Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa
File: ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa (raw, json)
Hash identifier: ESZ0DE4a4/PZ75FUD4JmTPdMx0gc6CuklYJy0AZ+qzM=
Subject key identifier: 96:36:DC:38:7E:0F:D3:07:DB:65:D0:66:0F:10:BD:59:53:F7:8C:20
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 0195BC307EFC36161537C312B1EBA4DD8A8B
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa
Signing time: Sat 22 Mar 2025 04:50:49 +0000
ROA not before: Sat 22 Mar 2025 04:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214739
IP address blocks: 5.1.108.0/24 maxlen: 24
5.1.109.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
5.1.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bc:30:7e:fc:36:16:15:37:c3:12:b1:eb:a4:dd:8a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Mar 22 04:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9636dc387e0fd307db65d0660f10bd5953f78c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:42:19:00:77:fc:b0:1d:51:72:54:7b:46:
9e:96:60:cd:ef:17:01:08:c2:fa:5c:14:ba:c7:c7:
3d:ad:2d:f6:0a:29:99:fb:c7:07:17:fa:7f:4c:08:
d6:c6:80:3d:ba:41:4f:0a:96:5a:12:87:8d:f7:44:
5f:f9:11:70:67:6c:ab:eb:53:1b:36:26:10:fa:cb:
39:f3:77:2a:bc:53:d1:ad:29:d9:f3:6e:82:9b:f0:
48:27:c9:3c:a8:ea:43:11:0b:a0:6d:0b:9d:90:84:
36:2a:05:53:db:a4:7a:2c:c7:7f:42:f8:0d:ee:ae:
c0:91:94:ee:1a:c9:31:65:40:16:54:04:61:5a:df:
ee:f5:12:d4:61:2a:18:ba:f0:11:1f:e4:fd:ab:22:
29:8a:1a:46:a9:64:fb:21:55:1d:67:f2:cb:f1:98:
ce:d5:3c:9c:93:fd:56:43:d4:0c:ed:e9:df:7d:a1:
bd:70:50:d1:97:95:44:57:2f:57:3f:ec:59:5b:de:
1c:64:c9:42:23:41:2f:71:2a:80:c6:4e:de:e5:86:
c7:61:1e:d1:f5:41:b1:65:27:a3:4d:cc:db:35:96:
58:36:17:d2:64:14:34:40:4a:de:73:ac:95:fb:30:
fa:71:28:a0:76:ee:d1:26:f2:7f:d1:3e:80:3c:97:
25:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:36:DC:38:7E:0F:D3:07:DB:65:D0:66:0F:10:BD:59:53:F7:8C:20
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ljbcOH4P0wfbZdBmDxC9WVP3jCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.108.0/22
Signature Algorithm: sha256WithRSAEncryption
41:81:a7:1d:2f:b4:54:85:36:57:9d:3c:db:e1:4d:f0:e0:bb:
e9:31:a7:d1:14:1e:77:f1:69:33:cf:67:1e:da:92:97:c0:32:
23:c8:7d:91:c4:0f:ed:d8:be:70:5f:00:9c:f6:62:55:7a:d2:
08:60:48:9a:91:ae:8b:e2:cd:92:51:68:4b:30:da:28:fa:b9:
cb:87:6f:c1:d1:60:68:e2:00:9b:e3:a4:13:b5:c5:a8:37:eb:
37:f5:0e:12:79:99:bc:3f:31:60:6f:66:f5:8c:b4:21:c8:07:
18:39:9d:05:0f:93:db:c2:e2:1f:ad:c5:5d:f4:1a:b9:f0:1a:
10:81:7f:69:be:fc:e5:18:39:c7:37:29:d2:a5:42:e3:48:01:
40:4c:9e:5f:c5:82:3c:7a:71:82:21:7e:d9:2b:4b:7e:7b:60:
bc:b1:d1:2c:4d:7e:4f:79:9e:5a:d9:56:86:2f:6b:24:72:82:
ee:be:45:28:e5:70:de:f0:54:08:8f:87:6d:27:a8:94:eb:c3:
1c:03:87:87:58:86:d6:52:50:33:82:df:0f:12:dd:04:f4:f4:
e0:06:ab:b9:fb:97:a2:d9:17:b5:7e:c1:42:cc:a5:a4:c6:48:
9c:03:8a:00:ae:d8:61:16:ba:09:d7:dc:fe:c9:9c:3a:96:a8:
cc:e3:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net