Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/U52mVOk99igqhqPv8HFUemMxWjI.roa
File: U52mVOk99igqhqPv8HFUemMxWjI.roa (raw, json)
Hash identifier: YUEj329L0D9eTRAFxzIGa/94YS4hgP0ffCPrOs2YH8E=
Subject key identifier: 53:9D:A6:54:E9:3D:F6:28:2A:86:A3:EF:F0:71:54:7A:63:31:5A:32
Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial: 01956084546493F623FF04D769D8301778A5
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/U52mVOk99igqhqPv8HFUemMxWjI.roa
Signing time: Tue 04 Mar 2025 09:37:19 +0000
ROA not before: Tue 04 Mar 2025 09:37:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198341
IP address blocks: 5.160.253.0/24 maxlen: 24
46.209.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:84:54:64:93:f6:23:ff:04:d7:69:d8:30:17:78:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
Validity
Not Before: Mar 4 09:37:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=539da654e93df6282a86a3eff071547a63315a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:68:80:32:6d:76:04:f1:29:9e:5c:28:a6:
c0:78:8c:99:c7:8b:66:29:c2:42:57:61:7d:a3:1a:
38:d4:e8:49:66:46:2e:70:74:9c:f9:ee:19:76:e9:
ba:06:9e:82:86:25:99:f7:2e:f4:20:40:99:72:fc:
ab:1f:be:42:64:99:5c:36:c2:5a:7f:e8:05:dd:c7:
d2:bc:f7:33:0b:c7:f6:51:ee:e2:9d:2c:be:ef:65:
ee:cf:db:94:4c:ea:dc:d3:2f:44:d1:cf:a9:cf:ae:
9b:7c:c6:96:d2:01:da:2a:e3:e2:86:95:e8:e4:91:
8c:03:b6:9e:03:7c:8b:b5:54:c1:39:b8:74:2a:a6:
73:fe:7d:6d:ca:a6:4b:b2:10:fd:87:08:02:b2:88:
3a:22:21:4b:13:33:61:dc:40:ae:97:f1:18:6e:96:
f8:2d:2c:a7:07:1c:2d:5e:95:28:2f:30:0a:f1:37:
bb:db:c3:56:07:c6:7f:c9:4f:40:74:a0:77:f5:df:
fb:b6:39:e6:72:9d:8a:46:0a:35:1c:f9:9e:98:77:
bc:3b:06:92:7a:6d:f6:4b:28:0c:bd:e5:9b:d5:71:
63:8f:4b:a6:6d:34:3d:56:3f:7a:5f:4e:61:2d:de:
59:d8:dd:8f:f8:ea:e4:d0:68:b6:e0:08:4a:6f:10:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:A6:54:E9:3D:F6:28:2A:86:A3:EF:F0:71:54:7A:63:31:5A:32
X509v3 Authority Key Identifier:
keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/U52mVOk99igqhqPv8HFUemMxWjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.160.253.0/24
46.209.101.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:15:50:af:ff:b0:59:0c:0a:bf:e9:6d:af:f9:e9:61:83:b0:
c2:c6:96:cf:d1:e5:69:85:fb:c4:21:61:89:ca:37:8b:d3:fc:
f7:10:e1:85:8b:74:c2:b2:b9:69:22:d7:05:43:36:5d:5a:9e:
ca:25:7b:a0:c0:6d:ab:34:40:83:ca:64:e7:f4:1a:3a:eb:39:
f6:c3:d4:d7:f3:37:b1:5f:78:f8:b3:a3:74:19:b7:4d:c6:b6:
6c:e7:82:d1:b2:5a:89:dc:04:7e:fa:86:80:1f:6a:be:f3:4d:
3c:0d:71:58:78:b4:1c:bf:0c:e7:8d:10:cb:30:58:0b:a8:8b:
06:2a:94:de:9e:7c:27:af:5e:46:51:b9:ab:02:a1:1c:f7:06:
3a:d2:2e:56:2c:bd:ab:22:59:e4:dd:ae:cc:19:b7:fd:29:b0:
88:45:9a:2f:7b:6b:ff:94:e3:b5:ad:80:37:d8:2e:9a:fd:89:
16:ed:ce:b0:11:02:1b:a6:3a:4d:8c:e5:36:32:b8:23:3d:39:
ee:6e:92:7f:08:1f:3d:71:97:5c:84:07:f2:b2:68:e6:53:84:
df:85:ba:d6:b9:23:5d:ef:4e:5c:7e:f4:84:8c:54:81:2b:35:
42:5e:5d:19:70:b4:52:d0:8f:22:b7:6d:0e:8b:05:f7:73:1a:
40:a8:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net