 22
2a04:d5c0::/29 maxlen: 29
2a0e:8d00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8b:0e:0f:16:1b:22:f5:81:9a:bb:e8:34:8e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Jan 1 23:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fc316bcd44a3b7eac7f5a716528fc70663389b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:c5:b8:88:05:cc:0c:6c:76:55:d5:59:22:
0d:da:85:56:a8:5c:c1:ed:b0:2b:b6:93:8a:53:0b:
08:6f:4f:33:f9:bd:af:1c:67:6f:92:c9:bc:ff:b4:
03:3d:76:b0:02:55:be:83:db:f8:0a:bb:a6:c6:f8:
27:e8:be:58:d7:b1:90:ad:1a:67:8e:f1:46:32:df:
ca:5b:90:f7:38:1e:3d:f1:b9:4b:78:75:1e:00:4c:
61:e9:0c:26:53:f6:e1:8c:fa:cb:3d:3c:51:3a:c9:
70:80:c9:5a:b8:22:a4:dd:24:71:d0:ae:5a:74:15:
03:1d:f2:39:c4:7b:a6:96:77:04:db:ff:c6:cc:26:
78:c8:a9:fc:ad:d2:44:f6:d8:bb:b5:22:8d:b4:76:
bf:24:51:ef:a9:64:6c:9a:85:21:ed:3a:3c:c0:6b:
41:42:19:c7:6c:d3:75:b2:24:8a:c6:3d:94:3d:0d:
58:0d:46:0f:17:0a:c9:c9:46:d5:e4:26:4f:e1:19:
a1:5e:3b:e8:1f:54:f2:9e:6f:0a:84:e1:e6:55:e0:
42:02:5f:3c:24:b5:1a:52:0b:ec:8f:d7:46:45:51:
99:a4:22:fc:1f:d9:ab:3e:73:1f:28:49:4d:a2:84:
03:6f:5b:1a:e6:c7:eb:f4:5f:d4:7a:ea:45:5f:4a:
b8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C3:16:BC:D4:4A:3B:7E:AC:7F:5A:71:65:28:FC:70:66:33:89:B2
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/n8MWvNRKO36sf1pxZSj8cGYzibI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.88.0/21
45.11.100.0/22
185.55.204.0/22
IPv6:
2a04:d5c0::/29
2a0e:8d00::/29
Signature Algorithm: sha256WithRSAEncryption
01:6f:ee:7f:78:40:33:23:dd:5c:4a:4f:cf:57:08:c9:55:3a:
81:80:57:18:d3:06:12:13:e5:c7:d5:01:4c:ad:17:cb:0d:8d:
d9:c4:3c:60:d9:10:da:99:03:6e:47:e2:2f:bd:a0:7d:60:ef:
11:7a:39:10:5f:52:7c:0a:ab:b8:e2:37:0c:7a:44:61:e9:ba:
e7:5c:d6:67:82:66:0c:a7:b0:ae:3b:78:91:b3:0d:e4:53:2b:
75:79:fe:96:f4:41:d2:ac:03:e3:2b:00:e8:0b:05:c7:77:7e:
1f:94:4e:2e:b7:70:e0:45:96:0d:15:d8:a9:1d:0f:24:c5:5e:
82:13:3f:47:88:18:25:0c:fb:da:07:ba:61:d7:ef:ed:d4:48:
34:f8:13:1f:34:a8:37:55:51:61:2a:84:c2:7f:2f:02:30:5d:
0c:4d:dd:91:71:78:34:ce:af:d5:e6:35:b0:b0:ec:14:bc:24:
4f:25:14:20:cf:70:57:99:14:3b:fd:bf:b9:59:e0:36:89:ad:
45:8b:e3:8f:a7:a7:fe:5e:02:eb:1d:0b:eb:86:ac:a8:16:70:
bc:0f:7d:00:b1:38:c4:12:7a:96:8e:07:88:2a:32:23:f8:b4:
1c:2d:87:2c:e5:46:7a:5a:7a:21:ce:2c:c4:70:d0:17:c1:69:
7e:90:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:55 2025 by rpki-client on console.sobornost.net