Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/CIS9gFmVTktTHr6RUhk8XZahN1E.roa
File: CIS9gFmVTktTHr6RUhk8XZahN1E.roa (raw, json)
Hash identifier: O3ctsGAkdQ3hrR3CxmP2jT/+C60dYA4RexLZILCPJRA=
Subject key identifier: 08:84:BD:80:59:95:4E:4B:53:1E:BE:91:52:19:3C:5D:96:A1:37:51
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 0195B3ACA0CA8E30F1FF5C20BF8B5AEB6065
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/CIS9gFmVTktTHr6RUhk8XZahN1E.roa
Signing time: Thu 20 Mar 2025 13:09:49 +0000
ROA not before: Thu 20 Mar 2025 13:09:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28084
IP address blocks: 84.54.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:ac:a0:ca:8e:30:f1:ff:5c:20:bf:8b:5a:eb:60:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Mar 20 13:09:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0884bd8059954e4b531ebe9152193c5d96a13751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:96:92:93:4c:29:0c:1d:d0:b4:d8:0a:cd:
73:ad:f7:9e:af:6f:f8:65:aa:6f:17:f4:e2:9b:ab:
40:2d:19:dc:4f:f0:c9:d5:26:d4:69:ac:d6:9c:fa:
5a:0b:65:1f:cb:ef:cd:bd:46:64:39:7f:4d:b8:7c:
5d:a4:a2:04:c1:46:fc:b4:1f:df:a3:1e:c7:27:bf:
51:18:0e:14:28:c8:50:c2:f8:e1:d2:09:a9:bb:c9:
25:fb:1a:7a:5d:96:36:7d:40:62:37:2a:6d:57:81:
b7:68:ac:e4:6b:14:3f:b4:bd:57:74:16:2f:1f:6b:
8b:86:af:6c:7d:2b:7e:ce:68:bc:fc:16:2a:2f:ca:
dc:53:32:2a:f0:c1:b7:a9:b8:12:5f:ed:97:6f:7f:
7e:d6:1c:8d:77:2e:eb:17:12:96:66:9f:f3:76:cb:
85:20:c3:7e:09:29:df:66:f8:f9:eb:18:72:67:93:
41:3b:37:c9:7e:c0:47:90:4a:3f:2e:04:ef:f8:f1:
78:e5:ed:f2:47:f2:31:c4:81:51:dc:1d:40:ae:20:
57:13:20:e8:d1:e4:4c:1f:59:32:3b:7a:48:c9:cb:
b5:7e:62:f9:b8:12:98:d4:ed:c1:1a:14:a8:80:ac:
53:db:b6:c9:a5:3a:0f:75:9b:69:d2:4f:a1:b8:b1:
50:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:84:BD:80:59:95:4E:4B:53:1E:BE:91:52:19:3C:5D:96:A1:37:51
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/CIS9gFmVTktTHr6RUhk8XZahN1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:3a:63:76:9e:e0:2a:62:15:90:74:ca:43:4e:6c:18:3f:86:
2f:7e:57:4d:b4:43:06:e9:a9:d3:64:65:6c:31:69:15:ca:73:
c7:d6:ee:9b:54:3b:29:f2:93:0f:55:f4:12:b8:97:10:bb:a5:
b2:ca:e7:f9:be:e7:84:4e:39:2e:b4:0f:7d:25:cc:6b:84:51:
1c:86:af:e0:c7:66:54:9e:bb:04:b7:d1:be:24:f7:3c:ac:8a:
fa:4e:0e:0a:91:39:1f:ef:63:5d:40:ff:06:4a:f6:3f:70:d4:
46:f0:8b:91:1f:3b:6e:ee:9d:50:0e:2a:e6:33:8d:22:21:7b:
a0:59:0f:bd:51:ea:c7:7b:a1:d7:68:0e:3d:3d:b8:80:0b:e6:
4c:2f:04:1d:c7:d8:e1:cd:27:84:e2:3e:0f:33:c6:07:a0:09:
7b:1c:fa:da:57:b8:9e:08:b6:cc:7f:6f:ab:d9:2a:b7:29:30:
2b:96:72:fe:c8:f7:b2:be:3f:c0:94:2c:3f:ee:20:9b:a0:06:
77:bf:29:f0:43:74:24:42:90:d1:88:c2:ae:fa:a5:a4:21:23:
0a:32:85:77:b4:24:72:8c:ba:9d:fb:c8:91:a4:af:58:1b:b6:
c4:52:3d:16:81:81:0d:2d:5c:1d:20:16:2d:0f:ea:c1:87:ab:
c4:3b:83:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:31 2025 by rpki-client on console.sobornost.net