Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/5WxXf6dS__Evv8ybNdjAs3Nto-g.roa
File: 5WxXf6dS__Evv8ybNdjAs3Nto-g.roa (raw, json)
Hash identifier: y6JQKN1GUMZnwd9TH2DZ03UU+crYCRvw3vTZfmRAIuw=
Subject key identifier: E5:6C:57:7F:A7:52:FF:F1:2F:BF:CC:9B:35:D8:C0:B3:73:6D:A3:E8
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 01941F8C47776EB47351161F3AE26E7269C8
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/5WxXf6dS__Evv8ybNdjAs3Nto-g.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207044
IP address blocks: 185.106.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:77:6e:b4:73:51:16:1f:3a:e2:6e:72:69:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e56c577fa752fff12fbfcc9b35d8c0b3736da3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:50:c8:60:90:75:20:6d:a5:b1:40:0f:07:
bf:f0:00:ec:05:45:7c:26:a9:2e:a5:b9:0f:08:8d:
8b:11:f4:9b:f6:17:a9:1e:4b:c6:d5:b3:5a:5c:33:
c7:97:a9:e4:19:55:1c:b1:87:f1:00:96:b5:dd:39:
74:97:81:a6:54:78:9b:74:f5:26:65:f6:b9:2e:1f:
2d:aa:6f:a3:93:92:3b:a9:a4:9b:ba:e5:3c:ee:2f:
e6:e5:ef:f3:09:4d:16:5e:48:a3:4a:f1:59:8b:17:
f3:c0:1a:5d:cc:d4:2f:8b:bb:43:5f:df:bd:8f:fe:
84:6a:a2:f9:d1:b2:e3:48:4f:30:9c:31:d2:db:e8:
7b:1f:8c:79:66:89:e2:47:30:b9:ef:d0:60:1f:c0:
cb:44:d9:dc:da:af:41:ae:6d:9f:ac:91:86:1a:76:
1b:bd:dc:b3:24:2d:b0:2f:43:56:82:f9:94:39:cc:
1f:17:e0:ac:1e:63:7b:25:e6:5b:86:83:1e:9f:80:
09:d1:12:e3:8c:22:75:90:5a:d4:40:3c:49:ae:85:
1c:af:01:de:f9:25:30:d0:43:11:be:45:19:48:1d:
ba:42:a0:ad:8d:05:cd:d7:a1:94:e4:8f:01:7a:d6:
a2:6f:4f:72:25:80:47:dc:9c:74:e4:e4:b4:d5:52:
32:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:57:7F:A7:52:FF:F1:2F:BF:CC:9B:35:D8:C0:B3:73:6D:A3:E8
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/5WxXf6dS__Evv8ybNdjAs3Nto-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.88.0/22
Signature Algorithm: sha256WithRSAEncryption
73:11:2e:07:b7:0b:7a:8c:26:5e:37:de:a2:ec:7d:0b:98:61:
43:b3:71:ef:3c:36:50:12:f9:95:72:d2:5b:d8:3e:99:34:f4:
a4:5b:27:56:be:32:44:3d:4d:80:c9:79:7d:46:38:86:41:e9:
0d:da:9c:07:79:5a:10:3a:c5:d8:fc:91:57:3c:58:60:da:b3:
7e:16:cc:f2:91:d0:78:6c:5e:c1:20:14:f6:62:ca:b6:d9:5e:
49:85:c4:42:9c:e7:bc:b0:cb:24:b1:2e:c2:9b:1b:29:3b:b2:
33:b8:32:12:a1:29:14:bc:b4:80:3f:a0:b6:d5:2d:2d:18:f2:
7b:bd:e6:aa:97:b6:51:a9:b9:73:db:ec:cd:e8:00:4a:0a:2f:
df:7e:be:5a:76:1a:d3:63:1c:b8:5d:36:48:80:a4:0b:58:6f:
0b:69:2c:81:63:4d:36:ef:b2:82:76:c2:d6:1e:0e:7b:ee:78:
e8:c3:b6:f8:58:87:ed:98:4f:d7:b0:32:08:91:1e:c8:7e:e1:
7a:85:b4:2d:71:8a:c5:26:53:71:b4:3a:fa:e5:ba:a4:b3:11:
42:60:0d:d6:32:4e:2f:5e:49:9a:ad:a1:48:5a:2e:65:1f:55:
f5:92:36:b8:81:f9:56:e7:48:64:5d:94:36:f1:06:8b:53:51:
dd:d2:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net