Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Ek2l-YiuT-e2fHybRh910Hl0naA.roa
File: Ek2l-YiuT-e2fHybRh910Hl0naA.roa (raw, json)
Hash identifier: 7WvXC1kAkz2uymr7M3eP0NEdt5n2kLa0OAs0qb1KF9s=
Subject key identifier: 12:4D:A5:F9:88:AE:4F:E7:B6:7C:7C:9B:46:1F:75:D0:79:74:9D:A0
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B21F882A31EDDAA9DC0F9CA8811ADC
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Ek2l-YiuT-e2fHybRh910Hl0naA.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5489
IP address blocks: 195.251.120.0/22 maxlen: 22
195.251.238.0/23 maxlen: 23
195.251.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1f:88:2a:31:ed:da:a9:dc:0f:9c:a8:81:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=124da5f988ae4fe7b67c7c9b461f75d079749da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:f5:f2:3f:7f:a4:ad:75:4e:d6:01:64:8a:
66:24:a2:e4:0e:ab:fe:a9:4b:1a:d5:e8:a0:29:fd:
41:7c:f1:c8:14:77:16:56:d8:ed:c3:c8:dd:8d:19:
4e:e7:d5:58:1c:1a:01:e2:7e:d0:43:5b:a8:fa:6f:
8e:8e:bb:5f:1d:ab:72:09:a3:55:49:de:3d:6f:e5:
d1:39:cd:75:68:ca:aa:42:f9:d5:d8:73:bd:c4:d3:
d1:4b:9e:6b:75:3b:0f:8f:89:ac:e5:de:c7:60:d4:
9f:84:ca:14:fe:f9:16:2a:49:2f:32:96:d8:57:0b:
50:7a:d2:bb:ef:22:1a:09:e9:5d:93:b6:92:24:4e:
ee:48:7a:54:a3:55:a4:c2:33:ba:98:12:2d:fa:b0:
7c:f3:eb:80:ec:44:ec:c9:51:b6:1c:47:e8:55:e5:
06:47:36:9d:af:44:04:b2:da:6a:6c:e5:68:6d:a9:
52:3d:77:5b:78:76:85:14:8f:eb:83:6a:a2:f3:35:
67:72:fe:79:6b:e3:fa:c9:ef:c3:a8:cf:ce:92:01:
60:72:39:56:95:69:dc:e5:8f:34:e8:7b:db:7c:6d:
14:c5:07:91:74:87:15:26:99:3d:a3:10:eb:b9:9a:
b7:62:43:d9:0a:02:9b:62:e6:04:63:10:f4:19:57:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:A5:F9:88:AE:4F:E7:B6:7C:7C:9B:46:1F:75:D0:79:74:9D:A0
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Ek2l-YiuT-e2fHybRh910Hl0naA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.251.120.0/22
195.251.238.0-195.251.243.255
Signature Algorithm: sha256WithRSAEncryption
8a:29:3c:7f:dd:58:62:24:ef:ce:49:d6:21:48:44:b8:7d:ef:
73:87:c5:d5:9d:33:7c:ab:b7:89:52:70:b3:de:97:e6:1e:1c:
c5:b7:3b:b0:8d:2c:8e:64:13:86:67:81:53:0f:fe:35:01:d5:
41:af:e4:1c:43:23:54:61:0d:dd:a7:07:a9:98:82:4b:4f:19:
92:9a:a4:3e:c9:dc:7f:77:5b:40:cc:8c:47:5b:05:72:23:29:
8c:0c:fb:50:71:b9:e8:b6:1a:27:12:e6:80:d3:a9:d4:35:4d:
2b:c9:e4:d7:95:c4:11:09:a7:7d:f1:19:cc:c2:32:fc:95:a0:
7b:f8:3d:9b:4e:ce:e4:b9:2c:1a:d0:86:a0:71:5a:ac:c4:4d:
c5:19:ff:82:83:28:a4:f2:99:69:ea:52:f4:46:70:e5:93:61:
33:65:d8:bb:35:46:cc:02:46:89:bf:4d:85:4a:aa:7d:64:25:
8e:84:68:d1:7b:ce:17:c0:54:a8:4f:bd:65:7a:dc:7f:f6:c4:
e3:57:c1:02:0d:fa:98:68:eb:da:ef:d3:54:97:ff:7a:5a:c3:
b5:4b:49:da:0b:69:7c:b9:80:89:02:21:95:cc:f7:a2:60:88:
9b:3b:57:4f:2e:0c:d5:39:7f:97:57:95:db:e1:f9:1e:d9:1d:
f4:4f:9d:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net