Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/X5I9mHSu3KNC6L4o4SPIN2DTcIA.roa
File: X5I9mHSu3KNC6L4o4SPIN2DTcIA.roa (raw, json)
Hash identifier: pA69W5L+1g5fXu0iB/SINFlaHI6HYNCsbZGjGuRKHrs=
Subject key identifier: 5F:92:3D:98:74:AE:DC:A3:42:E8:BE:28:E1:23:C8:37:60:D3:70:80
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 01942143A8725C676DCDF4BEC1A72A07BE7D
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/X5I9mHSu3KNC6L4o4SPIN2DTcIA.roa
Signing time: Wed 01 Jan 2025 09:47:49 +0000
ROA not before: Wed 01 Jan 2025 09:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 5.182.232.0/22 maxlen: 22
45.92.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a8:72:5c:67:6d:cd:f4:be:c1:a7:2a:07:be:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Jan 1 09:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f923d9874aedca342e8be28e123c83760d37080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:46:95:5f:37:b7:5b:03:81:d0:95:bf:d9:
a0:8c:d7:d0:31:f7:1f:bb:06:88:72:36:c2:11:99:
30:af:ee:7c:28:09:96:14:e7:72:02:c6:17:18:0d:
35:2c:e6:6a:09:1e:80:1a:c1:b1:b1:fb:05:2d:6f:
70:f0:57:d4:94:c4:70:d9:16:cd:24:a4:75:94:fd:
5f:d7:af:ea:9c:f9:60:3c:c3:77:b6:36:a7:d8:7e:
50:b5:66:ad:c8:41:9e:97:f6:ca:36:a6:e4:92:47:
7a:e1:17:98:3b:69:8b:e2:02:51:e5:3d:f8:fc:a7:
df:82:2a:46:f1:ff:68:26:e0:6d:fc:90:ca:bb:e7:
6c:15:dc:5f:00:5a:9a:b8:e6:a9:bf:17:c3:c1:80:
c5:90:22:b6:53:df:57:b0:ee:a7:2c:f0:85:31:ae:
47:24:84:10:81:44:f4:a1:c8:dd:75:6e:3f:91:99:
02:57:ae:2e:d4:d8:9b:d8:d7:ea:15:58:32:ed:8e:
93:c9:ce:e7:fc:60:29:fc:cd:5c:02:4b:60:33:76:
fd:16:0d:e5:96:12:62:a9:b7:2a:b7:9a:3f:58:43:
b4:f7:c1:5e:24:37:1c:44:59:82:6d:50:c0:cd:7d:
d1:2a:81:52:ff:e4:2a:63:cf:df:d4:14:3b:d5:7c:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:92:3D:98:74:AE:DC:A3:42:E8:BE:28:E1:23:C8:37:60:D3:70:80
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/X5I9mHSu3KNC6L4o4SPIN2DTcIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.232.0/22
45.92.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:fc:1a:8d:b6:96:6f:6f:b6:fb:d3:75:4c:a3:01:29:9a:29:
0d:0b:52:87:34:70:87:8f:f3:cc:66:4c:6e:95:6b:e9:3b:e1:
be:9e:06:29:d8:83:91:3d:10:8e:d5:23:49:20:85:40:e7:7b:
15:fe:b3:5d:9f:2f:b6:90:86:3c:88:aa:cd:f4:29:5b:7b:23:
cf:e2:55:54:54:ae:bd:f8:65:8d:c5:a7:d4:72:a3:11:17:f3:
2d:1c:70:a9:b7:e1:f9:69:a4:53:2b:cd:85:1e:2e:78:29:59:
21:a1:75:34:bb:e8:da:93:c3:9c:d0:bc:f7:9e:12:41:48:ab:
70:8d:5c:b7:57:9f:24:1c:02:97:48:db:36:d9:62:a8:d9:8c:
0f:3c:36:d4:06:ef:2e:b7:91:c1:45:d5:96:98:35:8a:16:38:
aa:24:62:5f:22:dc:cd:7c:1f:66:7c:cd:f0:e2:38:1f:4b:88:
76:f6:55:df:2f:f4:03:58:23:c6:12:5d:89:25:94:2d:d0:9f:
83:fe:39:a4:bc:ed:75:95:ec:59:a4:39:f1:f0:a9:dc:eb:4e:
d9:de:bb:d6:d8:46:5d:f6:7d:24:e5:3c:4e:44:46:0d:a1:eb:
e5:dc:db:3b:d8:4b:6d:f3:01:39:68:fc:59:f2:db:81:70:36:
70:14:bd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:26 2025 by rpki-client on console.sobornost.net