Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/M5q-y_pSOaw-LnhCtgtI_cxU90s.roa
File: M5q-y_pSOaw-LnhCtgtI_cxU90s.roa (raw, json)
Hash identifier: EkxFUEnDMMrgIyFYsLlI4yCORNtS7fa6ZKub0vDM94A=
Subject key identifier: 33:9A:BE:CB:FA:52:39:AC:3E:2E:78:42:B6:0B:48:FD:CC:54:F7:4B
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 01941F8C2BB43F9B8939B3030613F7ECC29D
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/M5q-y_pSOaw-LnhCtgtI_cxU90s.roa
Signing time: Wed 01 Jan 2025 01:47:47 +0000
ROA not before: Wed 01 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214443
IP address blocks: 217.61.242.0/23 maxlen: 23
217.61.242.0/24 maxlen: 24
217.61.243.0/24 maxlen: 24
2a01:e600::/29 maxlen: 29
2a01:e600::/32 maxlen: 32
2a01:e601::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2b:b4:3f:9b:89:39:b3:03:06:13:f7:ec:c2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Jan 1 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=339abecbfa5239ac3e2e7842b60b48fdcc54f74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:8d:d8:01:60:08:3c:42:f3:5f:21:21:00:
18:61:d6:1f:61:34:4b:85:8e:41:e2:21:0e:17:a5:
dd:3b:c8:63:47:1a:78:79:41:80:f7:46:af:89:b0:
c9:cc:fc:8d:93:7a:5e:8b:91:b1:2c:4b:c4:27:ab:
27:6d:3c:5e:eb:05:ba:18:4e:1d:1f:94:b7:3e:ce:
ef:7e:1c:51:c8:8e:15:9b:cf:2b:20:7f:9b:85:e0:
4b:0e:ee:29:32:23:45:5b:9f:52:e8:c9:86:c6:8f:
e5:37:12:e2:41:4a:4c:93:01:60:5c:92:77:1f:b4:
fb:66:21:0d:d2:94:57:e9:63:7e:53:62:c6:de:fc:
c0:b4:41:fb:63:f7:75:d3:7b:4a:ce:f5:0d:42:f0:
85:89:a6:46:c4:2e:61:10:01:6d:41:6b:78:0c:26:
24:46:2f:f1:36:72:6e:ef:ed:ee:ea:6b:5a:bd:0c:
77:06:dc:ac:3c:57:12:cd:ba:c6:49:b9:fd:c8:63:
8c:89:5d:bf:04:9c:f8:25:33:a1:14:93:a3:d4:bd:
72:70:a5:e5:0d:d5:50:92:38:97:87:15:4c:7a:9c:
03:4a:1a:ed:fa:3e:10:02:59:9f:88:7e:4b:21:74:
2d:85:e5:df:4e:dd:48:9b:ea:99:21:aa:56:ef:ac:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:BE:CB:FA:52:39:AC:3E:2E:78:42:B6:0B:48:FD:CC:54:F7:4B
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/M5q-y_pSOaw-LnhCtgtI_cxU90s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.61.242.0/23
IPv6:
2a01:e600::/29
Signature Algorithm: sha256WithRSAEncryption
20:34:18:eb:ed:25:c0:63:ef:32:b4:55:84:d0:28:f8:12:4d:
18:99:aa:5b:9d:8c:2c:3b:70:08:1f:a6:e0:90:14:c3:09:65:
13:be:98:7b:5b:71:09:3a:08:a1:4f:1a:6a:4c:e2:ef:36:0d:
4d:1f:30:45:45:a7:d6:d4:57:fe:1f:f4:2c:2b:9f:9b:24:e8:
73:b8:95:ac:dd:83:52:06:9d:19:34:ea:da:55:2a:c9:cd:f6:
2c:c7:75:39:11:dd:b8:a7:74:41:1c:82:d8:08:80:75:11:77:
b4:e4:69:bf:ff:a1:2d:a0:35:1e:37:53:b2:13:16:5b:4f:03:
be:f4:f4:34:9e:f0:0f:74:5d:15:77:77:32:ae:1a:d4:4d:45:
e8:7c:50:1d:c9:81:bb:0d:44:e7:60:62:c0:57:39:be:69:e8:
1d:9f:88:9a:95:64:fb:d9:9f:2e:ee:01:ce:d6:e3:1c:c8:52:
44:c7:38:d3:c6:c0:ad:53:39:92:1b:58:c4:bd:38:86:17:82:
8a:fd:0e:6d:04:14:86:6e:91:c8:f0:15:b7:0e:89:cc:a9:0b:
62:7a:3f:fe:99:cd:ba:fb:bc:97:c3:4b:7f:47:39:7a:bb:94:
9d:2b:76:31:34:98:b3:fa:ac:c1:f2:ad:9c:70:77:56:b8:79:
e1:29:be:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:27 2025 by rpki-client on console.sobornost.net