Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/ERfV3_AHrLYigXx8U5FimrME4a4.roa
File: ERfV3_AHrLYigXx8U5FimrME4a4.roa (raw, json)
Hash identifier: kvXysfA19vdf9ZpdNwdZyFu3Veq/rlxvog9k5IItPng=
Subject key identifier: 11:17:D5:DF:F0:07:AC:B6:22:81:7C:7C:53:91:62:9A:B3:04:E1:AE
Certificate issuer: /CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Certificate serial: 01941FFA9DB788076E0378482CFED7F76D38
Authority key identifier: D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/ERfV3_AHrLYigXx8U5FimrME4a4.roa
Signing time: Wed 01 Jan 2025 03:48:25 +0000
ROA not before: Wed 01 Jan 2025 03:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200487
IP address blocks: 5.183.188.0/22 maxlen: 32
5.188.28.0/22 maxlen: 32
185.105.224.0/22 maxlen: 32
2a01:5a60::/32 maxlen: 128
2a0e:1600::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9d:b7:88:07:6e:03:78:48:2c:fe:d7:f7:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d392f8fc986e9f1d3e4bf05fca9659a0881d7003
Validity
Not Before: Jan 1 03:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1117d5dff007acb622817c7c5391629ab304e1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:a3:eb:7f:64:ff:42:51:b5:f2:1d:ca:cb:
b0:22:d0:cc:7d:76:d3:fc:3b:6a:9e:bc:c3:7e:33:
0c:26:0e:c7:fe:c2:71:34:8d:49:72:96:d9:63:ee:
7e:a2:e4:78:a9:4a:ab:20:57:54:b8:69:87:ea:e5:
2a:0c:3e:59:6a:fe:ae:44:47:f7:16:f2:c8:87:a7:
b3:ed:21:d7:ff:65:b3:2e:37:b8:1c:58:cd:90:84:
62:7f:0a:3b:54:82:de:50:24:27:0b:32:35:ba:47:
76:aa:94:d1:12:27:df:7a:0c:b0:aa:6e:74:1f:59:
64:50:c5:01:d5:89:8b:e9:d8:d5:c9:24:b7:52:ac:
0d:db:ee:5e:91:a3:64:e2:38:2e:51:32:eb:5c:b8:
ab:57:be:8c:0b:52:b7:56:18:a0:04:c3:29:97:e3:
68:63:6f:f1:71:7c:0e:ac:4f:9d:ac:1a:4e:2e:40:
2f:c3:50:68:0e:45:8c:b2:df:aa:74:4e:60:82:8a:
7f:a1:1b:57:bd:7c:2f:b8:90:b3:51:f0:ef:33:c7:
2e:ce:b1:8f:b7:56:fe:65:a4:60:32:0c:87:a0:90:
07:a1:9e:2e:1f:84:07:bc:64:90:21:36:63:2c:48:
d9:61:3a:5b:55:8d:c3:5a:96:20:66:76:e7:b0:3f:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:D5:DF:F0:07:AC:B6:22:81:7C:7C:53:91:62:9A:B3:04:E1:AE
X509v3 Authority Key Identifier:
keyid:D3:92:F8:FC:98:6E:9F:1D:3E:4B:F0:5F:CA:96:59:A0:88:1D:70:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05L4_Jhunx0-S_BfypZZoIgdcAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/ERfV3_AHrLYigXx8U5FimrME4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2d0b47-f026-4f98-9fe9-1bb716427ca9/1/05L4_Jhunx0-S_BfypZZoIgdcAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.188.0/22
5.188.28.0/22
185.105.224.0/22
IPv6:
2a01:5a60::/32
2a0e:1600::/32
Signature Algorithm: sha256WithRSAEncryption
29:f2:0d:39:7a:d6:88:80:e6:88:3e:96:92:eb:2a:be:6c:8c:
b4:fc:d3:e1:2e:c8:7b:99:84:fe:92:fa:cb:c6:c9:e5:ad:ed:
2e:63:5c:58:fe:12:95:f3:67:13:cb:d3:10:1f:63:cf:07:30:
a4:57:09:f8:85:18:ce:46:3e:e1:2d:d9:ea:44:71:9f:f0:83:
03:c5:7f:4e:36:8c:f4:77:d6:8f:5c:f9:39:33:46:0a:7e:2e:
46:78:e3:12:4f:c7:3d:42:5e:01:0d:bc:2c:37:e3:fc:e4:a0:
28:d1:39:b6:4c:d3:18:1e:4a:f4:d5:de:3e:c7:6e:34:85:01:
3b:c1:78:26:45:25:61:d3:a1:24:a8:36:ce:e6:e4:d8:c8:78:
f3:07:da:cc:97:81:89:8e:94:e1:d8:9d:f2:d4:2f:fa:bc:aa:
09:74:a7:a9:1e:14:f4:7e:89:41:c1:64:09:96:fe:3c:c7:6e:
0c:77:cd:3b:e0:db:9a:57:22:85:75:6b:6e:74:02:33:f0:9d:
26:2e:5b:b8:cc:d6:7a:e3:cb:14:0f:c1:e8:10:34:e9:e6:f9:
1b:a4:16:97:9f:b3:0e:69:54:e5:5d:86:a5:d5:d6:2f:a7:a3:
32:2a:d6:bf:98:10:69:e9:07:30:80:62:51:d6:f3:50:cd:c8:
96:63:e1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:57 2025 by rpki-client on console.sobornost.net