Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/FauikgvNNACdpAzUUwIbibw2Em4.roa
File: FauikgvNNACdpAzUUwIbibw2Em4.roa (raw, json)
Hash identifier: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=
Subject key identifier: 15:AB:A2:92:0B:CD:34:00:9D:A4:0C:D4:53:02:1B:89:BC:36:12:6E
Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab
Certificate serial: 01941FFAAAB046182DBBBAFF4B765F9566AE
Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/FauikgvNNACdpAzUUwIbibw2Em4.roa
Signing time: Wed 01 Jan 2025 03:48:28 +0000
ROA not before: Wed 01 Jan 2025 03:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198471
IP address blocks: 5.133.54.0/23 maxlen: 23
5.133.55.0/24 maxlen: 24
5.133.56.0/22 maxlen: 22
5.133.56.0/23 maxlen: 23
5.133.56.0/24 maxlen: 24
5.133.57.0/24 maxlen: 24
5.133.58.0/23 maxlen: 23
5.133.58.0/24 maxlen: 24
5.133.59.0/24 maxlen: 24
5.133.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:aa:b0:46:18:2d:bb:ba:ff:4b:76:5f:95:66:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15aba2920bcd34009da40cd453021b89bc36126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:50:eb:86:20:7c:be:f4:00:0c:80:3f:9b:
d5:42:3b:a7:74:56:c4:b9:a7:15:68:b5:ca:65:40:
d3:0e:53:51:64:0d:f6:89:db:f3:fe:c4:18:90:5d:
09:9d:8e:f6:ae:31:af:a5:1f:a1:a0:7a:79:3f:c6:
2a:77:d9:8f:0a:5a:f6:0b:4e:79:71:90:f8:99:5e:
1b:78:10:3a:dd:61:5a:97:8e:42:3a:86:0b:4b:f2:
e3:6a:ed:0b:ae:0f:06:e2:78:dd:07:88:87:76:2b:
24:7d:5d:8b:18:f1:88:59:86:5c:2a:0f:95:74:ea:
02:22:49:49:d0:9d:8a:df:41:c1:7e:26:74:56:b6:
a4:60:6c:8e:d1:b9:48:d2:47:f9:c5:5b:dc:f6:79:
8b:c8:0f:3a:07:0c:ba:26:1c:ca:ef:8f:2d:ad:a9:
a3:ed:b0:06:4b:18:43:3d:31:6f:6d:e5:20:be:af:
7d:a8:d3:9c:71:a4:53:d2:b0:ab:be:d0:c0:b9:21:
5d:4a:20:d3:05:d6:c5:bf:2c:55:f9:f2:53:06:47:
cd:58:fd:f6:30:ad:a9:61:bd:c1:20:90:69:a8:7b:
46:1e:e2:66:9d:69:b0:33:b1:c4:63:fb:ee:b5:1c:
4e:84:b6:52:96:3d:76:2d:fa:ab:1e:23:37:12:ed:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:A2:92:0B:CD:34:00:9D:A4:0C:D4:53:02:1B:89:BC:36:12:6E
X509v3 Authority Key Identifier:
keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/FauikgvNNACdpAzUUwIbibw2Em4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.54.0-5.133.60.255
Signature Algorithm: sha256WithRSAEncryption
60:bb:54:f1:15:71:25:2c:d2:20:d1:05:11:72:3d:98:17:68:
70:f1:f3:f7:cb:1f:ac:5b:58:4a:2d:c4:de:5b:9f:37:66:70:
77:a1:34:c6:8d:ce:4a:9c:c8:d3:3f:91:ec:e0:ea:df:33:26:
2e:55:e9:99:ed:19:5b:1d:f3:a2:09:72:4c:19:7b:52:f3:3d:
ad:27:43:0c:bd:b6:b3:cd:40:d4:4d:b2:e9:4c:9f:77:35:ba:
33:4f:b0:16:e7:45:ea:0b:15:ef:12:71:80:46:79:5c:5d:ca:
a1:97:3b:a1:a3:51:7c:4d:4e:27:54:2c:18:8c:5e:91:59:c4:
0d:6e:79:e3:e4:76:94:99:58:1f:67:e8:9c:f3:12:02:61:cf:
2e:71:c4:c5:5b:3b:32:0d:94:77:04:1b:15:a7:ba:c1:ea:dd:
11:0f:f6:cb:8d:1f:fa:f7:11:37:cd:57:1e:6c:80:87:a0:61:
a3:6a:5d:7a:75:a5:9d:79:89:ab:0b:60:79:cd:2a:60:24:d2:
f7:8e:26:af:80:7f:0a:36:41:27:0e:57:de:a6:a5:56:88:a4:
da:ad:7b:51:ec:a8:43:9a:83:4b:87:95:5f:c3:57:49:a2:4a:
8a:f9:e9:ee:1b:7e:b3:be:6f:5e:0e:bc:b3:3e:5f:4d:19:45:
b1:c4:88:ac
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQf+qqwRhgtu7r/S3ZflWauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMDQ2Y2RlODUxMjgwMmIxNDkzM2IzNGEyMmY3NzY1ZTI5
NWQyYWIwHhcNMjUwMTAxMDM0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWFiYTI5MjBiY2QzNDAwOWRhNDBjZDQ1MzAyMWI4OWJjMzYxMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnxQ64YgfL70AAyAP5vVQjundFbE
uacVaLXKZUDTDlNRZA32idvz/sQYkF0JnY72rjGvpR+hoHp5P8Yqd9mPClr2C055
cZD4mV4beBA63WFal45COoYLS/Ljau0Lrg8G4njdB4iHdiskfV2LGPGIWYZcKg+V
dOoCIklJ0J2K30HBfiZ0VrakYGyO0blI0kf5xVvc9nmLyA86Bwy6JhzK748tramj
7bAGSxhDPTFvbeUgvq99qNOccaRT0rCrvtDAuSFdSiDTBdbFvyxV+fJTBkfNWP32
MK2pYb3BIJBpqHtGHuJmnWmwM7HEY/vutRxOhLZSlj12LfqrHiM3Eu1+WQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBWropILzTQAnaQM1FMCG4m8NhJuMB8GA1UdIwQY
MBaAFB8EbN6FEoArFJM7NKIvd2XildKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMt
MjE5YjlmNmY5MDg3LzEvRmF1aWtndk5OQUNkcEF6VVV3SWJpYncyRW00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMtMjE5YjlmNmY5MDg3
LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEFhTYD
BAAFhTwwDQYJKoZIhvcNAQELBQADggEBAGC7VPEVcSUs0iDRBRFyPZgXaHDx8/fL
H6xbWEotxN5bnzdmcHehNMaNzkqcyNM/kezg6t8zJi5V6ZntGVsd86IJckwZe1Lz
Pa0nQwy9trPNQNRNsulMn3c1ujNPsBbnReoLFe8ScYBGeVxdyqGXO6GjUXxNTidU
LBiMXpFZxA1ueePkdpSZWB9n6JzzEgJhzy5xxMVbOzINlHcEGxWnusHq3REP9suN
H/r3ETfNVx5sgIegYaNqXXp1pZ15iasLYHnNKmAk0veOJq+Afwo2QScOV96mpVaI
pNqte1HsqEOag0uHlV/DV0miSor56e4bfrO+b14OvLM+X00ZRbHEiKw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:24 2025 by rpki-client on console.sobornost.net