Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8zj1s3Ptfil6Mh57viGcmhuNUQo.roa
File: 8zj1s3Ptfil6Mh57viGcmhuNUQo.roa (raw, json)
Hash identifier: 4PzZD7bPpeIUKStdtl1x4+X4xSCXz5aci88yHdX7k3o=
Subject key identifier: F3:38:F5:B3:73:ED:7E:29:7A:32:1E:7B:BE:21:9C:9A:1B:8D:51:0A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0196245EE0E04E31995AC22AE1DA8F952F59
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8zj1s3Ptfil6Mh57viGcmhuNUQo.roa
Signing time: Fri 11 Apr 2025 10:21:59 +0000
ROA not before: Fri 11 Apr 2025 10:21:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 5.182.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:5e:e0:e0:4e:31:99:5a:c2:2a:e1:da:8f:95:2f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Apr 11 10:21:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f338f5b373ed7e297a321e7bbe219c9a1b8d510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:47:12:2d:08:4e:93:5f:2b:59:17:c4:f5:
96:ed:04:01:3b:fb:95:61:25:8e:65:cf:46:68:b5:
74:09:0b:c2:8a:02:db:40:aa:dd:9c:2d:f7:ff:b6:
89:fc:e2:c1:05:73:17:84:09:d2:cb:b3:97:d3:fc:
16:fa:42:d3:ba:66:5c:38:6a:94:b4:71:ac:0d:8c:
88:f8:9c:6f:a8:f1:46:a9:a5:09:59:a9:df:22:c2:
7a:2e:65:f6:18:ec:68:64:cc:43:3f:64:a9:4a:6f:
ec:ff:e2:1a:4d:1b:04:37:5a:d1:40:ea:cb:8a:4f:
d3:23:90:b5:59:63:b9:eb:cb:bf:56:75:a1:3e:c3:
51:53:29:b3:0d:31:c3:81:80:10:fd:9e:bf:34:bb:
0f:be:9f:0f:a6:df:d0:21:f5:31:83:2f:bd:05:3c:
dc:4e:05:e7:39:f5:8e:a6:d2:f5:17:5b:45:4b:ff:
07:1c:df:b9:e6:97:fb:c1:1b:94:80:86:93:74:d6:
fb:82:bf:29:6f:d6:25:94:4f:d7:b4:36:bc:89:3d:
cd:eb:e5:08:e0:22:21:af:9f:2f:a5:16:a5:93:8e:
fb:14:28:19:3e:e4:33:48:d6:46:92:60:02:8c:11:
89:16:4a:31:b0:19:5f:6c:82:d9:ee:03:5e:76:ab:
45:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:38:F5:B3:73:ED:7E:29:7A:32:1E:7B:BE:21:9C:9A:1B:8D:51:0A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/8zj1s3Ptfil6Mh57viGcmhuNUQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.115.0/24
Signature Algorithm: sha256WithRSAEncryption
10:82:1d:36:90:94:e0:ab:e2:58:9d:c3:82:41:9c:54:a7:94:
60:0c:c1:f0:48:38:0e:0e:c3:da:88:49:6c:94:be:bd:d4:c2:
1f:51:6b:99:8b:65:ea:b6:6e:ec:2f:63:05:7f:e3:15:5c:a7:
de:8f:eb:54:5a:97:e7:91:f2:dc:70:66:e8:97:6f:9d:7a:92:
2e:04:c8:d0:4b:7a:2b:bb:94:06:23:ff:8d:e0:b1:17:0c:f6:
7c:f4:46:c9:f8:09:ab:1c:e0:10:d4:27:81:a0:ae:89:f0:f8:
8c:a6:46:fb:9b:d0:3e:f1:d9:48:fe:1b:73:04:e2:dc:05:07:
ab:a5:26:de:a9:92:dd:65:51:f9:a7:8f:56:b5:df:86:3e:c4:
d4:1c:56:6f:bc:29:f0:ef:d2:79:07:f6:33:3d:17:a9:14:43:
36:d3:de:ff:bc:bd:47:ce:11:2a:1f:49:db:a5:a2:21:b6:b8:
be:57:9b:7e:19:a8:81:52:89:59:c2:b9:46:b3:d8:64:1c:8f:
81:cb:f2:9c:cf:0c:63:2e:0f:67:e3:61:42:d2:66:ee:df:e2:
e7:4b:e7:6d:62:7b:78:ad:5c:1d:2c:97:62:87:4d:44:ce:c3:
58:2c:60:f6:e9:2e:52:48:fa:42:aa:99:0e:65:66:60:cb:25:
b5:23:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net