Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/9t5l9DU2DQd9JSq54qDiGTsAgAw.roa
File: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (raw, json)
Hash identifier: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=
Subject key identifier: F6:DE:65:F4:35:36:0D:07:7D:25:2A:B9:E2:A0:E2:19:3B:00:80:0C
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0195F07A6C8D43F962FD29F3ACF1397F177A
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/9t5l9DU2DQd9JSq54qDiGTsAgAw.roa
Signing time: Tue 01 Apr 2025 08:31:49 +0000
ROA not before: Tue 01 Apr 2025 08:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39040
IP address blocks: 194.187.88.0/22 maxlen: 22
194.187.89.0/24 maxlen: 24
2a02:388::/32 maxlen: 32
2a02:388:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:7a:6c:8d:43:f9:62:fd:29:f3:ac:f1:39:7f:17:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Apr 1 08:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6de65f435360d077d252ab9e2a0e2193b00800c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:c1:83:40:66:0f:b5:0a:6c:7a:8a:b4:0b:
d5:79:67:5a:5c:b5:87:7d:82:87:4d:a9:1e:c2:df:
01:0a:df:7e:01:11:f3:2b:0b:4f:2d:c4:5d:5d:cf:
48:61:e1:80:1e:ca:db:0f:6c:8e:84:bb:82:ac:ed:
83:ff:ab:1f:ea:9e:b4:55:df:36:ff:46:48:0c:f5:
a3:4a:1c:05:5d:45:c1:20:f0:58:1f:83:c9:09:72:
0d:a3:68:1e:87:e9:f6:d0:f7:29:56:4b:f0:de:9b:
39:85:73:a8:7a:26:70:33:28:b5:93:5c:8b:41:30:
2b:d1:ef:27:bb:ff:e9:39:31:5e:88:1b:7f:c2:84:
74:a6:d2:73:7f:39:ae:db:5e:a9:cf:4a:96:72:8f:
bd:1e:a6:ad:0d:e1:97:d1:e5:12:8c:4e:29:b1:af:
56:ce:c0:9d:9f:90:a3:5f:81:d3:30:a5:57:85:1f:
7b:f2:d7:22:f1:22:65:7b:a7:96:3f:60:0b:29:76:
ed:cd:d0:72:a1:fe:55:50:e8:49:5e:79:4b:9a:72:
e7:af:73:d8:9d:b4:e8:fc:58:26:32:a6:c4:52:a1:
b4:84:86:17:88:35:ea:95:11:bb:97:b0:f1:d4:7c:
95:fd:71:33:45:d2:e6:bb:d6:44:bb:d6:82:59:24:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DE:65:F4:35:36:0D:07:7D:25:2A:B9:E2:A0:E2:19:3B:00:80:0C
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/9t5l9DU2DQd9JSq54qDiGTsAgAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.88.0/22
IPv6:
2a02:388::/32
Signature Algorithm: sha256WithRSAEncryption
23:7b:bd:0c:13:a2:f6:56:0d:af:14:bb:4c:cb:43:bf:ea:1d:
01:13:f7:7c:f7:1e:ac:dd:6d:e1:e3:76:db:b1:c3:c8:dd:f9:
ed:10:ba:23:26:7e:2e:11:4c:30:e8:87:96:5e:cf:d9:ef:d2:
ff:c8:a4:7a:78:33:aa:a3:8f:bf:5e:4c:9a:72:b9:20:2d:a5:
da:38:d9:3a:70:97:a8:fe:50:6d:3a:d9:13:4b:0d:b5:7f:ad:
29:aa:92:11:c0:4f:e2:c9:6a:09:de:4a:e1:88:a3:d0:8e:49:
4c:50:53:74:cc:ee:22:75:8d:65:d0:61:e2:79:f9:2a:bc:7a:
5e:00:49:02:b8:22:bc:a1:eb:9d:c6:4e:87:d4:ef:2c:79:7a:
e1:89:5e:04:87:a6:7e:e8:ae:d2:20:77:ef:22:bc:c7:b8:3f:
dc:9e:b1:01:2e:1b:16:15:31:82:28:47:82:97:7a:be:96:d5:
93:18:92:a5:99:3f:8f:38:ae:c9:b0:00:7a:22:37:f7:04:04:
24:c4:79:66:24:3a:3a:71:ed:f1:d8:52:a3:fd:37:26:86:35:
23:4c:8b:f2:77:ed:00:bc:98:7c:a6:20:00:12:fd:8d:dd:eb:
8a:7c:56:b0:c2:da:44:3f:eb:44:14:41:52:9b:24:3e:ac:60:
c2:18:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:32 2025 by rpki-client on console.sobornost.net