Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/4mGseaRg6egaG3HIgmeDQNxN1fE.roa
File: 4mGseaRg6egaG3HIgmeDQNxN1fE.roa (raw, json)
Hash identifier: FljGcaDpbXdbXqPdJOkNLnFoXkPv5nApI4xvVtBOm2M=
Subject key identifier: E2:61:AC:79:A4:60:E9:E8:1A:1B:71:C8:82:67:83:40:DC:4D:D5:F1
Certificate issuer: /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial: 0195FABB3CF02AD6A09EA4AC93E32164E913
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/4mGseaRg6egaG3HIgmeDQNxN1fE.roa
Signing time: Thu 03 Apr 2025 08:18:49 +0000
ROA not before: Thu 03 Apr 2025 08:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 5.129.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fa:bb:3c:f0:2a:d6:a0:9e:a4:ac:93:e3:21:64:e9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Validity
Not Before: Apr 3 08:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e261ac79a460e9e81a1b71c882678340dc4dd5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:6d:cc:d4:ff:89:0f:2f:0d:5c:49:ec:67:
f8:88:c6:cb:08:b5:f8:85:fd:4c:44:8a:65:03:d3:
93:79:7d:2b:81:26:ea:db:2c:84:6c:70:d9:e9:d7:
f4:d6:56:30:80:c5:95:a4:dd:3e:93:34:0c:d9:9c:
a0:9e:76:ec:d2:63:fb:23:9b:b4:8a:45:bd:08:ab:
4b:5b:19:29:e7:b0:12:58:57:34:7e:27:7f:23:85:
d8:e8:89:fc:42:25:f3:2c:98:1f:77:33:15:be:f2:
e8:95:62:c6:c2:c7:1f:7d:f7:9b:de:0e:09:3f:e3:
53:06:2b:1b:16:62:61:70:7e:be:76:45:f1:16:fb:
a6:9c:f2:4a:10:03:0a:ba:27:5e:54:8e:85:3f:99:
51:a4:35:0d:4f:91:c2:f4:1b:7c:9d:fa:94:b9:88:
8a:28:57:ed:af:05:c5:47:cb:6c:32:a3:40:db:d7:
53:8d:2c:61:b9:a4:f6:e7:e7:f4:bd:96:bc:23:58:
6a:31:bc:f6:01:4f:18:70:49:ed:5c:dd:ba:dd:4a:
0c:44:8d:97:c9:67:ad:3c:73:ba:65:47:a6:fc:00:
c4:5c:ac:0b:46:65:b5:d2:d5:52:37:b2:24:11:0a:
3c:c6:b6:fb:76:29:77:33:1e:1a:b0:31:34:60:65:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:61:AC:79:A4:60:E9:E8:1A:1B:71:C8:82:67:83:40:DC:4D:D5:F1
X509v3 Authority Key Identifier:
keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/4mGseaRg6egaG3HIgmeDQNxN1fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.129.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b3:71:ca:6b:af:68:16:ab:e8:40:10:da:e7:00:0b:e6:88:21:
95:0d:d7:17:de:05:02:1d:90:05:60:6d:47:0c:e6:98:d5:23:
29:e6:2e:73:38:6b:cd:7d:b7:be:db:28:7a:29:10:c7:fd:cd:
c2:7e:e7:21:8e:2d:22:54:27:8d:cb:6d:4e:20:a2:5d:85:3e:
78:84:45:8e:40:1d:9c:a5:11:42:86:bb:c7:ec:77:1a:74:f1:
ee:e7:b7:2a:b8:a4:fd:1f:17:01:aa:af:3c:bb:85:4e:a9:b1:
21:14:45:58:5a:be:07:ac:c8:cd:35:93:67:3e:31:95:39:61:
8d:3e:e9:2a:22:a1:8f:75:39:11:48:ac:ca:f1:4f:e5:a3:37:
c3:3b:19:c7:f5:51:1d:4b:02:6e:12:7a:ac:4c:68:e7:e3:e9:
31:d3:48:e9:da:09:c1:61:db:35:2b:ad:88:46:b8:9b:63:12:
38:b4:84:8c:aa:ba:d7:35:98:a2:3d:41:96:5a:79:7d:88:03:
91:47:f7:79:ad:ca:9c:a4:95:89:01:da:3a:ef:6d:96:6d:8f:
f7:0a:58:66:3f:95:88:f2:a2:a1:ad:51:17:f9:80:60:11:8e:
1f:55:8e:b6:7d:50:67:57:ef:85:77:e8:70:11:d6:c6:f0:16:
ae:3b:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:04 2025 by rpki-client on console.sobornost.net