Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/h1D7CnT2PY1NPObHiR4r21lOKxw.roa
File: h1D7CnT2PY1NPObHiR4r21lOKxw.roa (raw, json)
Hash identifier: FFNEtoxBXjniX9r1DmUch9vHzQqa3zr4aAAiKoIwvtI=
Subject key identifier: 87:50:FB:0A:74:F6:3D:8D:4D:3C:E6:C7:89:1E:2B:DB:59:4E:2B:1C
Certificate issuer: /CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Certificate serial: 019420686B4D79718A13E1E4B7169E4F270A
Authority key identifier: E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/h1D7CnT2PY1NPObHiR4r21lOKxw.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210658
IP address blocks: 5.181.16.0/24 maxlen: 24
62.204.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6b:4d:79:71:8a:13:e1:e4:b7:16:9e:4f:27:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50e6692d9728da81f5c4f49e150773e1afbc80b
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8750fb0a74f63d8d4d3ce6c7891e2bdb594e2b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:84:1e:8a:3e:02:6b:6e:92:29:36:b3:52:
4e:cf:f0:be:b1:42:54:d3:31:e0:cc:a0:86:c1:2a:
99:dd:3a:d4:5f:d4:98:fe:21:76:6c:7a:28:53:31:
c0:4b:8c:7e:19:b6:bf:d2:ca:1f:7f:4a:a3:de:f5:
9d:d8:46:3a:d3:a0:26:e8:1b:3f:5f:33:f1:ea:1a:
69:80:5d:bb:43:72:94:99:33:7f:96:fa:ac:db:84:
5e:0a:0a:60:c5:31:bf:0a:fe:05:b1:06:85:f8:e7:
95:45:a3:87:fa:ec:c9:e4:53:a3:c7:34:e0:42:78:
20:92:52:00:ea:78:16:3e:98:00:d8:14:55:e5:35:
88:d0:a2:14:94:76:0c:d3:a3:54:62:41:f9:53:79:
13:54:9d:7f:8f:16:2b:4a:de:ea:30:52:06:c6:d6:
6c:cb:35:9a:20:ad:41:fc:d6:41:50:60:ca:c6:06:
81:4b:04:c4:50:23:6a:e4:b4:91:75:3e:17:8d:1b:
84:8f:c4:29:91:39:2c:52:79:37:f0:a3:c7:52:79:
73:1d:82:3b:a9:8d:25:5c:26:b9:80:fa:37:c1:e7:
fc:b0:28:0a:48:2f:ca:9c:79:28:b6:62:4a:5c:d1:
ac:11:bc:44:2f:dd:64:00:70:55:47:9d:5c:6b:11:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:50:FB:0A:74:F6:3D:8D:4D:3C:E6:C7:89:1E:2B:DB:59:4E:2B:1C
X509v3 Authority Key Identifier:
keyid:E5:0E:66:92:D9:72:8D:A8:1F:5C:4F:49:E1:50:77:3E:1A:FB:C8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Q5mktlyjagfXE9J4VB3Phr7yAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/h1D7CnT2PY1NPObHiR4r21lOKxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/f2ed50-4c9a-4344-9148-039c1405e175/1/5Q5mktlyjagfXE9J4VB3Phr7yAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.16.0/24
62.204.47.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c4:c3:75:95:29:e8:10:0b:04:c0:ab:bc:c5:b3:c7:34:4d:
3f:b2:e4:2c:7b:25:b5:54:63:b9:7c:be:1a:87:f0:40:57:51:
73:ed:2f:37:f4:42:b0:3a:b2:5f:e4:b1:a2:06:b9:9d:1e:5d:
07:cd:a6:a3:65:86:4c:63:f8:72:90:39:85:bb:83:f0:33:5b:
50:ef:7c:0b:6a:7e:ee:a8:4c:12:f0:7f:99:e0:9b:3f:3c:0f:
db:41:a1:af:c0:59:dc:fc:2c:be:6d:77:02:28:c4:2d:d4:95:
01:73:aa:e8:57:e5:e7:3a:a0:c2:76:52:0d:bd:fd:df:9d:d2:
f2:61:c6:48:ce:45:86:56:76:69:21:8b:b7:30:a6:c8:f2:51:
52:26:b8:df:9d:26:a0:a8:cc:c4:08:68:30:a6:63:df:2a:a7:
fb:95:96:10:cf:07:ea:f8:52:21:d0:13:00:5e:04:9c:d0:c5:
7a:fb:fc:75:85:96:88:6f:9c:9c:69:eb:52:b0:aa:33:3c:a9:
4d:3c:95:e2:a9:a9:31:73:d5:08:95:9d:34:38:e4:c8:e9:54:
65:17:e2:f8:8b:3e:1e:2f:7b:c2:67:5e:b8:26:a3:f6:b3:94:
ca:d7:a9:3b:67:67:a0:13:66:98:cc:ed:fc:ad:1f:32:1c:73:
d4:57:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:58 2025 by rpki-client on console.sobornost.net