Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/RnK86UmIAp-Vf8TMZLM03XjM-aE.roa
File: RnK86UmIAp-Vf8TMZLM03XjM-aE.roa (raw, json)
Hash identifier: tadpJcfzMaehdbJngFohNz6vat40laG6LyK588h2pfQ=
Subject key identifier: 46:72:BC:E9:49:88:02:9F:95:7F:C4:CC:64:B3:34:DD:78:CC:F9:A1
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 0194D5B799A0FB6104FAD5D2F62E71466D45
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/RnK86UmIAp-Vf8TMZLM03XjM-aE.roa
Signing time: Wed 05 Feb 2025 10:46:06 +0000
ROA not before: Wed 05 Feb 2025 10:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205198
IP address blocks: 5.180.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:b7:99:a0:fb:61:04:fa:d5:d2:f6:2e:71:46:6d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Feb 5 10:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4672bce94988029f957fc4cc64b334dd78ccf9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:39:95:6c:7d:26:c8:43:6b:d8:65:0c:16:
cf:6e:c3:8a:6a:11:1f:5d:b5:68:0e:79:ac:43:69:
9b:7b:46:d4:e5:37:bf:9e:f6:d2:29:57:fa:e6:57:
cd:cd:3c:0a:3c:94:0f:84:34:74:62:fa:3c:3b:46:
6e:0e:55:6e:5b:1a:de:c7:df:1a:5f:f1:a6:4a:74:
19:a8:3b:4d:49:f9:1c:cd:eb:e9:a2:8a:9d:0d:d5:
36:dd:bc:04:9b:b6:94:56:ff:4c:21:7d:da:3e:e9:
2b:fe:3c:a9:13:1d:58:66:9f:8d:94:94:d2:b8:5f:
1d:f3:5c:ce:26:9a:48:52:8d:89:65:51:5d:f3:96:
32:56:e0:f0:40:51:56:61:92:4e:ce:19:34:75:18:
a4:b5:74:0e:e2:73:e5:8c:0d:ae:ea:6b:19:86:55:
a5:97:c5:ed:d0:5e:27:4a:35:82:3d:32:a6:3d:6a:
cb:d7:6e:25:8b:0d:5b:77:31:e8:bc:17:6c:55:97:
33:6b:b0:a3:3d:fb:21:24:6f:6d:12:25:1a:39:c2:
3b:60:e9:c4:9d:f0:c8:5b:37:8b:79:74:9a:3f:24:
3a:99:04:1e:4a:17:20:2a:80:79:11:9a:81:0a:e9:
a1:75:96:06:d0:8f:40:ac:52:40:d6:b8:2a:fa:68:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:72:BC:E9:49:88:02:9F:95:7F:C4:CC:64:B3:34:DD:78:CC:F9:A1
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/RnK86UmIAp-Vf8TMZLM03XjM-aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.140.0/22
Signature Algorithm: sha256WithRSAEncryption
40:01:67:24:38:13:db:a4:96:19:b8:58:0d:c5:6f:91:80:83:
30:d8:d6:72:ac:a7:e2:87:08:f5:f0:17:76:09:0e:d3:cb:06:
98:0f:77:7e:ac:24:b0:dd:93:93:87:7b:1c:db:68:74:19:0b:
bd:fc:d9:af:85:8a:ce:1a:51:7d:d6:e9:67:b2:e6:58:05:42:
ed:20:fc:5c:29:54:d5:89:11:cb:34:0b:f2:a0:64:f8:67:aa:
7f:7e:f0:bd:17:15:22:d3:79:15:0d:82:8b:ec:d9:14:54:9d:
86:c4:5a:a4:39:a2:ee:6c:9b:59:bb:46:af:d4:d1:ed:e2:ee:
04:8d:56:29:17:33:67:da:be:e4:70:25:e8:c8:3d:fc:07:77:
74:42:6c:a8:37:15:2a:ef:06:c1:4d:15:55:3f:6e:60:96:f2:
dd:c8:03:cf:76:36:ca:50:29:62:af:cd:9e:5d:0a:df:91:b0:
d1:b1:50:cf:da:6d:72:13:15:95:91:bc:91:90:24:31:fa:df:
e1:94:9a:ca:f6:53:b3:ad:86:59:9b:25:9a:07:cc:52:c1:48:
78:1f:76:5d:b5:40:ff:4d:42:09:80:a4:3e:81:45:bf:38:05:
28:62:6e:2d:64:cc:27:e6:2b:38:91:e2:a3:13:4e:8b:dc:ee:
2a:c8:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:26 2025 by rpki-client on console.sobornost.net