Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/oMIi1pEOv1jeJYH_D8-bsx7eN14.roa
File: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (raw, json)
Hash identifier: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=
Subject key identifier: A0:C2:22:D6:91:0E:BF:58:DE:25:81:FF:0F:CF:9B:B3:1E:DE:37:5E
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 019422FBC1BE71E5DC31BAA7DCBBF2126CD3
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/oMIi1pEOv1jeJYH_D8-bsx7eN14.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211420
IP address blocks: 5.255.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c1:be:71:e5:dc:31:ba:a7:dc:bb:f2:12:6c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0c222d6910ebf58de2581ff0fcf9bb31ede375e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:0e:cc:72:80:94:e8:91:0e:4e:98:5f:fb:
77:13:f6:c6:e3:e1:6a:24:5e:9e:8d:15:f5:5a:45:
bd:bc:02:0f:72:49:2c:0b:26:8b:38:10:c5:6d:78:
87:e8:9f:8f:8d:7a:e4:60:ed:e0:c0:cd:d9:78:8d:
a6:70:0e:d9:f0:c8:8f:b8:16:64:aa:52:38:02:fe:
79:9f:a7:8b:ff:3d:c4:e7:34:51:98:0f:ca:31:d6:
b2:a8:4e:dd:cc:90:6a:4f:35:63:90:d2:8c:89:e2:
e4:a3:c9:a5:d9:56:c6:9b:94:02:68:fd:f9:18:06:
32:5f:da:10:5d:ee:bc:b2:23:83:80:e7:4a:3f:0f:
b6:85:5c:78:90:df:29:af:56:bf:17:d6:28:02:9c:
5b:98:24:28:ea:ed:54:47:21:bb:66:12:c2:e7:15:
b4:ad:13:62:04:b5:bc:ee:44:89:b4:cb:bf:c2:01:
11:32:6f:bf:d1:1d:33:47:8d:a3:ce:7e:38:b8:87:
1a:77:09:3f:22:f5:bc:9d:36:0e:b2:78:46:ad:50:
80:60:0d:d1:5a:4e:f7:18:c5:82:ba:57:ee:bb:f6:
cf:bc:40:43:f9:e7:4e:5d:70:29:cb:0d:08:d1:1c:
86:1c:ca:77:d7:26:af:69:84:27:24:38:5d:55:2c:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C2:22:D6:91:0E:BF:58:DE:25:81:FF:0F:CF:9B:B3:1E:DE:37:5E
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/oMIi1pEOv1jeJYH_D8-bsx7eN14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b0:56:f9:de:33:5f:1e:a8:15:28:da:d8:97:67:6c:b7:af:
a4:16:df:a8:21:ae:62:16:27:47:07:18:a0:2e:ff:29:3a:04:
77:d7:ee:2a:ff:e3:3e:a5:d9:45:64:24:d8:83:80:4d:56:43:
b4:4c:67:19:36:9e:00:83:de:cd:09:5d:36:a3:a5:74:89:42:
17:1b:04:d2:b5:4a:1f:d6:92:06:0c:24:08:24:4d:0c:0a:72:
2a:b0:17:7b:8d:95:5d:ba:2d:8d:d0:34:98:b0:60:ae:e8:41:
30:a7:86:ae:b4:15:fb:cf:f0:de:f2:8b:ec:21:7a:b5:ec:14:
60:43:49:2d:83:1b:b9:42:f5:7a:5a:20:fb:8f:9e:7d:64:84:
34:78:53:8c:7d:d2:b1:ae:f6:78:9c:77:a1:c0:c9:8a:ae:59:
bc:be:4d:7f:ee:85:c0:c8:7f:b1:40:8b:15:2c:f7:5f:3d:63:
e2:76:ff:b6:db:44:31:19:6a:d1:ca:a8:f1:12:99:47:5c:ee:
21:79:94:fe:23:94:f5:2d:9e:7d:14:c9:0a:6e:29:fd:06:4b:
48:73:dd:57:d6:0f:34:81:5e:a8:25:7b:17:64:e5:d5:e3:35:
71:0e:26:2c:aa:9e:27:07:e4:6f:ac:39:40:5c:94:bd:f9:0d:
b8:bf:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net