Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/5v5fbxm0onmQ5phh1vtPl6FxD1c.roa
File: 5v5fbxm0onmQ5phh1vtPl6FxD1c.roa (raw, json)
Hash identifier: KBmh9Y8I6Cy6Ru2HeI3iYp7r+Gc7B9nY5apl2mNlMUg=
Subject key identifier: E6:FE:5F:6F:19:B4:A2:79:90:E6:98:61:D6:FB:4F:97:A1:71:0F:57
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 01953E0DB620ACC1C8A9F55C0FFFDEA685C9
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/5v5fbxm0onmQ5phh1vtPl6FxD1c.roa
Signing time: Tue 25 Feb 2025 17:00:40 +0000
ROA not before: Tue 25 Feb 2025 17:00:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4580::/32 maxlen: 32
2a0e:4581::/32 maxlen: 32
2a11:9886::/32 maxlen: 32
2a12:9504::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3e:0d:b6:20:ac:c1:c8:a9:f5:5c:0f:ff:de:a6:85:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Feb 25 17:00:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6fe5f6f19b4a27990e69861d6fb4f97a1710f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:6e:c3:4d:75:0e:11:dc:2f:8d:64:33:05:
b0:b6:94:4b:24:66:fb:47:1b:83:82:70:06:53:09:
10:70:fe:1e:fa:62:61:57:11:fb:9c:3b:36:94:a9:
8b:25:91:f7:32:fa:78:9a:9b:0c:4f:96:ce:5b:50:
10:ff:7e:f8:a8:d4:a7:b8:a3:92:ca:a4:b2:a8:f5:
07:ae:48:9a:b6:5c:6f:9d:ad:b3:17:6d:21:d1:95:
d1:a6:9d:f2:20:54:d4:e1:8e:92:62:15:a2:bd:a7:
69:59:c6:51:ea:1a:bd:db:d2:c0:77:8c:dc:e6:a4:
2e:65:53:2c:db:a4:21:87:20:56:a0:81:32:c8:84:
2d:4b:31:57:87:b6:ab:a5:91:60:b4:a7:15:d7:c2:
51:92:10:51:4e:ab:b7:c3:cf:88:3a:37:65:33:ce:
86:b5:c8:cc:8c:57:a4:52:99:96:a1:5d:6f:e1:ed:
a8:c7:4e:b7:f3:40:9e:b9:22:98:f9:c8:d4:12:99:
70:9f:44:97:b9:f2:f6:da:b2:a4:f4:48:5a:a6:44:
58:c7:8d:8e:9f:93:c2:b5:95:39:0f:7d:b8:dd:ac:
2c:a5:b0:30:0f:b0:cf:b1:23:0b:8f:ce:70:22:bc:
09:0d:01:80:02:79:72:03:e4:c9:70:6b:f2:b6:9f:
82:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:5F:6F:19:B4:A2:79:90:E6:98:61:D6:FB:4F:97:A1:71:0F:57
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/5v5fbxm0onmQ5phh1vtPl6FxD1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4580::/31
2a11:9886::/32
2a12:9504::/32
Signature Algorithm: sha256WithRSAEncryption
55:50:e3:a1:3d:5d:72:51:6e:2f:43:93:60:3c:d6:5c:1c:52:
7a:80:4b:64:7b:83:28:ca:bb:1c:32:70:fd:00:2e:d3:00:4b:
fe:30:2b:4d:5a:1e:3c:3d:45:6c:3b:26:b2:6b:33:9f:a8:4d:
52:14:b6:7e:16:4d:44:11:4c:0b:aa:fd:08:7e:52:20:65:23:
ad:ed:71:9b:18:07:b2:33:3b:49:eb:f3:e7:5e:26:3a:8c:39:
ab:20:be:dd:28:9f:ec:c5:ac:ed:88:b1:42:58:be:49:15:7a:
36:7e:22:5a:a3:04:eb:2e:72:9c:73:a2:39:2c:05:45:17:ce:
40:9c:1c:9c:c0:1e:aa:c7:31:51:c0:1d:43:7d:e6:35:8d:78:
2d:00:c4:3b:a5:3f:ef:bb:68:30:ef:a3:72:f3:17:5f:36:9b:
b6:f9:63:92:09:58:eb:d3:08:e7:b6:12:54:26:de:16:f1:5e:
49:24:2a:f4:b0:5c:34:8e:e6:b3:90:c3:f2:93:f5:c2:a6:90:
9a:f6:e2:d1:45:d4:e3:77:b1:8a:91:8f:18:e4:9c:4e:78:0c:
78:b1:11:cd:1d:7a:8f:85:56:54:47:f4:69:c7:2b:70:59:f3:
e8:0f:5a:f9:f3:29:b5:d4:59:c1:91:9b:3d:04:6e:bb:dd:a1:
99:90:15:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:53:41 2025 by rpki-client on console.sobornost.net