Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/p7CsWJqhWsLkHyYPLS-R_3le0hU.roa
File: p7CsWJqhWsLkHyYPLS-R_3le0hU.roa (raw, json)
Hash identifier: EeSP4Cc1NDkG1olZjQwIwFAUrprwIWgmtu0OwLvcM94=
Subject key identifier: A7:B0:AC:58:9A:A1:5A:C2:E4:1F:26:0F:2D:2F:91:FF:79:5E:D2:15
Certificate issuer: /CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Certificate serial: 0195BC333E18C7AE8B9E5E3249795ED5F870
Authority key identifier: 7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/p7CsWJqhWsLkHyYPLS-R_3le0hU.roa
Signing time: Sat 22 Mar 2025 04:53:49 +0000
ROA not before: Sat 22 Mar 2025 04:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198735
IP address blocks: 5.1.104.0/24 maxlen: 24
5.1.105.0/24 maxlen: 24
5.1.106.0/24 maxlen: 24
5.1.107.0/24 maxlen: 24
5.1.108.0/24 maxlen: 24
5.1.109.0/24 maxlen: 24
5.1.110.0/24 maxlen: 24
5.1.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bc:33:3e:18:c7:ae:8b:9e:5e:32:49:79:5e:d5:f8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a127d63ce1c9f3557390af21fc061072a525f4e
Validity
Not Before: Mar 22 04:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7b0ac589aa15ac2e41f260f2d2f91ff795ed215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:59:64:97:7f:62:18:18:82:92:1e:f3:a3:
11:8f:26:ad:2a:e2:b6:9a:1d:fe:66:83:e4:b2:33:
22:89:7e:34:5d:cb:f4:01:ab:7d:a9:15:e4:2a:14:
48:a8:84:f3:c9:6a:8a:43:e2:19:f9:b9:97:45:9e:
50:55:cf:65:10:83:ba:a2:c5:42:20:d2:9e:34:ea:
e7:b3:fa:d4:3c:67:8e:07:32:09:6a:9f:bd:59:a3:
13:99:d5:71:9f:e0:f7:c7:3d:24:78:e5:cc:bc:0c:
5c:e7:ff:2a:ea:a5:b7:f9:08:c5:a0:43:55:26:2e:
bd:84:6c:7e:fc:b6:41:37:7e:ff:69:b0:55:94:23:
83:9d:db:ba:11:9d:13:10:2d:ef:13:63:6e:7b:af:
6d:f4:3e:40:6d:42:53:aa:1c:09:22:45:b2:9a:9f:
ee:0c:05:63:e4:70:37:3e:c4:d9:78:29:5f:8b:e4:
32:bf:17:9c:5f:37:bc:54:df:e9:22:3c:27:35:5c:
e5:82:a1:f3:5e:e3:1f:3c:92:5d:c8:9d:95:9c:94:
71:9a:85:08:97:44:34:60:d7:fd:79:01:14:7f:a0:
85:2c:a7:c0:22:22:98:3e:03:e6:23:45:36:fd:d2:
f8:f7:c4:28:36:4f:87:3e:2d:a0:56:8b:db:b4:cc:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:AC:58:9A:A1:5A:C2:E4:1F:26:0F:2D:2F:91:FF:79:5E:D2:15
X509v3 Authority Key Identifier:
keyid:7A:12:7D:63:CE:1C:9F:35:57:39:0A:F2:1F:C0:61:07:2A:52:5F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehJ9Y84cnzVXOQryH8BhBypSX04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/p7CsWJqhWsLkHyYPLS-R_3le0hU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/69e53f-a48c-49b0-90e4-8d24816d97de/1/ehJ9Y84cnzVXOQryH8BhBypSX04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.104.0/21
Signature Algorithm: sha256WithRSAEncryption
91:0f:f3:a8:0b:07:4e:ce:fc:9c:aa:eb:46:97:56:f7:49:84:
88:6b:92:4b:89:a6:21:68:29:20:8c:81:3e:b5:01:30:7b:b8:
0a:4f:97:3f:bc:ef:f7:73:c5:5f:38:93:d7:4b:92:b3:88:b4:
68:6d:77:2a:b5:79:3b:4c:d3:97:7a:3e:b7:bd:73:d7:6f:c3:
e3:31:fb:b7:cd:33:7b:44:6f:81:bf:bb:f7:a0:09:4c:90:94:
f0:54:2f:79:d7:50:69:67:f5:0d:e6:ad:69:1d:7c:a6:40:3f:
5b:7d:27:81:0e:d3:90:c0:3b:ae:7d:c0:df:12:14:ea:ac:c3:
1a:7c:ab:7b:6b:8b:c8:0d:a6:fc:05:a1:9a:f7:d4:bb:81:ab:
30:ee:cb:0c:66:07:f9:16:2e:93:76:ec:ad:14:e3:c6:1b:8b:
b4:47:0c:68:ed:13:38:b0:f7:b0:93:60:c1:87:d4:a4:90:bf:
5f:22:0c:81:b5:67:fd:30:51:a7:12:e1:96:46:1a:7e:80:de:
ad:b7:4d:76:8d:71:d2:0d:47:c4:47:50:9b:a2:1f:7c:0e:ae:
02:e8:fd:a2:cf:03:25:8f:80:84:b8:56:55:97:a7:74:6b:f1:
02:3b:91:af:ef:7e:45:60:20:54:98:ae:5d:6a:96:1f:64:99:
f6:98:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net