Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/S5eF10lYA3ZPlCb-k6S-7BbA_OU.roa
File: S5eF10lYA3ZPlCb-k6S-7BbA_OU.roa (raw, json)
Hash identifier: QIIgdJuqeu+re49bkKfXAWxZmuaiGH8W+QlzrEHTNZ8=
Subject key identifier: 4B:97:85:D7:49:58:03:76:4F:94:26:FE:93:A4:BE:EC:16:C0:FC:E5
Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006
Certificate serial: 0195F33F0B00E15EED33194ACD3345D711EE
Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/S5eF10lYA3ZPlCb-k6S-7BbA_OU.roa
Signing time: Tue 01 Apr 2025 21:25:49 +0000
ROA not before: Tue 01 Apr 2025 21:25:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60908
IP address blocks: 88.84.48.0/20 maxlen: 24
185.9.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f3:3f:0b:00:e1:5e:ed:33:19:4a:cd:33:45:d7:11:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006
Validity
Not Before: Apr 1 21:25:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b9785d7495803764f9426fe93a4beec16c0fce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:86:d0:f8:b6:0b:63:e8:c1:1e:1f:d0:34:ef:
de:15:df:65:5c:65:9e:f0:7d:8b:39:6e:7c:f6:03:
6b:55:7f:7e:4e:a5:b7:a0:05:f8:e3:9c:d6:27:02:
0f:87:60:37:e5:9c:59:44:d3:c5:1b:27:be:16:0a:
36:41:cd:cc:8c:43:e1:4f:74:1e:be:e3:b9:a9:f1:
ec:6e:fd:25:9d:9c:c2:53:68:89:57:20:10:5f:a3:
85:8d:ea:3c:ff:7a:c6:ef:b9:b6:a5:aa:6b:df:5e:
d5:99:91:aa:aa:5a:4d:76:69:37:bb:55:bf:9f:54:
b7:51:64:50:76:55:cd:a8:da:ad:40:10:b6:ff:19:
99:39:00:80:d2:b9:90:0d:fe:e6:51:5a:62:fb:83:
7c:32:ea:e2:ec:2c:a3:50:39:a5:66:94:8c:7b:36:
6d:1b:5f:df:a7:c1:8a:ee:3e:fd:74:d1:b9:76:34:
8f:1d:88:bf:2b:e0:6f:cf:5a:72:e8:fc:4b:03:27:
d1:09:51:33:b2:07:2d:73:b3:39:3d:e9:68:be:45:
32:63:c3:1d:d7:dc:e0:b0:73:5b:fc:ba:ee:20:f8:
cf:89:d7:5d:93:21:49:23:9d:d2:8d:e5:8e:1f:e7:
86:bb:42:2f:cf:bf:46:1f:69:79:e6:04:df:79:2b:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:97:85:D7:49:58:03:76:4F:94:26:FE:93:A4:BE:EC:16:C0:FC:E5
X509v3 Authority Key Identifier:
keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/S5eF10lYA3ZPlCb-k6S-7BbA_OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.48.0/20
185.9.90.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:88:a4:3a:4f:b2:e4:d8:ee:1c:18:69:c8:04:56:3b:07:d9:
68:2f:13:87:f2:b8:dc:5d:26:e4:9f:ad:f6:8b:cd:9b:36:bb:
c4:94:50:97:c3:a2:68:b7:df:7c:c7:27:fb:b0:cd:4d:73:01:
b2:8e:bd:6d:c7:29:5a:e1:e5:ef:25:bc:8e:a0:63:f4:98:a0:
7c:45:e1:cc:04:66:c9:f6:99:c2:d6:a7:fd:98:7e:e7:65:3a:
25:64:92:f3:9d:73:a9:43:23:f1:a2:19:62:28:72:3f:80:b0:
ec:23:92:c3:5a:9a:53:f5:f6:c6:af:90:72:92:4d:3a:42:29:
79:1f:f4:c6:e8:57:46:dd:bd:17:75:5c:18:f8:07:20:d1:88:
b4:8b:31:05:79:85:d2:f1:52:1d:85:3e:19:24:0b:60:c9:47:
3e:91:5f:18:64:2c:a8:33:9f:02:17:8c:12:e9:2e:40:94:0d:
60:d4:f6:02:15:d8:05:0c:9d:15:62:b9:ff:eb:52:c8:a3:0f:
fc:14:90:6d:62:63:63:3d:e7:7e:43:5d:b3:67:8a:70:5b:45:
c5:2b:e1:a3:77:1d:7e:bd:27:41:aa:df:0e:1f:de:0b:0e:51:
f2:ad:3b:69:5c:21:3c:1f:c8:fd:4b:59:25:71:9c:52:33:c3:
93:98:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:46 2025 by rpki-client on console.sobornost.net