Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/5RI4SZ7klYwbXOltWz9mLe7dxD8.roa
File: 5RI4SZ7klYwbXOltWz9mLe7dxD8.roa (raw, json)
Hash identifier: GWR45JMOb96igm8o2PgndioWHr8iBdYB9L2Wx8rR7YM=
Subject key identifier: E5:12:38:49:9E:E4:95:8C:1B:5C:E9:6D:5B:3F:66:2D:EE:DD:C4:3F
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 0194206865889AC0EB0C4885BD0A77BBAB93
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/5RI4SZ7klYwbXOltWz9mLe7dxD8.roa
Signing time: Wed 01 Jan 2025 05:48:20 +0000
ROA not before: Wed 01 Jan 2025 05:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47914
IP address blocks: 91.245.128.0/19 maxlen: 24
91.247.0.0/19 maxlen: 24
93.157.232.0/21 maxlen: 24
109.206.128.0/19 maxlen: 24
176.108.192.0/19 maxlen: 24
2001:67c:2704::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:65:88:9a:c0:eb:0c:48:85:bd:0a:77:bb:ab:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Jan 1 05:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e51238499ee4958c1b5ce96d5b3f662deeddc43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:23:70:b9:20:9b:5f:0f:01:5b:3e:e9:a7:
76:8f:8f:81:98:a9:d9:df:ce:94:63:ed:52:6f:bf:
fa:c2:76:fc:a7:b7:a3:7d:84:83:44:94:5d:8f:0b:
5a:7a:e4:a8:a1:a5:9f:72:b8:41:6d:42:39:54:de:
aa:45:b3:76:32:cc:f8:a5:0b:ca:24:d1:43:a6:db:
0e:0e:99:57:3e:db:92:0d:15:8e:ef:55:03:b3:df:
a6:6e:b2:df:0a:32:4f:1b:22:31:51:b1:76:e9:06:
35:78:17:30:ba:69:c8:5a:34:c0:03:f5:3a:25:22:
0e:64:fe:29:7c:21:6c:7d:59:49:44:b0:9c:43:a1:
3f:9c:ba:f8:73:f4:0f:cc:e1:29:b1:61:13:b3:07:
9a:4c:1e:dd:ae:8e:de:17:f5:f4:a4:4f:e0:a4:f9:
26:ce:51:58:87:98:93:ec:08:8b:1d:03:f0:94:bf:
5c:35:47:ed:3b:28:52:9f:c6:61:c2:3f:38:13:01:
13:ef:9d:2e:85:f3:b8:22:ba:d5:a3:07:d9:32:d7:
94:dd:1a:14:d5:25:b5:4e:d0:21:55:a7:e6:3f:86:
ec:ea:fc:81:be:70:00:98:64:0c:9c:8d:1f:70:58:
58:35:9f:18:8e:0a:57:0b:25:a4:a5:bb:01:5f:82:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:38:49:9E:E4:95:8C:1B:5C:E9:6D:5B:3F:66:2D:EE:DD:C4:3F
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/5RI4SZ7klYwbXOltWz9mLe7dxD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.128.0/19
91.247.0.0/19
93.157.232.0/21
109.206.128.0/19
176.108.192.0/19
IPv6:
2001:67c:2704::/48
Signature Algorithm: sha256WithRSAEncryption
64:4a:b5:24:07:e2:01:7d:22:41:66:f6:7c:36:d3:67:79:e0:
28:15:70:9d:59:60:19:5c:76:4c:49:a7:10:a3:4b:31:a0:95:
c1:d8:1c:b2:9f:23:ba:5a:30:c5:6e:b0:c7:84:0d:6b:c7:91:
1a:dc:6d:8b:b3:e1:eb:65:b6:a1:44:dd:a0:56:ec:60:cd:cd:
56:77:ee:63:1f:6c:0f:ba:2c:84:89:3b:f9:38:a5:ff:8e:a8:
0f:10:7e:c8:44:61:d0:46:09:29:5a:a6:1f:88:82:32:b3:94:
5b:c8:9a:e1:f1:32:56:25:af:35:3a:4d:99:62:42:0b:de:85:
58:8c:83:6b:b6:24:23:eb:77:cd:2a:f1:78:a6:dc:ab:88:44:
40:34:a5:89:f6:c4:4e:98:b9:7e:82:9c:64:6b:2a:13:a0:82:
b1:d3:84:e2:0b:13:ad:8e:f8:47:ab:28:2b:3b:8f:1a:1e:b2:
5f:d4:06:cd:af:49:e1:7e:d8:51:2b:d6:57:40:be:56:f4:23:
f8:85:e4:d6:c5:ce:e0:a2:4f:5b:fe:7c:32:d4:41:92:87:ad:
fe:20:63:05:9d:3d:f9:13:66:17:d8:f6:b2:de:ad:10:b9:67:
c4:f9:08:7c:c6:dc:20:de:79:d3:75:75:34:18:41:a4:52:be:
73:14:ba:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net