Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/5GkbsIVHSNjZKlhRMzKNoaujuQI.roa
File: 5GkbsIVHSNjZKlhRMzKNoaujuQI.roa (raw, json)
Hash identifier: ZErUA0WOYmD80Q/QFMsB/idG5rJkQAo7XEeRzYdULMM=
Subject key identifier: E4:69:1B:B0:85:47:48:D8:D9:2A:58:51:33:32:8D:A1:AB:A3:B9:02
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 01955EBE3A0E8B7B6FF18292FEAB426EAF9C
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/5GkbsIVHSNjZKlhRMzKNoaujuQI.roa
Signing time: Tue 04 Mar 2025 01:21:19 +0000
ROA not before: Tue 04 Mar 2025 01:21:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8410
IP address blocks: 194.0.120.0/22 maxlen: 22
194.55.161.0/24 maxlen: 24
194.55.163.0/24 maxlen: 24
194.55.168.0/24 maxlen: 24
194.55.171.0/24 maxlen: 24
195.140.180.0/22 maxlen: 22
212.15.32.0/21 maxlen: 21
212.15.40.0/24 maxlen: 24
212.15.41.0/24 maxlen: 24
212.15.42.0/24 maxlen: 24
212.15.43.0/24 maxlen: 24
212.15.44.0/24 maxlen: 24
212.15.45.0/24 maxlen: 24
212.15.46.0/24 maxlen: 24
212.15.48.0/24 maxlen: 24
212.15.52.0/24 maxlen: 24
212.15.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5e:be:3a:0e:8b:7b:6f:f1:82:92:fe:ab:42:6e:af:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Mar 4 01:21:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4691bb0854748d8d92a585133328da1aba3b902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:9b:3b:a6:06:a5:06:d4:dd:82:d8:1c:19:
3a:8e:cb:cb:99:21:92:9c:f8:b3:b0:86:25:ea:f6:
fa:eb:e2:91:9d:44:bf:93:64:37:87:bc:af:2b:d8:
1f:a4:23:08:28:3d:1b:e5:c3:4d:74:32:ee:b9:4e:
0e:9d:aa:54:76:be:68:38:17:bb:8d:c5:e4:b4:cc:
20:66:4c:89:da:3c:ca:78:70:a0:de:b2:da:5f:c5:
44:db:4c:3a:f4:9d:54:3a:f7:d8:04:08:26:78:6e:
2c:f9:94:18:d4:d3:f0:d3:0e:e0:bb:d9:fe:2e:da:
19:7b:02:b3:bd:d9:fc:1e:52:58:ad:3c:47:75:4c:
a1:03:55:28:59:00:c4:3d:a5:61:69:9a:a8:60:23:
62:30:ea:d8:54:ad:09:47:37:0c:3d:36:b1:10:aa:
15:42:f1:6d:c4:0d:3f:59:9a:40:15:02:a5:d5:84:
31:98:f5:77:56:2e:55:43:0c:af:0c:75:95:7a:39:
be:cd:79:ac:2f:1e:6f:1d:6e:b1:02:ea:82:e6:91:
f7:a4:32:0b:45:df:8c:51:df:c5:3d:23:db:e5:cd:
4e:1d:24:f3:73:b0:b9:44:98:27:34:2e:60:11:94:
70:f7:ce:fe:de:a2:54:aa:75:a6:3a:ae:4b:0e:20:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:69:1B:B0:85:47:48:D8:D9:2A:58:51:33:32:8D:A1:AB:A3:B9:02
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/5GkbsIVHSNjZKlhRMzKNoaujuQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.120.0/22
194.55.161.0/24
194.55.163.0/24
194.55.168.0/24
194.55.171.0/24
195.140.180.0/22
212.15.32.0-212.15.46.255
212.15.48.0/24
212.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
70:53:1c:79:1f:25:9b:1c:71:5e:2d:64:f1:18:d5:9b:03:f8:
32:74:cf:52:ed:f8:1c:87:76:45:e4:a5:85:e6:f3:fe:56:88:
f8:eb:61:64:76:fc:ea:33:3b:61:36:98:d2:71:b7:33:cc:f3:
41:22:5c:c2:40:f5:d1:92:70:bf:2e:42:95:a2:96:9f:aa:b8:
bc:ce:73:1a:c7:73:41:93:ab:2b:1d:a9:34:18:da:35:9c:cd:
06:e0:98:ef:d2:cf:f9:23:fa:fd:c7:f1:e6:0d:a2:c1:39:7f:
23:fe:61:d6:cb:2d:13:5b:43:d2:d4:8e:b8:3d:a7:8e:e7:88:
6f:d2:09:95:b4:c7:e6:15:98:18:4f:7b:55:28:cb:2b:a7:49:
d5:c7:e2:43:1c:bc:a7:8c:9c:8a:3f:90:81:ee:14:65:2f:79:
24:aa:b9:57:8c:96:f6:ac:b8:68:40:87:0c:ab:4a:e9:0e:f5:
65:9e:a6:ac:2a:08:dc:c4:fb:76:5d:3b:3e:c0:c0:b4:5c:69:
e4:87:90:9c:bd:23:07:97:f6:43:50:1f:26:40:33:fd:f7:17:
74:b7:6b:e4:4a:0c:3c:9b:98:5a:24:ea:8b:ee:5a:80:2d:56:
5b:3d:72:0a:8a:f7:25:01:c2:2c:ec:49:6a:ed:ed:05:96:01:
3c:4e:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net