Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/O_5t5VnCFqXKQyvXfDwSl3tCQrc.roa
File: O_5t5VnCFqXKQyvXfDwSl3tCQrc.roa (raw, json)
Hash identifier: LGWIHzKQHKwDqn81Bc/cH47w3yhqK3S50ixaYRYnDVk=
Subject key identifier: 3B:FE:6D:E5:59:C2:16:A5:CA:43:2B:D7:7C:3C:12:97:7B:42:42:B7
Certificate issuer: /CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Certificate serial: 0194274805450AF7D489D37EB4227A648D65
Authority key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/O_5t5VnCFqXKQyvXfDwSl3tCQrc.roa
Signing time: Thu 02 Jan 2025 13:50:18 +0000
ROA not before: Thu 02 Jan 2025 13:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5603
IP address blocks: 195.5.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:05:45:0a:f7:d4:89:d3:7e:b4:22:7a:64:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bfe6de559c216a5ca432bd77c3c12977b4242b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:18:90:4c:12:c5:28:d3:65:9d:d3:6f:ac:2c:
f0:a6:62:b3:86:89:e7:d8:72:ed:c5:2c:86:63:57:
86:dc:9d:cc:62:0a:03:26:e2:5f:86:2c:ee:05:41:
79:13:76:53:4f:6e:25:3a:fe:30:cb:61:55:88:5b:
2f:63:45:e0:04:d9:17:26:d3:a9:6d:41:1f:98:f8:
56:65:97:12:7e:32:e2:a5:7a:52:26:16:45:7a:36:
51:d0:b0:f4:2a:aa:5f:96:54:3f:88:fd:54:d4:24:
35:76:1a:4d:5c:94:d0:74:64:52:59:f9:4c:11:0f:
44:91:2b:a8:0e:94:52:e9:16:40:ca:14:9a:75:cd:
86:98:7d:ad:94:de:60:f9:34:c6:9f:6a:1a:cf:13:
b6:ba:58:41:c1:02:42:9d:04:bc:bc:8b:3d:4c:bb:
f7:54:bf:14:f9:b1:e1:f2:e2:c4:21:bd:c2:62:1f:
af:b1:54:59:7a:90:86:c4:2f:57:60:81:aa:51:10:
60:a7:ac:2e:6e:ef:f6:0e:31:62:2d:07:36:48:76:
c2:92:5a:e7:81:1d:9f:29:2d:58:fc:77:8a:fc:a3:
78:eb:57:63:91:2f:9e:87:9d:62:d4:f4:62:30:83:
2b:7a:5a:ce:45:80:e5:16:70:2d:06:a7:aa:ac:b8:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FE:6D:E5:59:C2:16:A5:CA:43:2B:D7:7C:3C:12:97:7B:42:42:B7
X509v3 Authority Key Identifier:
keyid:06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/O_5t5VnCFqXKQyvXfDwSl3tCQrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.164.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8c:6e:48:ae:1a:ed:85:cc:d0:2e:d2:61:c7:ce:17:61:8c:
cb:60:c1:c5:a5:ab:1b:13:42:80:75:67:74:cb:08:fd:37:d3:
92:87:84:6b:51:82:22:4b:5f:e9:5e:ad:ae:cd:65:a4:71:16:
f2:d9:77:ef:c5:97:60:71:b5:22:f1:ac:29:af:99:90:8c:36:
2d:22:6c:3a:8c:7c:84:2c:2d:4f:be:fc:3f:c1:f8:e4:59:27:
45:f5:56:5f:56:58:9b:ac:e7:98:f7:66:ab:23:5d:52:9d:e7:
ba:dc:ad:fa:45:56:16:a4:b9:e5:3c:a2:79:b1:df:dc:cf:f0:
9a:88:e0:fd:08:c8:7a:72:1a:60:eb:de:30:29:47:63:51:93:
c6:56:6b:6e:7c:6f:d2:9e:c2:aa:62:a2:7c:54:82:61:91:70:
65:11:ee:fc:e2:08:25:4d:91:37:8b:11:e2:97:b3:de:01:1d:
ce:3f:7a:7d:f0:d5:e3:a8:7b:5c:cd:64:37:26:51:c0:8c:35:
d1:80:72:b9:54:86:a3:3f:ad:66:bb:46:52:03:87:a4:62:f6:
b2:82:e8:1b:c8:c5:c4:8e:75:1e:b0:11:81:7e:cc:cb:be:87:
e8:bf:46:67:ad:74:2b:2e:03:9b:0c:e3:73:93:bf:3c:01:06:
9f:d4:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net