Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/d_5rCXad48L982aV_sE5OcfISCI.roa
File: d_5rCXad48L982aV_sE5OcfISCI.roa (raw, json)
Hash identifier: 90ZGQ2cxG5cZFWpNWTKz60Bz+Hn3IddK6g3bDQGxBUA=
Subject key identifier: 77:FE:6B:09:76:9D:E3:C2:FD:F3:66:95:FE:C1:39:39:C7:C8:48:22
Certificate issuer: /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial: 01955EBF24D20FDA9B9171D3E5BCE9825087
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/d_5rCXad48L982aV_sE5OcfISCI.roa
Signing time: Tue 04 Mar 2025 01:22:19 +0000
ROA not before: Tue 04 Mar 2025 01:22:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210928
IP address blocks: 212.15.47.0/24 maxlen: 24
212.15.50.0/24 maxlen: 24
212.15.54.0/24 maxlen: 24
212.15.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5e:bf:24:d2:0f:da:9b:91:71:d3:e5:bc:e9:82:50:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Validity
Not Before: Mar 4 01:22:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77fe6b09769de3c2fdf36695fec13939c7c84822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:79:44:18:1b:70:a0:f8:61:6b:25:c8:1c:e3:
e6:8c:f1:89:d8:bf:79:fe:fb:41:06:08:98:be:ba:
41:90:6c:eb:74:d4:d7:cf:bb:a4:4e:4a:b8:97:c5:
10:48:05:35:aa:d6:ea:ad:07:f2:01:76:ad:b2:fa:
8e:e6:7c:69:e5:76:af:13:16:17:6d:fc:db:9e:75:
1a:e0:f0:62:c0:20:b9:d4:9e:fc:2f:3a:d2:71:96:
0c:a2:ab:1f:2f:d4:2d:67:52:db:6d:a7:90:a6:9f:
f2:e0:9b:3b:44:76:52:27:d8:79:e6:d5:fc:50:17:
dc:13:f1:d7:91:f9:d4:d0:67:cf:20:5c:91:16:29:
8e:97:e4:e3:07:5f:e4:dc:70:f2:6f:07:ba:7c:bc:
52:1d:b7:c9:44:61:0d:8e:02:bf:c7:32:eb:78:4a:
e8:ef:ac:cc:cd:f3:75:57:16:87:78:eb:31:70:7f:
34:25:1d:37:7d:fc:92:5d:03:1f:12:49:7c:a8:4c:
9c:ab:fa:40:07:56:f7:d7:87:c9:14:7a:8a:c7:bc:
e5:27:09:c2:60:e2:27:07:7a:5a:1e:b9:56:e6:a0:
21:f2:e8:ce:af:21:c7:78:d5:87:75:c5:f3:a2:ce:
42:41:85:93:10:05:b3:8f:be:d6:98:18:7d:f3:23:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:6B:09:76:9D:E3:C2:FD:F3:66:95:FE:C1:39:39:C7:C8:48:22
X509v3 Authority Key Identifier:
keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/d_5rCXad48L982aV_sE5OcfISCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.47.0/24
212.15.50.0/24
212.15.54.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:97:32:49:48:48:d8:8c:20:68:85:3a:5e:ce:69:bb:bb:b7:
30:03:75:f6:2b:fe:cf:45:e5:d2:52:f4:d4:db:ac:2c:b7:4a:
3b:a7:37:dc:d0:cc:67:99:e8:72:d0:3b:94:0f:8d:f6:87:81:
fe:fc:85:83:f1:dc:67:05:8a:ba:1d:8a:77:25:bb:25:66:11:
5f:8c:96:d2:04:85:59:d1:33:2c:7c:66:f8:21:3a:6f:3e:de:
af:1a:43:6e:cc:ba:d5:52:06:71:66:9c:3f:04:47:07:e2:5b:
a2:c4:3c:09:05:b8:f6:4b:b7:dd:d6:bf:70:dc:e6:8e:62:0e:
15:92:9f:50:0a:c9:e6:a0:03:f2:78:46:2f:05:2f:57:06:d5:
32:28:b8:3f:e1:d9:68:f8:dd:f8:84:f3:ca:28:0b:45:59:05:
0d:85:e6:0a:5a:1f:02:9a:cd:36:83:a5:5c:8b:d9:c8:7d:f4:
35:5b:12:08:3e:40:97:4c:fe:14:32:bb:32:be:73:a9:5e:e7:
84:13:2c:2f:97:08:04:ab:95:81:31:e5:fa:c7:68:0a:f1:a8:
54:a0:6a:01:29:47:93:c8:e9:7a:6e:0c:01:87:a2:01:29:00:
46:4a:4e:6c:6b:67:b7:bb:76:e6:0a:e1:05:15:7a:00:1c:71:
da:50:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net