Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/95yykwwXcTdfVTNtHSPE4pPfaP4.roa
File: 95yykwwXcTdfVTNtHSPE4pPfaP4.roa (raw, json)
Hash identifier: 1GDUJnazqonbvkMqjJPZO71YIfe2Ck+uEPOiP3nR7HA=
Subject key identifier: F7:9C:B2:93:0C:17:71:37:5F:55:33:6D:1D:23:C4:E2:93:DF:68:FE
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0196146D4E31BC358E893DA1BC4C88E68E25
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/95yykwwXcTdfVTNtHSPE4pPfaP4.roa
Signing time: Tue 08 Apr 2025 08:03:49 +0000
ROA not before: Tue 08 Apr 2025 08:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29066
IP address blocks: 5.10.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:6d:4e:31:bc:35:8e:89:3d:a1:bc:4c:88:e6:8e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Apr 8 08:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f79cb2930c1771375f55336d1d23c4e293df68fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:77:00:60:f1:f6:9f:92:c2:eb:29:78:20:
3b:37:e6:de:6c:a6:20:99:db:29:53:a4:8b:35:b8:
94:1e:61:0b:e8:79:5c:b4:6a:13:42:52:14:45:66:
2f:1c:d0:3c:7c:e2:f9:39:63:39:1e:7e:bf:40:b8:
86:27:a6:93:f4:42:3d:da:5e:f0:98:e3:1f:3a:06:
76:21:32:8d:8d:fb:35:e8:2f:54:93:3a:ff:2a:9d:
f4:bd:d8:3b:fd:a3:6f:f2:26:7e:7d:a4:37:9e:95:
94:9c:5e:7a:73:73:fa:bf:b3:88:1e:0e:94:ef:1b:
db:1e:84:85:aa:b4:b8:e9:d0:cf:24:ef:05:d0:e0:
77:45:35:3b:4f:bb:12:36:59:dd:11:08:e3:7b:a2:
10:1b:de:70:0c:ce:4f:b7:e6:26:ef:c8:f9:8b:5d:
3d:62:f9:0a:bb:3b:09:cd:22:0e:ca:23:9c:c4:4e:
cc:e2:70:db:d3:54:ea:27:2b:a3:d1:92:89:da:9c:
03:96:3e:34:48:73:45:58:eb:ca:38:c1:fe:2a:b0:
f3:8d:34:6d:3d:9e:d4:c3:06:46:d1:a4:2f:69:ec:
f6:ab:8e:c8:9a:d1:6a:f2:8f:45:c0:64:51:a0:4a:
6a:03:d1:dd:c5:4c:76:ac:95:38:66:13:f2:d4:e7:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9C:B2:93:0C:17:71:37:5F:55:33:6D:1D:23:C4:E2:93:DF:68:FE
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/95yykwwXcTdfVTNtHSPE4pPfaP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:31:e7:7b:f6:53:dc:d2:1d:5a:74:ea:1d:06:26:6e:a8:47:
65:40:f2:4b:88:4f:02:07:b0:89:81:8f:c5:66:b4:92:a0:ad:
d4:eb:53:29:06:0f:27:cc:e2:84:c1:d6:8e:40:9c:b7:5f:d9:
74:31:fc:4f:92:31:a8:f0:07:6d:b2:8c:86:b9:be:e2:86:de:
7d:e2:21:78:6d:80:4d:0f:4d:41:c1:47:8b:65:2d:03:b9:93:
9e:b1:09:a3:92:bf:7a:8d:82:c2:7f:7a:9e:d3:56:7c:14:45:
ea:bf:36:c8:51:d8:5d:0d:9f:8a:1e:0d:99:43:5a:a1:31:03:
4a:7f:fa:9b:cd:71:d9:a5:d6:e8:80:3d:60:0d:0c:ed:5d:96:
2c:1e:13:8e:7d:dd:1d:24:da:7e:b5:ed:7c:2e:59:51:54:1e:
72:9c:c7:f5:07:65:c3:5a:63:b1:79:7d:06:0d:46:d2:a8:72:
52:d7:98:a2:d0:55:74:f2:ba:25:2e:f3:24:c4:a5:e9:58:ec:
51:96:c7:a4:3e:01:ff:02:ed:14:f1:4c:cd:0f:48:c7:40:94:
70:bb:b7:50:ae:03:5d:ce:14:91:18:0f:34:76:9c:78:89:49:
70:08:08:1e:7e:5d:21:06:23:10:dc:49:b1:eb:b7:6e:41:b6:
10:40:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net