Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa
File: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (raw, json)
Hash identifier: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=
Subject key identifier: 7D:3F:44:0D:97:01:FA:7E:E3:29:DF:F4:B1:74:E5:4E:93:82:56:85
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 019421B1E9A94FDE966D987BFBB79CC09B24
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203641
IP address blocks: 5.182.160.0/22 maxlen: 24
185.107.160.0/22 maxlen: 24
193.111.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e9:a9:4f:de:96:6d:98:7b:fb:b7:9c:c0:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d3f440d9701fa7ee329dff4b174e54e93825685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:11:1f:38:ad:65:f4:df:25:50:57:fc:a7:
f5:5a:85:60:67:52:f8:19:91:c9:7a:14:45:92:61:
be:7f:6a:fe:97:ae:3b:07:01:51:e9:f6:9e:f0:be:
ee:c8:f9:53:23:67:34:6e:e8:10:cf:0d:71:34:7e:
10:6e:1f:f8:6c:28:be:ed:55:3d:ec:d7:cc:58:32:
0e:9c:b7:01:4d:31:3d:22:37:0b:5e:77:bc:60:35:
ad:c6:0b:96:0c:97:6c:a8:3c:da:7e:76:aa:38:b4:
cd:72:74:5f:12:24:bc:d3:75:0f:cc:08:e9:b6:18:
1c:e6:78:32:65:c4:51:2e:a4:c4:43:47:1c:cd:8f:
17:ec:31:ce:1d:20:78:bb:d3:df:14:33:6c:ba:de:
ca:05:02:c8:f0:d0:b7:70:db:4c:ec:17:7b:05:1b:
2f:44:95:b7:8e:37:05:df:83:95:68:f6:4b:a2:5f:
c6:d3:98:cc:fa:02:ce:d4:cf:1b:1f:98:86:cd:01:
5c:70:16:7a:fc:ac:3e:4d:68:a8:29:6a:ee:37:a7:
46:83:1f:00:58:25:d8:07:fb:17:80:7e:d2:7a:0b:
ee:25:47:60:44:32:8e:ef:76:3a:4b:44:e3:b5:4b:
5c:1e:7e:4e:62:11:95:99:2c:d8:1f:6d:fc:57:1f:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3F:44:0D:97:01:FA:7E:E3:29:DF:F4:B1:74:E5:4E:93:82:56:85
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.160.0/22
185.107.160.0/22
193.111.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c2:33:16:df:20:16:03:c6:4a:17:fc:09:8a:d9:ce:55:4c:
ac:ca:57:6a:66:82:cc:6c:47:74:76:1b:2f:a5:6b:e0:c2:9a:
19:33:ab:5e:82:aa:6f:dd:c3:bc:6a:cd:f4:50:81:23:57:63:
b3:76:4c:21:03:5f:84:45:9c:6f:10:d9:88:23:43:5c:e0:9b:
62:cb:2e:8c:aa:99:57:ac:35:e8:54:d7:96:a4:d0:0c:46:3d:
2b:97:23:0f:72:62:3e:fc:f6:3d:6a:a1:d0:c7:55:03:75:5f:
49:fc:4f:b4:59:8f:4f:86:b2:3b:20:ae:ed:bd:90:9d:50:9c:
45:36:f4:f4:d6:bc:ad:5e:02:15:cc:54:b0:79:45:e4:c6:1f:
c5:99:3e:42:cd:20:9a:ca:13:42:e0:fd:c9:1f:a9:56:f8:f5:
e8:b2:77:27:ce:f1:82:56:58:92:92:45:46:75:83:b5:6c:ae:
4e:ee:c7:10:f3:e7:2a:bd:c1:c2:9e:4f:e7:ba:65:f8:7c:43:
66:eb:a6:37:1d:32:47:9f:31:e5:cc:4f:04:2e:43:6b:24:72:
c3:e4:42:46:84:9c:d4:b2:c0:be:a4:a0:07:f8:28:02:80:4f:
12:b0:70:cd:ed:34:84:0c:29:12:30:cb:c4:f2:18:30:67:2d:
97:33:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:47 2025 by rpki-client on console.sobornost.net