Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa
File: Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa (raw, json)
Hash identifier: 7oDZ/1zx1zR8r5+3OuEyrGxtjVcipWg0/FsvL6uuU3M=
Subject key identifier: 26:BE:53:4C:FB:17:2D:B7:26:79:BD:E3:5E:6E:24:C1:14:3E:27:98
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 019420D5DE49F4D88EEA9E4CB83270E57550
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa
Signing time: Wed 01 Jan 2025 07:47:54 +0000
ROA not before: Wed 01 Jan 2025 07:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201874
IP address blocks: 194.104.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:de:49:f4:d8:8e:ea:9e:4c:b8:32:70:e5:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26be534cfb172db72679bde35e6e24c1143e2798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:48:2e:db:7e:33:b2:73:82:d4:fb:d8:b6:90:
a4:cb:ee:6e:42:c8:88:71:1e:2e:90:ce:b5:04:94:
7b:73:5e:23:0d:48:0d:66:6c:31:c7:29:8c:b5:c8:
ce:24:ac:64:5b:75:ec:c7:74:fd:67:84:27:71:0f:
8e:2a:71:89:0c:a0:bd:97:b2:10:c2:84:6b:d6:58:
a3:95:80:40:5b:cf:ba:c6:05:de:43:a2:7a:70:a3:
d2:49:7e:04:e0:71:3f:10:06:95:24:28:2c:b3:94:
28:02:c7:21:80:f2:aa:8a:aa:d0:77:c4:80:56:3a:
9e:b6:44:67:4f:8b:12:96:1e:9a:ac:f1:76:9c:82:
60:19:05:2a:6b:05:40:d9:9a:9a:0d:1d:68:f7:ed:
0d:04:09:f6:f2:3e:f7:a4:c9:89:6a:3b:d7:81:81:
3a:0e:c4:aa:f7:32:99:1f:cd:89:ca:c7:cb:ac:55:
3c:2c:cf:e7:56:a4:4b:bc:20:f0:dd:1d:63:0f:a2:
01:79:71:3a:7f:b5:1a:12:e5:40:bb:97:cc:80:1e:
07:2d:3b:18:9f:27:96:36:3d:d2:59:ba:ff:13:a4:
ae:94:f2:03:6a:04:92:f5:48:82:40:86:82:06:5c:
ea:d6:4c:56:16:63:08:db:1f:68:b4:38:4f:64:39:
85:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BE:53:4C:FB:17:2D:B7:26:79:BD:E3:5E:6E:24:C1:14:3E:27:98
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/Jr5TTPsXLbcmeb3jXm4kwRQ-J5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:16:62:30:81:81:87:38:8a:e1:f5:3b:d6:b9:d4:8f:2b:b2:
e6:a8:dd:33:13:28:76:38:bb:c7:19:4d:06:9d:14:19:a8:05:
7d:13:8d:cf:b5:7b:fa:98:62:47:f2:9e:71:8f:57:ea:cb:f3:
9d:ed:83:07:48:b8:a2:20:4f:2e:9a:d2:8d:4b:29:6b:5b:16:
ab:d2:67:ae:02:66:b1:bc:4b:d0:9a:79:8c:1f:71:5f:2d:f8:
ee:80:3b:9a:8a:d5:67:31:b9:2a:64:0a:ba:13:40:7f:85:38:
ee:c7:7d:49:c5:1e:26:6b:64:71:d6:68:ce:a8:f8:13:13:65:
71:b9:6a:10:00:d1:0b:e1:4a:13:28:8f:ff:84:18:66:6c:89:
cf:11:d0:e0:e1:36:90:c2:4f:2b:7a:15:0d:76:ad:64:c1:49:
b5:70:54:91:e1:47:29:e6:89:3b:cd:9e:d6:7b:4b:8b:1b:1a:
65:e8:d4:a1:e1:b3:97:a9:df:22:aa:18:ec:09:a1:c0:50:e5:
ee:9e:02:7b:2c:dd:f7:18:65:b7:e2:0a:90:82:4e:41:50:86:
17:b5:da:c2:df:7d:a6:14:e2:10:4a:cb:9f:87:b3:9f:e4:20:
c7:12:11:0c:a6:66:07:ed:89:a5:6d:b7:db:56:56:5b:b1:90:
07:69:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net