Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/a00YWBP_muU5NcHIhbF18JUjUqM.roa
File: a00YWBP_muU5NcHIhbF18JUjUqM.roa (raw, json)
Hash identifier: P8SrTV2kMsrCEGdNEkrg+3st8o1J6UnuTOqpO6Yvz2Q=
Subject key identifier: 6B:4D:18:58:13:FF:9A:E5:39:35:C1:C8:85:B1:75:F0:95:23:52:A3
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01961B5316A50F3F4D0D468F7EE88822CCBA
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/a00YWBP_muU5NcHIhbF18JUjUqM.roa
Signing time: Wed 09 Apr 2025 16:12:32 +0000
ROA not before: Wed 09 Apr 2025 16:12:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212013
IP address blocks: 5.59.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:53:16:a5:0f:3f:4d:0d:46:8f:7e:e8:88:22:cc:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Apr 9 16:12:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b4d185813ff9ae53935c1c885b175f0952352a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:09:28:9f:29:af:12:ae:a6:29:75:fb:6b:
b2:7e:00:f4:57:1a:d7:56:56:0c:bb:2b:0f:55:1f:
ee:84:e5:79:f3:c8:46:04:3d:2f:6b:40:68:37:8e:
a7:e2:8f:e2:60:56:be:29:46:dc:c7:16:cd:c9:a5:
35:0a:a1:4c:89:80:bc:ad:f7:b8:3e:d1:71:63:fa:
fa:27:35:c0:c4:00:9a:74:ab:14:81:54:d5:b7:2b:
f8:46:3b:19:12:ae:39:a7:06:4b:a0:3c:8a:9f:0f:
7d:be:b4:34:45:f1:6c:96:fe:9c:f8:ce:0c:c7:83:
ae:8e:ac:84:7f:1a:4f:06:ec:e2:14:4c:4f:a8:69:
fb:6a:9b:7f:38:24:6e:01:55:76:f4:8a:13:77:79:
63:a1:e7:e0:4c:05:a1:30:b6:12:43:68:56:93:58:
e8:1e:7d:d2:f6:3e:20:77:9d:30:e5:fd:f9:b4:4e:
57:c8:3e:84:4a:05:01:ea:a7:bf:67:ac:ca:7e:9b:
0a:f7:a3:32:80:4f:e5:ae:a3:81:be:a1:18:41:da:
53:48:c3:81:51:1d:21:b6:13:3f:96:e4:5c:b0:c1:
f7:a1:56:e9:55:27:41:15:48:81:a0:bb:89:f0:7a:
7a:30:20:ef:a7:8c:04:d2:bf:63:71:3e:f5:61:01:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:18:58:13:FF:9A:E5:39:35:C1:C8:85:B1:75:F0:95:23:52:A3
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/a00YWBP_muU5NcHIhbF18JUjUqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.105.0/24
Signature Algorithm: sha256WithRSAEncryption
07:30:5f:83:00:c4:79:fd:54:5f:0c:84:61:02:31:17:f1:c6:
90:65:99:4a:fa:e5:0c:b9:98:66:db:e0:15:b4:55:47:29:83:
5d:4b:99:b0:c8:10:bc:34:96:b8:57:e2:d9:ff:75:ff:71:d4:
a9:dc:ee:78:49:ca:64:3b:f7:42:36:dc:77:c6:d7:d6:71:79:
9e:fe:e5:7c:a6:62:ff:07:d7:52:58:1a:1a:04:3d:05:84:9d:
68:91:42:bd:c4:40:7c:67:53:e7:b4:7c:b9:94:ce:89:69:bd:
58:e0:bd:b3:f4:fb:f2:5b:77:bb:ea:03:3a:21:f8:28:d9:20:
47:b1:a8:7f:16:30:4d:a6:5c:72:f4:f1:b0:a7:67:36:02:40:
00:39:04:b0:18:64:fb:85:3f:82:dc:2e:55:da:3a:f3:f0:b6:
fc:a3:3c:4a:73:40:e2:0d:61:b3:f6:85:84:c2:32:da:bf:b9:
2e:69:94:16:88:27:29:40:84:02:6a:d3:db:dc:6d:d2:b4:fc:
8a:23:cd:93:0e:af:39:dd:7b:d7:d8:50:c2:43:f7:0a:b1:32:
fe:b7:c6:58:2a:b0:58:66:c8:b9:1c:a7:0e:56:c2:b9:a2:40:
6e:bc:ae:41:ce:de:24:6d:61:b7:dd:31:6f:c7:1f:51:31:05:
6b:61:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net