Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/D_RGKNjU3HO1804H_N4lL39f8xU.roa
File: D_RGKNjU3HO1804H_N4lL39f8xU.roa (raw, json)
Hash identifier: lQxsMyLpAGFJHo/y+xtaq8v1/ZEVry9ym0LdrZC/Bgk=
Subject key identifier: 0F:F4:46:28:D8:D4:DC:73:B5:F3:4E:07:FC:DE:25:2F:7F:5F:F3:15
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019423D769544EA0A2727ED9D8AC0DF3D0D1
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/D_RGKNjU3HO1804H_N4lL39f8xU.roa
Signing time: Wed 01 Jan 2025 21:48:26 +0000
ROA not before: Wed 01 Jan 2025 21:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198187
IP address blocks: 5.252.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:69:54:4e:a0:a2:72:7e:d9:d8:ac:0d:f3:d0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 1 21:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ff44628d8d4dc73b5f34e07fcde252f7f5ff315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:e7:a8:49:e6:ef:38:d9:e2:80:6b:ac:95:
ee:3b:1c:a5:4c:a8:f4:47:84:1e:0c:4f:9a:05:df:
64:ff:05:64:39:a2:e1:b0:88:a3:67:70:d8:53:56:
81:37:62:df:0e:66:dc:48:71:51:37:30:a1:9b:39:
8f:04:46:fc:97:fa:33:b7:1f:3c:0e:76:a6:43:88:
33:c3:d5:94:eb:76:1b:1d:b2:99:8b:da:9f:ae:ce:
05:4e:06:d2:51:27:3b:ba:35:58:ad:70:29:74:c3:
25:0b:85:49:e9:0a:36:d2:76:71:3e:f6:b7:77:a1:
59:d0:0d:74:54:5d:59:11:db:0b:13:52:f5:85:97:
93:bd:e9:6c:b7:4a:fe:a3:36:d4:4a:f8:9e:48:e0:
53:84:2f:48:3e:30:14:15:57:6c:8b:18:6e:db:ac:
4c:f6:ca:01:55:b3:cf:0c:36:a2:f2:8d:55:c9:69:
dc:7f:fa:dc:e3:12:32:b0:58:7f:e6:c3:81:40:99:
a6:b5:65:8b:11:06:b3:f8:7c:ca:ef:b9:9d:13:da:
ef:f6:d6:a0:7f:96:10:c0:57:f8:c8:56:2e:3c:f0:
bc:39:ad:d0:d4:f3:4b:23:77:b5:21:c9:18:6a:bc:
6b:a3:7f:89:cc:5e:c8:3a:50:b0:fd:a0:ba:87:39:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F4:46:28:D8:D4:DC:73:B5:F3:4E:07:FC:DE:25:2F:7F:5F:F3:15
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/D_RGKNjU3HO1804H_N4lL39f8xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.214.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c0:2a:b2:b5:54:83:b1:0d:51:09:6d:80:a4:16:11:29:cd:
f0:6d:99:05:48:45:ec:6e:59:19:70:12:8a:08:86:34:60:52:
01:7e:42:4c:c7:21:94:69:4f:e8:7e:fc:2c:a7:27:71:3d:72:
ab:78:4b:63:db:3c:a3:98:f7:34:8b:5b:e9:a3:46:dc:80:7a:
89:33:5a:24:68:ab:20:58:0d:5d:f7:c9:60:d6:f7:da:4a:6d:
1e:1e:6f:7b:dc:71:5f:4a:72:51:28:74:eb:9f:b2:4c:3d:d7:
48:07:ac:4a:80:31:87:86:2e:57:fc:56:17:19:a0:19:5f:35:
c8:88:db:fe:0c:f8:21:07:df:d0:76:d6:fc:4f:e5:21:02:82:
c7:d9:01:c2:37:5d:86:19:e1:55:45:ed:e5:9c:9a:1b:24:89:
ed:82:c8:1a:ad:fc:ec:f2:51:c9:ad:dd:6e:f2:60:c3:1f:39:
fd:8c:be:95:d4:22:4d:4c:31:6f:1e:49:a0:47:be:fa:3b:64:
e8:63:76:4e:ce:ca:11:e5:a1:92:ca:cf:2e:42:80:6c:83:2a:
9a:02:ef:96:18:11:cd:16:31:63:3c:3d:4a:b0:9d:e7:9b:d0:
2d:9d:31:70:1b:16:de:76:a7:73:43:ab:32:45:92:87:3c:01:
e6:1f:c8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net