Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/IDXOsYUjPF2K5o_G_ek96aUdUfk.roa
File: IDXOsYUjPF2K5o_G_ek96aUdUfk.roa (raw, json)
Hash identifier: E9bra/kYUK1UB01DrugwZ/WDGQsZjYGhZIZLhrv+gOs=
Subject key identifier: 20:35:CE:B1:85:23:3C:5D:8A:E6:8F:C6:FD:E9:3D:E9:A5:1D:51:F9
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 019427B5B66BD9C7A128A9549006F8C3761B
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/IDXOsYUjPF2K5o_G_ek96aUdUfk.roa
Signing time: Thu 02 Jan 2025 15:50:07 +0000
ROA not before: Thu 02 Jan 2025 15:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 5.1.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b6:6b:d9:c7:a1:28:a9:54:90:06:f8:c3:76:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Jan 2 15:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2035ceb185233c5d8ae68fc6fde93de9a51d51f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:55:d6:11:e7:ac:19:68:d5:3d:24:58:b7:
df:8e:33:a0:b6:de:69:8b:76:9d:e2:b8:5a:ee:f1:
29:d6:14:c3:51:df:e5:77:9a:18:a4:fc:ea:48:b3:
e9:4b:61:91:9c:1a:59:63:a5:c8:ca:dc:aa:43:78:
20:82:7b:04:8a:52:33:af:7a:36:84:3f:3a:ea:db:
a7:f5:cf:83:0c:f1:3e:d1:c4:0f:fd:bd:6a:db:3d:
e8:0e:4b:93:7e:6f:b3:12:cd:90:de:22:03:ee:0b:
35:a5:f6:a9:39:b5:41:3b:3b:db:cc:77:89:36:96:
25:7f:d4:b2:67:58:6d:bf:f5:d5:ed:9d:b8:aa:8d:
26:57:59:d2:ad:ff:3c:06:92:db:1f:6b:b2:31:24:
78:60:a7:d7:e6:cb:f6:63:37:63:f2:61:9b:a9:16:
93:22:d0:8d:f3:de:81:00:d8:c8:02:7d:bc:a3:d7:
05:63:0a:17:8c:09:72:c9:e6:14:fa:ed:dc:8c:d4:
f2:3f:7f:42:12:01:4a:9d:30:b1:d6:96:b7:80:ec:
ec:fb:6b:26:30:c5:a2:c1:42:d5:f2:c7:b2:dd:29:
8c:4b:93:ba:3e:60:89:5a:7a:40:f0:fe:9e:21:0b:
57:e9:44:f0:ca:30:36:28:79:c5:31:0b:27:59:88:
1a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:35:CE:B1:85:23:3C:5D:8A:E6:8F:C6:FD:E9:3D:E9:A5:1D:51:F9
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/IDXOsYUjPF2K5o_G_ek96aUdUfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
Signature Algorithm: sha256WithRSAEncryption
88:ab:fd:2c:7b:ad:bb:20:9f:7a:71:da:38:ea:62:3c:cc:45:
58:72:51:da:fd:c7:93:b1:dd:30:be:27:61:9c:bf:4b:e5:6f:
05:6a:6c:26:ca:26:64:cb:a4:27:78:a6:40:8f:e9:df:67:2d:
16:f0:bd:b8:0c:a9:3e:26:a5:c2:93:34:b3:f7:f0:cb:8c:c0:
89:22:e1:bd:1e:19:f1:7d:13:18:57:57:42:f8:59:d3:90:f5:
d2:4d:3f:9c:bc:b0:81:f0:ef:16:6c:af:17:8b:dd:5e:e6:fb:
4b:31:74:40:44:3f:2e:9e:06:70:8d:c2:db:81:99:16:6f:e9:
f0:6e:4f:11:77:8d:c9:79:44:1f:a4:ef:30:8f:b2:d9:c0:56:
fe:f9:ae:6f:3d:7a:c8:31:e0:ef:b5:69:52:6b:ef:32:f1:0b:
47:fd:38:99:2c:2a:27:ea:36:e2:ec:b7:12:72:1b:0a:7e:8a:
58:e2:05:03:f4:5f:35:75:0e:e2:81:61:c8:e9:bd:c9:9e:3f:
26:0e:37:83:30:cd:86:cd:76:24:ed:1e:82:ff:a1:02:b7:69:
dd:41:8d:0b:19:e4:b7:a6:32:f6:21:9b:ed:89:83:16:70:ae:
fb:ae:b3:33:99:14:ef:d1:eb:ad:10:22:9b:bb:c7:93:dd:95:
d0:71:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:50:49 2025 by rpki-client on console.sobornost.net