Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa
File: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (raw, json)
Hash identifier: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=
Subject key identifier: 96:A8:80:FD:A0:23:F5:88:8F:98:46:3F:A3:32:81:75:35:DA:2B:C5
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019421B2004786129E9C41BD17EE2D9E45EF
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44539
IP address blocks: 5.57.212.0/24 maxlen: 24
212.66.32.0/20 maxlen: 24
212.66.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:00:47:86:12:9e:9c:41:bd:17:ee:2d:9e:45:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96a880fda023f5888f98463fa332817535da2bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:f6:83:e1:ae:8b:f2:69:9b:d1:a5:e8:ba:
c6:2d:e5:d9:25:88:ff:ad:22:cb:12:3b:1f:90:32:
ad:1a:cb:77:88:49:e4:2f:6d:13:80:3e:19:e1:e3:
00:57:4e:ed:3d:dc:21:51:7f:76:a3:5e:72:4a:0e:
ec:19:25:2e:be:45:8a:42:23:15:32:e2:9e:f8:44:
62:c5:9a:fa:a3:06:26:4a:af:00:d6:d7:15:cc:8f:
37:5c:39:bf:57:dd:a6:65:72:cc:43:36:9c:94:ab:
fd:12:4b:b2:87:d8:a6:35:27:a1:10:e3:88:b9:2b:
e1:b9:c2:5e:c7:f3:d8:0f:81:d1:3c:78:af:e0:21:
17:15:16:f0:8b:92:77:c3:4f:57:14:26:6b:ed:3e:
0a:b9:cf:9c:e5:43:8e:fb:7a:c6:2b:ec:7d:cc:1d:
a3:a7:a9:27:78:78:fd:0d:e6:e1:4d:a1:0b:df:e9:
a0:b1:7e:7b:c2:36:08:58:74:a7:ab:7e:f1:a1:41:
00:43:7c:d8:1f:34:fd:5c:67:94:81:52:75:de:ff:
5c:31:a0:2a:f2:a7:b2:1c:be:12:ee:41:02:a4:73:
7f:14:f0:96:ff:13:b7:9a:ef:9b:87:57:28:b2:68:
8f:0e:35:7b:49:3e:cb:f2:07:c4:46:1d:6e:66:cb:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:80:FD:A0:23:F5:88:8F:98:46:3F:A3:32:81:75:35:DA:2B:C5
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.212.0/24
212.66.32.0/20
212.66.56.0/21
Signature Algorithm: sha256WithRSAEncryption
09:c7:ef:8f:c4:ba:d4:a6:17:71:fc:5d:47:64:5b:1b:eb:38:
92:21:ca:2b:da:3c:91:83:12:27:10:33:6d:57:53:25:5c:a5:
d5:11:00:80:df:3b:be:b6:b2:de:37:d3:f3:81:8d:f0:0a:15:
f6:92:fe:de:28:2f:2b:22:27:6e:88:38:46:7a:90:ac:b4:6c:
6c:62:11:fb:4c:b4:7f:db:59:6c:d1:f7:ae:75:67:e9:fd:01:
47:55:3a:31:cd:ed:c1:9e:52:32:c8:29:5b:ba:14:32:7d:7e:
e2:c8:09:e5:b2:55:71:f0:f8:78:62:18:30:c6:71:70:87:fc:
f1:58:88:4f:c3:01:16:54:41:f3:a9:7d:73:75:6c:da:ac:bd:
e5:2a:f6:45:a8:0d:04:3e:a4:06:fb:dc:5c:e7:11:3e:d1:99:
07:11:a6:de:9d:11:08:8e:b1:32:61:c1:b8:b4:e4:4b:2c:91:
9b:7a:0e:41:59:eb:11:a9:53:37:9e:35:73:a9:93:2e:70:91:
44:09:be:bb:31:e0:a4:b0:cd:5b:bb:7b:b5:78:40:ec:5c:25:
98:e3:71:c8:68:d1:82:fe:fd:d7:24:2a:e0:83:16:f6:a4:10:
a5:a8:22:8b:b7:af:83:00:ff:31:ee:85:ba:38:22:cc:17:bd:
39:fe:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net