Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/t5KH1FGaAuB50jIyv-mWsCV4YiY.roa
File: t5KH1FGaAuB50jIyv-mWsCV4YiY.roa (raw, json)
Hash identifier: WmKRabvhJ8d8xujyGtrgZuJ7rkW86Ru4hgJL7uZhjLA=
Subject key identifier: B7:92:87:D4:51:9A:02:E0:79:D2:32:32:BF:E9:96:B0:25:78:62:26
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 019629184C26B0307B471B5BA1C2B89A64D7
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/t5KH1FGaAuB50jIyv-mWsCV4YiY.roa
Signing time: Sat 12 Apr 2025 08:23:00 +0000
ROA not before: Sat 12 Apr 2025 08:23:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210511
IP address blocks: 109.107.154.0/24 maxlen: 24
195.60.172.0/24 maxlen: 24
195.60.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:18:4c:26:b0:30:7b:47:1b:5b:a1:c2:b8:9a:64:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Apr 12 08:23:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b79287d4519a02e079d23232bfe996b025786226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:d7:4b:2d:6d:0a:67:b2:0f:12:13:3f:1f:
11:e8:2e:96:fb:4b:fd:10:c4:77:de:db:91:b6:5d:
17:61:20:50:8b:ae:b8:bb:12:84:0e:c9:64:c3:c0:
ba:5b:45:bb:29:06:23:62:1b:38:5f:9a:b8:b7:47:
cb:44:1b:b7:27:6c:9b:13:de:95:a1:f1:4b:9f:be:
2e:82:57:a4:29:90:05:ac:1f:05:b4:5b:e2:c4:77:
36:3e:bc:f5:1f:0d:79:a1:e2:35:42:ad:6b:66:39:
49:42:af:48:1b:52:0e:40:f2:5c:20:43:ba:ce:95:
77:fc:24:0d:4d:dc:f2:67:20:e5:79:ed:97:f3:4d:
7c:63:fc:3e:cd:d2:b6:44:07:82:69:f3:1c:e8:fa:
e4:2d:f7:27:fe:d0:07:74:ac:b2:9b:76:cd:3c:18:
ef:96:83:92:2d:f6:f8:87:06:b9:2d:f5:e0:6d:53:
4d:76:90:26:d8:90:20:67:73:21:d6:99:36:fa:6f:
1d:3f:bb:90:10:38:d3:f2:13:01:4a:b2:25:4c:d4:
b1:9b:fc:8f:c9:2a:de:3a:44:11:71:10:a2:a6:ea:
b8:dd:a1:cc:28:06:be:cf:fa:8a:77:d4:21:f4:59:
bf:23:ca:ff:09:d3:7b:3a:a1:0a:6e:36:ca:f3:be:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:92:87:D4:51:9A:02:E0:79:D2:32:32:BF:E9:96:B0:25:78:62:26
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/t5KH1FGaAuB50jIyv-mWsCV4YiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.154.0/24
195.60.172.0/23
Signature Algorithm: sha256WithRSAEncryption
97:fb:51:3d:4e:23:c9:b6:fa:4e:d3:d1:26:b3:3a:c7:5b:c5:
e8:b9:47:01:9d:e5:26:99:c0:fa:63:42:93:fb:19:e3:85:a1:
77:17:ee:44:f5:52:e7:c6:bb:47:84:ea:09:1b:9e:c7:13:dd:
30:55:3c:88:80:f9:04:11:57:14:a6:15:3b:5e:df:0a:4f:67:
0c:fe:19:37:4f:36:bf:ff:0b:18:0d:d3:4a:52:5c:3f:0d:1f:
ff:6a:12:55:a2:e5:97:08:db:a2:c8:b6:50:f1:7d:74:21:48:
ca:49:bb:c9:6b:b0:66:9f:d2:32:8e:b6:5d:c2:02:3a:6e:fd:
b9:c0:0b:44:98:05:ae:44:8d:95:76:a4:02:c8:b1:31:98:76:
41:53:33:e2:b6:7f:48:dd:85:35:f4:11:36:bd:48:83:71:5f:
2e:d9:a4:22:5c:2e:fb:e7:93:ea:76:32:5f:88:f7:82:24:f9:
c1:c6:1f:2b:d1:af:88:30:d9:8d:ed:ca:92:9d:df:42:4a:46:
2e:d6:af:3b:be:97:95:b7:19:f5:31:4a:62:2e:6a:05:3a:7a:
cb:94:be:62:81:9b:63:5d:5c:b9:38:33:fe:6c:bc:06:79:78:
d2:3a:a3:72:75:74:2f:9c:e2:c4:ca:a3:c8:9b:c6:b7:6c:cb:
e3:cc:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:01 2025 by rpki-client on console.sobornost.net