Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa
File: xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa (raw, json)
Hash identifier: HUhxo6JRum8cUC4GCldE8jMW5HQn+DFBF6vESEvE0ms=
Subject key identifier: C5:D3:7B:CC:0C:00:DC:48:D8:44:D6:16:48:39:A1:35:39:76:73:90
Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial: 0194258F211441D2751D6A94ED911DB401E1
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50115
IP address blocks: 185.236.46.0/24 maxlen: 24
194.54.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:21:14:41:d2:75:1d:6a:94:ed:91:1d:b4:01:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5d37bcc0c00dc48d844d6164839a13539767390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:9d:4c:59:f2:ed:ad:29:b6:cc:3e:d7:e8:
a6:e7:da:38:4d:80:a0:a6:25:c7:10:bb:e0:d4:f1:
39:e6:e3:ef:9a:c3:8f:f8:ae:51:ae:20:0f:f8:ed:
1f:33:7f:b4:d8:ff:85:8c:78:db:49:9a:fd:67:b2:
5f:42:04:e3:3f:a1:8e:44:8a:65:b6:1d:6f:a8:35:
1e:92:d6:48:58:53:ae:93:f6:8d:bc:9a:55:9d:b3:
6a:f4:40:6d:fc:7a:80:18:d0:4d:ab:b6:60:5f:55:
bb:61:dd:ee:5b:c9:a1:a2:c8:fc:b5:28:8c:ea:71:
fa:64:ca:90:b7:d2:b7:1d:bb:60:49:5d:88:cd:07:
18:d4:7b:ad:38:3a:9f:53:b5:aa:8f:9e:64:19:d6:
fb:cb:9e:04:19:39:11:e3:52:1d:ee:90:dc:44:8e:
95:7b:4a:ac:6e:38:4b:a5:1d:fe:0b:ec:3e:ce:3c:
e3:37:f4:11:b9:2f:cf:f7:ba:29:6b:e3:4e:de:ae:
7e:1f:f0:52:4b:bd:00:dd:28:3e:5e:0a:68:c0:16:
f3:d7:23:61:a7:24:5c:e3:98:7d:5e:6d:ae:11:34:
66:02:ca:14:fb:bb:00:e5:51:0e:4f:d6:5c:82:19:
33:3d:1d:ee:5f:c8:37:65:51:e3:3f:7d:38:b0:3f:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D3:7B:CC:0C:00:DC:48:D8:44:D6:16:48:39:A1:35:39:76:73:90
X509v3 Authority Key Identifier:
keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.46.0/24
194.54.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:ff:42:f3:b6:bd:de:57:33:a4:26:a9:67:8e:7d:3f:22:d7:
05:12:7c:4c:d2:f1:24:54:30:84:22:8b:71:75:6d:e7:68:8c:
e0:3d:05:df:02:cf:e4:cb:6b:a2:04:df:a4:1a:01:d6:82:18:
2d:13:4a:50:76:b2:8c:b5:05:ab:30:7c:24:20:a5:a9:49:c2:
13:31:4f:25:d9:58:a9:a9:51:4d:5f:6b:97:1e:35:23:3d:ac:
ff:38:aa:6b:0c:7c:72:e4:ad:73:38:37:79:1f:27:4c:b1:ce:
48:1b:3b:6f:b9:9b:7a:8f:cb:1b:19:f5:3b:11:32:25:a3:a4:
37:d9:36:4a:39:8f:7a:8f:29:b4:3e:d7:1b:e5:34:1d:8f:75:
fc:58:f6:5a:45:a6:43:87:8e:30:3a:77:f2:45:99:68:89:56:
66:d6:cf:7b:3f:bc:03:69:a3:96:7a:03:b7:dd:c7:ef:94:ea:
39:3a:21:13:6f:60:f2:30:a9:0b:bb:58:c6:15:33:d9:42:25:
96:0d:c5:9c:76:b2:fe:84:b3:83:8b:36:3b:68:eb:14:24:ac:
c6:47:19:88:ac:a7:36:f4:69:9d:fe:4c:9b:e0:3b:fd:69:84:
3b:ec:6a:50:51:72:9d:5c:06:85:0a:da:17:2a:09:ae:ea:a1:
2b:ec:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net