Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XsQzypEDi3dbORi7Sjru6BV7874.roa
File: XsQzypEDi3dbORi7Sjru6BV7874.roa (raw, json)
Hash identifier: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=
Subject key identifier: 5E:C4:33:CA:91:03:8B:77:5B:39:18:BB:4A:3A:EE:E8:15:7B:F3:BE
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01942445492ACA58BBD52D912487AAFE50B7
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XsQzypEDi3dbORi7Sjru6BV7874.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21050
IP address blocks: 185.62.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:49:2a:ca:58:bb:d5:2d:91:24:87:aa:fe:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ec433ca91038b775b3918bb4a3aeee8157bf3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:69:f1:0f:5a:ba:95:72:c7:13:b6:04:ea:f9:
e0:95:af:df:75:08:2c:b6:b1:65:aa:c2:2d:ab:65:
cf:ed:c7:da:30:f6:d6:c7:f9:3d:de:f2:51:70:f3:
49:88:b4:93:33:f6:5b:73:54:65:66:07:c2:be:9b:
66:65:1b:38:0e:6d:81:68:c4:0a:ef:9f:5d:b3:7a:
35:53:89:49:ab:a6:c1:d2:b9:30:e4:1e:cf:03:c4:
96:89:3d:5b:68:1c:8e:2b:b4:66:27:1e:2e:0f:23:
be:7e:77:44:8d:e2:65:47:fd:b4:be:7d:96:ad:c5:
c4:76:f0:96:95:cd:17:01:72:46:cd:ae:ec:fa:6d:
25:cc:10:cf:0d:a9:6a:f0:72:1c:6c:cf:93:f2:6f:
b6:ab:da:27:66:41:c8:82:b0:c9:d7:0f:16:ef:dc:
09:0d:00:71:8e:03:34:55:3f:c8:69:1c:2f:cf:fb:
5e:44:9d:f6:ea:92:9e:62:5a:e7:cf:38:85:4c:a0:
5c:40:31:a1:c1:d3:ca:e4:ed:5b:a4:77:20:7f:02:
d6:8e:a8:61:27:c5:07:66:a1:46:2b:a1:9d:33:17:
ab:71:bc:6c:34:64:30:43:24:72:57:89:7c:79:dd:
8a:79:87:e7:2e:1d:ad:9f:39:ef:2b:cd:c2:4e:ce:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C4:33:CA:91:03:8B:77:5B:39:18:BB:4A:3A:EE:E8:15:7B:F3:BE
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XsQzypEDi3dbORi7Sjru6BV7874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:2a:c6:63:0b:b4:e8:62:13:3a:b5:d5:1d:61:7d:d5:70:61:
72:51:14:fe:65:30:fb:dd:eb:4c:30:eb:c9:03:ef:95:69:4d:
1e:f7:1d:18:75:5e:4d:e1:b7:ce:d1:90:f2:d4:ab:7d:23:fe:
86:5e:61:ab:cb:90:0c:74:0f:88:51:08:85:9d:e4:92:61:cc:
e3:c1:c4:48:71:4c:2d:5e:fa:80:d3:9f:ef:25:e9:1f:44:1a:
78:c9:93:5d:de:64:f5:65:bb:d4:b1:7e:c3:61:5e:94:b4:53:
d3:e0:6b:0a:03:e4:82:b7:c3:9f:45:ae:61:af:3c:0a:f0:d0:
05:26:8b:bd:81:6a:62:57:40:f0:5c:52:a1:11:4e:61:24:48:
61:f2:b6:1c:e0:3f:c1:e4:a6:86:95:17:9b:85:3f:13:6c:73:
ee:cf:2e:90:ee:fc:6a:15:0b:4d:3f:91:50:73:0f:76:36:8d:
ba:c7:11:24:a3:76:e1:e2:72:15:c5:bd:4f:9c:f5:c7:14:46:
7e:88:64:97:09:a9:39:cc:e7:70:95:09:ed:21:81:35:28:ae:
2e:0e:d7:b3:0c:31:78:bf:7f:5d:bf:b3:fe:24:c6:80:16:db:
bf:9a:a7:df:d0:4e:62:11:3e:1a:20:5c:e1:7b:ca:df:81:ee:
20:6a:e1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net