Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa
File: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (raw, json)
Hash identifier: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=
Subject key identifier: E5:83:26:EE:25:26:7F:B6:17:09:B7:93:32:C6:76:81:B5:05:F0:C7
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 01942748470677FC5004958A69B9EC746630
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa
Signing time: Thu 02 Jan 2025 13:50:35 +0000
ROA not before: Thu 02 Jan 2025 13:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34412
IP address blocks: 193.37.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:47:06:77:fc:50:04:95:8a:69:b9:ec:74:66:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e58326ee25267fb61709b79332c67681b505f0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:98:f9:61:8f:1b:c5:00:d1:8a:d9:b9:97:
e1:b2:67:70:99:e6:11:0e:1e:57:11:fd:2d:cd:92:
26:60:b8:1a:b9:64:47:7e:06:01:65:ca:d8:24:1c:
a0:09:22:9f:47:31:37:8b:fd:2f:36:e4:e6:2a:02:
f0:5b:cc:99:87:5f:ac:2d:34:e3:e2:ac:f1:9d:a9:
e0:6f:b4:b8:f6:62:11:8d:ba:13:cb:9b:bf:ec:0a:
24:9e:46:d9:48:00:8f:68:3a:01:52:8a:a1:d2:bc:
4a:56:71:a9:56:89:ac:95:24:70:42:69:76:0d:27:
32:ed:05:5b:1f:15:63:d1:d9:0a:8d:c2:ac:da:3f:
43:d1:62:c9:8c:12:a9:c0:cd:55:26:71:d3:57:3b:
bc:51:d1:6d:bc:2b:c4:1b:55:1e:de:5a:01:23:87:
a9:b8:33:6b:54:8a:2a:78:28:e2:d4:5c:ce:ee:b6:
cc:43:de:63:c1:e5:1d:67:df:0f:a0:a2:da:c6:fd:
6b:29:23:a6:1c:b7:d8:11:be:de:38:eb:fc:c4:90:
d6:43:de:2f:d8:76:b4:db:4c:62:2a:dd:e5:28:81:
b1:bf:47:5f:a2:f4:6b:7f:91:2a:97:9c:b0:06:bf:
19:6a:60:d9:1e:fe:ab:b5:3d:f0:5e:0d:9f:c7:84:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:83:26:EE:25:26:7F:B6:17:09:B7:93:32:C6:76:81:B5:05:F0:C7
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:53:36:fb:1f:f7:42:2b:8f:09:1e:8e:a8:8d:11:af:f3:fd:
56:0e:b6:8e:fd:63:cb:f4:a4:ce:d7:31:5c:53:a7:27:b0:39:
c1:14:bb:2e:20:f6:8a:ba:5f:dd:9f:2d:84:ff:85:55:7d:70:
90:9d:ea:39:31:a0:59:6f:7b:32:5a:e6:62:94:6c:f5:7f:e7:
34:41:ac:1c:4d:d6:b0:05:9d:db:92:a1:fd:6a:a1:01:91:23:
a4:c9:c5:7a:ed:ea:c4:a2:8f:aa:cd:db:83:4d:bc:db:27:83:
0d:ba:0a:f4:74:7a:31:81:59:2c:af:cc:21:f9:60:b0:a4:63:
7e:2a:b7:af:d6:2f:24:2d:f9:05:3e:18:15:f3:bf:33:11:70:
ad:0b:90:5f:13:e8:24:a2:8f:d6:57:54:27:a8:1e:14:61:a3:
e0:ad:98:70:7c:64:58:69:a6:0c:80:4d:d0:36:9b:86:53:f0:
46:25:13:1f:b2:ad:66:52:28:b7:e6:09:aa:9d:85:bc:42:74:
50:6f:39:12:da:be:3a:a0:85:71:6b:a5:67:be:e8:ec:d3:7c:
1f:95:c1:57:84:d9:33:b0:29:bb:06:29:d9:b5:8b:a9:78:22:
77:ce:e9:b5:2a:31:d7:e4:dc:8e:d9:34:af:97:71:06:da:34:
e2:4c:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net