Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa
File: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (raw, json)
Hash identifier: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=
Subject key identifier: ED:63:8F:FB:FF:8C:39:27:D7:F3:D2:8A:4A:8C:BA:BF:46:5D:1A:62
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019427B665CD10B664FF010C2F4676AF7050
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa
Signing time: Thu 02 Jan 2025 15:50:52 +0000
ROA not before: Thu 02 Jan 2025 15:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 5.100.144.0/21 maxlen: 21
185.150.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:65:cd:10:b6:64:ff:01:0c:2f:46:76:af:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Jan 2 15:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed638ffbff8c3927d7f3d28a4a8cbabf465d1a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:c7:75:e6:a3:41:05:93:4e:39:f5:d6:5d:
20:d7:b2:a8:56:8c:86:e2:20:5c:bc:18:71:d0:3c:
f2:67:44:24:3a:f9:e1:1e:93:ef:4f:07:3c:82:99:
76:9b:39:2c:8c:d3:25:30:c9:c7:e0:5a:7a:f9:33:
f4:ac:e1:18:24:5c:92:e9:5c:f2:a2:50:da:04:8e:
42:6a:d6:27:6c:47:0f:c4:6c:ae:df:97:33:07:e4:
ab:39:35:5f:ba:cf:fc:68:e9:a1:82:1f:a7:a6:a0:
3b:64:58:d6:71:50:3c:42:16:95:6c:e9:15:a6:50:
a2:c3:6f:1b:73:4b:98:a2:cc:36:a0:93:e5:22:f4:
32:5b:be:ad:57:59:aa:a5:e2:3e:0e:40:b0:0d:ec:
34:75:2c:23:35:e7:3e:fd:b0:95:87:59:1a:25:de:
d5:e3:01:ca:3f:a2:35:e2:01:04:a5:f3:a1:15:0f:
e1:fb:22:24:4d:45:d6:eb:d5:5f:4c:91:fc:01:5a:
36:00:e5:b4:28:f8:9f:e0:b6:bd:98:c3:23:c3:41:
7e:3a:fd:24:7a:fe:91:5e:26:89:06:a3:f1:74:da:
c3:a3:b7:fd:ff:99:71:b6:f0:07:7b:86:23:51:58:
21:28:75:a6:c2:3e:77:53:b2:e2:77:7e:86:45:7e:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:63:8F:FB:FF:8C:39:27:D7:F3:D2:8A:4A:8C:BA:BF:46:5D:1A:62
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.144.0/21
185.150.172.0/22
Signature Algorithm: sha256WithRSAEncryption
82:21:dc:9c:99:36:9c:46:38:e0:c7:59:04:28:a5:8a:b0:b1:
54:04:bf:36:ef:1a:64:e9:20:66:64:bb:db:2e:21:43:a5:0d:
bd:35:53:7f:51:9b:1c:79:f3:a0:ea:62:6c:48:7a:f5:d3:98:
1b:25:ee:20:23:71:e5:db:62:30:0e:7b:8b:6a:0d:62:43:f0:
c3:c5:3a:82:34:c6:71:3e:14:9e:57:1e:77:21:62:cd:5f:a4:
6c:3a:41:fe:9d:07:2f:28:b9:24:62:bc:31:b9:9f:8d:d1:f7:
a5:cf:87:d1:76:b3:4e:5d:ee:b7:a8:bd:d1:b4:01:5c:95:40:
d4:c7:8c:53:0a:5b:04:2b:9c:8f:6f:90:2d:c5:32:16:62:e9:
6c:6c:dd:cf:7c:96:0e:3f:96:5d:6e:3a:70:f5:64:70:97:5c:
6d:29:35:32:71:27:41:0f:83:ef:a3:4a:77:51:69:0c:1f:60:
21:81:e1:84:2a:98:dd:89:ce:e7:d7:67:7b:70:75:0b:01:35:
40:eb:bd:0b:e8:7d:1f:c0:26:75:f5:71:6b:8d:e9:09:42:1c:
2e:12:39:48:6d:42:85:ce:de:17:59:61:98:17:06:09:c3:0a:
4d:c6:b9:f9:02:6c:ee:6b:5e:17:fe:86:00:9f:7d:47:24:c0:
da:a4:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net