Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/5-tO1DtUPdvn-gHncHuAbgt6OiM.roa
File: 5-tO1DtUPdvn-gHncHuAbgt6OiM.roa (raw, json)
Hash identifier: L6Z02H1tfyOJ9fsH+lsAomG7wfqgJlWMWjJh/1Ka9SI=
Subject key identifier: E7:EB:4E:D4:3B:54:3D:DB:E7:FA:01:E7:70:7B:80:6E:0B:7A:3A:23
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 0194266BBD9EC9C7FA85DAB48BBA3E809747
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/5-tO1DtUPdvn-gHncHuAbgt6OiM.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43150
IP address blocks: 153.94.128.0/23 maxlen: 23
217.199.199.0/24 maxlen: 24
2a00:4d80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:bd:9e:c9:c7:fa:85:da:b4:8b:ba:3e:80:97:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7eb4ed43b543ddbe7fa01e7707b806e0b7a3a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:c1:80:dd:b3:a2:0d:68:4b:2e:a4:64:94:
50:b5:60:23:31:14:86:9b:ca:da:bb:a5:63:e6:17:
a0:7b:f8:da:9d:87:c1:5e:8b:69:25:dd:30:7e:06:
a2:20:c4:ec:5d:5a:99:f2:db:43:7f:fd:b1:09:54:
8d:08:73:77:f9:4d:61:e5:aa:71:1b:51:1b:c3:59:
6f:ba:8a:69:44:bb:31:90:ab:c9:f1:83:94:71:62:
81:1b:62:4f:68:ea:89:d8:c8:5a:45:6d:7c:d2:1d:
0b:d4:da:9f:59:89:59:9a:67:67:e7:08:35:61:15:
99:83:1f:0f:c2:f8:76:70:60:80:83:45:93:3b:e1:
b2:04:eb:5d:53:c1:fd:13:83:cd:f7:6a:12:86:fd:
3e:56:d2:12:e8:71:3f:f1:15:e8:a3:01:32:4e:4b:
d1:c5:cb:ba:e4:a6:4a:2c:5f:c1:3b:b4:5b:28:c0:
40:59:09:b4:07:e7:d4:cf:1a:6e:8b:6c:b5:ed:02:
71:13:b4:6d:a7:92:11:85:b6:9f:63:26:ed:2c:d2:
14:2c:03:01:b1:31:90:c5:f7:30:8f:ca:d2:b7:7c:
59:ef:31:ff:8c:89:41:31:ea:f7:2f:7a:0f:e8:9f:
70:62:4b:83:15:2c:be:d3:7c:37:b8:82:9a:4d:a9:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EB:4E:D4:3B:54:3D:DB:E7:FA:01:E7:70:7B:80:6E:0B:7A:3A:23
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/5-tO1DtUPdvn-gHncHuAbgt6OiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.94.128.0/23
217.199.199.0/24
IPv6:
2a00:4d80::/48
Signature Algorithm: sha256WithRSAEncryption
3d:f9:71:fa:a0:fe:02:94:c8:a0:81:75:01:de:59:4a:f1:2c:
02:27:1a:ec:35:90:e5:95:95:9e:4d:f8:5c:0a:ba:6a:84:cb:
10:d2:d6:95:f4:a8:26:e1:e4:03:d8:77:6a:f0:a8:89:84:cd:
78:a0:7a:54:aa:08:51:39:c8:02:c2:84:b9:07:ec:58:7b:95:
f9:48:20:7f:7f:d1:36:e4:c5:d8:e3:52:b5:f7:1a:17:18:05:
a3:25:ce:4b:1a:97:26:89:58:f2:3b:01:58:99:8d:28:43:d0:
48:1e:e8:0c:d0:e5:c6:b0:1d:95:2b:ca:96:7a:ff:d4:9b:37:
3a:ff:66:25:18:29:e8:f9:e6:74:8e:8c:83:d2:49:eb:c6:ef:
a9:8f:e8:12:c9:89:13:65:70:4d:d0:81:a9:cd:25:5f:33:2c:
e4:28:fc:51:36:51:49:19:11:b3:1f:59:d0:87:6e:34:c2:39:
43:5e:d9:73:5e:4e:e5:15:a7:5a:4d:d0:a6:3c:82:13:01:61:
44:ae:57:e4:08:38:c9:56:04:57:04:dd:f9:6f:62:e9:37:17:
86:72:2b:2c:6a:20:95:ac:b2:9c:28:48:ef:f1:2e:f0:05:0f:
d6:93:13:a1:33:1e:d2:f9:ee:b8:07:b7:6b:9c:4f:7e:48:5d:
3d:d6:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:45 2025 by rpki-client on console.sobornost.net