Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/udpFcarhA2Di-ueqJLzwdxMkwFU.roa
File: udpFcarhA2Di-ueqJLzwdxMkwFU.roa (raw, json)
Hash identifier: /CtOZMK/oLqOqAo2qZJtD+fd7exGsI2oA16cE8ogLbU=
Subject key identifier: B9:DA:45:71:AA:E1:03:60:E2:FA:E7:AA:24:BC:F0:77:13:24:C0:55
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C517014DF4441A08267F2BA9A09C6
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/udpFcarhA2Di-ueqJLzwdxMkwFU.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208412
IP address blocks: 5.202.204.0/23 maxlen: 24
5.202.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:51:70:14:df:44:41:a0:82:67:f2:ba:9a:09:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9da4571aae10360e2fae7aa24bcf0771324c055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:11:39:0a:47:32:63:dc:66:8e:05:1a:ad:
50:ed:f6:fc:49:fa:e2:d2:0f:24:ee:c8:ac:77:6e:
a8:95:45:80:af:92:6a:a4:1b:42:34:6e:d7:ea:8e:
8e:41:13:60:e5:59:3e:d2:c3:94:28:c9:db:41:ab:
9c:55:0b:2c:cc:cb:d7:6b:b2:78:ed:c9:4a:54:52:
8d:2e:f6:46:22:69:83:21:b5:f7:ed:57:da:34:da:
8f:34:c6:a1:a9:b2:45:57:70:94:05:9e:10:4f:33:
32:4c:3e:65:64:d6:c8:fc:20:7f:ef:6c:4a:17:10:
1d:db:0a:a4:bd:07:19:63:e9:b7:8c:f5:26:e8:51:
2c:a1:8b:8e:de:57:70:57:dc:16:0e:74:3b:2c:ac:
13:ff:64:f4:a0:1d:97:a8:f2:c1:30:2e:e4:a7:e3:
9c:a0:3b:d1:8a:12:bb:9a:ab:9d:d4:99:f9:39:15:
53:42:d6:c9:4f:98:9a:d8:39:22:04:ed:f0:32:43:
5f:9b:95:52:4a:30:9a:58:d9:5e:88:0f:2e:0a:9f:
56:90:ff:7b:06:d1:8f:86:0a:9b:f7:5d:ed:03:ce:
80:ff:b4:32:45:a7:8c:2f:e6:17:6e:0f:9d:62:5a:
dd:f0:2c:d3:15:3c:a2:dc:3d:4a:6f:23:08:83:d3:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DA:45:71:AA:E1:03:60:E2:FA:E7:AA:24:BC:F0:77:13:24:C0:55
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/udpFcarhA2Di-ueqJLzwdxMkwFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.204.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:f4:68:c7:48:fc:82:eb:5e:b4:e7:85:3a:31:40:e4:7e:b2:
1e:27:42:50:be:ad:35:6a:74:ed:55:97:cf:0b:9a:5b:75:0b:
fd:be:15:c0:73:84:eb:39:ef:46:b5:d4:ab:e8:52:5b:d5:8c:
24:7b:77:bb:1f:8e:e1:43:8e:dc:c5:76:15:05:bb:9a:81:5f:
f2:47:59:a1:0b:0f:ed:97:52:d6:9d:1b:47:e9:94:f2:2e:ce:
9c:9e:d6:42:c4:ed:56:a9:3a:b4:2b:17:f6:1a:40:e3:2e:8b:
91:84:56:c9:be:16:55:54:92:36:87:82:e7:7e:4c:07:a8:88:
88:f9:5c:73:2d:29:28:45:cb:be:9b:e8:66:7c:cd:47:e5:3b:
c2:07:65:e2:aa:fd:1a:fa:1e:ed:7f:41:f2:37:6c:a6:70:62:
86:fd:11:bd:87:96:2d:d9:1f:24:99:da:6c:c2:3a:e6:4d:42:
c1:89:fe:18:e1:37:81:48:82:76:9c:c6:24:a3:66:4f:e8:53:
b4:d7:3d:2a:ec:72:c6:94:58:be:72:68:75:df:85:c3:95:18:
af:9d:7c:2b:69:97:53:8a:08:ca:0a:aa:95:8b:d9:fa:36:5e:
3d:5f:60:32:29:12:7d:40:fb:be:ad:de:51:39:e2:31:e2:4d:
86:1c:fc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net