Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/MkYvLYpqbrY1k1hziBPcgNzDk5A.roa
File: MkYvLYpqbrY1k1hziBPcgNzDk5A.roa (raw, json)
Hash identifier: 9jZ4rUSHtTJBWwTiSaqDWjUP8V/ZrhGAYaJndS1KB3A=
Subject key identifier: 32:46:2F:2D:8A:6A:6E:B6:35:93:58:73:88:13:DC:80:DC:C3:93:90
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 01942369290994EE4AD3371FF238CA8EBB6F
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/MkYvLYpqbrY1k1hziBPcgNzDk5A.roa
Signing time: Wed 01 Jan 2025 19:48:01 +0000
ROA not before: Wed 01 Jan 2025 19:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199248
IP address blocks: 5.56.40.0/24 maxlen: 24
5.56.41.0/24 maxlen: 24
5.56.43.0/24 maxlen: 24
5.56.44.0/24 maxlen: 24
5.56.45.0/24 maxlen: 24
5.56.46.0/24 maxlen: 24
5.56.47.0/24 maxlen: 24
2a01:46c0::/33 maxlen: 33
2a01:46c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:29:09:94:ee:4a:d3:37:1f:f2:38:ca:8e:bb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Jan 1 19:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32462f2d8a6a6eb6359358738813dc80dcc39390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:a8:f0:ac:38:7f:07:cf:0e:89:3e:bf:5e:
61:db:1b:5f:ea:d2:ef:a6:c6:94:7e:41:b8:67:cc:
e0:52:64:25:75:45:d8:9c:59:63:10:ce:2e:d4:aa:
ba:ea:f0:20:5a:44:bf:a7:3f:7f:8b:c3:e4:c9:97:
61:b9:20:b6:55:31:17:4c:29:f0:1e:22:40:2e:76:
20:4a:1f:33:25:70:f5:9d:68:7f:da:d1:a8:da:45:
0b:b0:b2:48:33:18:2b:68:0b:f9:3d:05:9f:c9:f6:
a6:35:94:c5:3d:a4:09:b3:e6:c3:48:e1:b4:f1:53:
92:1f:db:0a:35:b4:bf:82:92:3f:d5:9d:0a:73:6a:
9b:4e:62:87:d1:eb:21:70:83:3b:79:c8:d4:9c:36:
24:b2:a4:de:28:71:74:7d:5e:4e:a0:eb:8a:26:0e:
54:a8:b3:fd:a1:81:da:df:dc:00:49:d5:91:71:1a:
98:21:1d:82:53:fb:91:c2:1c:26:c3:9e:f4:2d:66:
eb:a1:fe:8e:52:78:2e:6b:9f:4d:04:32:27:85:84:
37:f2:da:05:b2:3f:8f:24:ca:35:7c:07:a6:6d:3e:
ff:42:df:b9:b0:4e:e2:68:c1:b4:6c:2d:e7:46:0c:
0a:82:20:3c:69:92:61:02:19:53:d6:8a:01:37:68:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:46:2F:2D:8A:6A:6E:B6:35:93:58:73:88:13:DC:80:DC:C3:93:90
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/MkYvLYpqbrY1k1hziBPcgNzDk5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.40.0/23
5.56.43.0-5.56.47.255
IPv6:
2a01:46c0::/33
Signature Algorithm: sha256WithRSAEncryption
75:0f:d0:6a:36:a6:84:d4:84:a3:12:39:f0:f2:c7:35:96:8b:
9e:c3:cc:f2:4f:fc:ef:4a:be:bc:69:ef:93:57:11:58:c2:ea:
1e:f7:d7:03:7d:21:1b:f1:29:09:28:a8:90:79:ce:d9:3a:50:
4f:8b:93:97:4f:f8:f1:c3:39:e5:0c:aa:ec:ac:75:e7:d6:ad:
b8:ca:57:ec:9a:fd:a7:4f:7d:65:5d:c9:4d:f9:47:4c:13:ea:
ca:1c:b6:f3:71:52:8f:5e:5a:ba:04:86:50:bb:e5:6a:0a:e9:
78:19:e1:9d:8c:a9:80:b9:ff:e8:0d:18:13:5a:ae:09:d4:24:
85:03:0e:d2:5b:54:04:e5:13:19:b9:2e:b1:de:2c:a7:26:03:
a9:80:31:f5:34:ac:62:1b:31:e7:1a:09:75:01:87:13:7e:66:
44:5b:c2:ca:7c:eb:05:f6:1f:30:b9:0c:4c:46:29:52:10:27:
04:60:eb:aa:47:fd:39:d6:f9:c8:99:45:bc:1a:d1:94:2d:88:
09:29:33:fc:21:fa:0d:25:02:09:48:cb:60:80:bf:52:fc:58:
50:bb:72:1e:bd:94:13:00:62:c1:46:3b:48:54:a9:06:67:44:
e2:e5:67:bb:fb:32:60:a1:00:68:9c:b4:a8:1f:db:99:f3:0b:
31:8b:1e:72
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQjaSkJlO5K0zcf8jjKjrtvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmJmOWJlZTUzMWYzZGVlMmQwM2JiZjRlNjllZjgyZWVk
Yjk5YWYwHhcNMjUwMTAxMTk0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjQ2MmYyZDhhNmE2ZWI2MzU5MzU4NzM4ODEzZGM4MGRjYzM5MzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Go8Kw4fwfPDok+v15h2xtf6tLv
psaUfkG4Z8zgUmQldUXYnFljEM4u1Kq66vAgWkS/pz9/i8PkyZdhuSC2VTEXTCnw
HiJALnYgSh8zJXD1nWh/2tGo2kULsLJIMxgraAv5PQWfyfamNZTFPaQJs+bDSOG0
8VOSH9sKNbS/gpI/1Z0Kc2qbTmKH0eshcIM7ecjUnDYksqTeKHF0fV5OoOuKJg5U
qLP9oYHa39wASdWRcRqYIR2CU/uRwhwmw570LWbrof6OUngua59NBDInhYQ38toF
sj+PJMo1fAembT7/Qt+5sE7iaMG0bC3nRgwKgiA8aZJhAhlT1ooBN2jTgQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDJGLy2Kam62NZNYc4gT3IDcw5OQMB8GA1UdIwQY
MBaAFPG7+b7lMfPe4tA7v05p74Lu25mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYt
NmZhZDA4YWEyMGVlLzEvTWtZdkxZcHFiclkxazFoemlCUGNnTnpEazVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYtNmZhZDA4YWEyMGVl
LzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAaBAIAATAUAwQBBTgoMAwD
BAAFOCsDBAQFOCAwDgQCAAIwCAMGByoBRsAAMA0GCSqGSIb3DQEBCwUAA4IBAQB1
D9BqNqaE1ISjEjnw8sc1louew8zyT/zvSr68ae+TVxFYwuoe99cDfSEb8SkJKKiQ
ec7ZOlBPi5OXT/jxwznlDKrsrHXn1q24ylfsmv2nT31lXclN+UdME+rKHLbzcVKP
Xlq6BIZQu+VqCul4GeGdjKmAuf/oDRgTWq4J1CSFAw7SW1QE5RMZuS6x3iynJgOp
gDH1NKxiGzHnGgl1AYcTfmZEW8LKfOsF9h8wuQxMRilSECcEYOuqR/051vnImUW8
GtGULYgJKTP8IfoNJQIJSMtggL9S/FhQu3IevZQTAGLBRjtIVKkGZ0Ti5We7+zJg
oQBonLSoH9uZ8wsxix5y
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:25 2025 by rpki-client on console.sobornost.net