Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/5MNHm2fG2K7ej_6HfywzVnWXnf8.roa
File: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (raw, json)
Hash identifier: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=
Subject key identifier: E4:C3:47:9B:67:C6:D8:AE:DE:8F:FE:87:7F:2C:33:56:75:97:9D:FF
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 01941FFA72ED8272AFB00A5633357D2DD0D1
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/5MNHm2fG2K7ej_6HfywzVnWXnf8.roa
Signing time: Wed 01 Jan 2025 03:48:14 +0000
ROA not before: Wed 01 Jan 2025 03:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39405
IP address blocks: 185.247.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:72:ed:82:72:af:b0:0a:56:33:35:7d:2d:d0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4c3479b67c6d8aede8ffe877f2c335675979dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:9e:3e:13:e3:26:cb:74:eb:01:c8:c7:49:
94:97:c1:ad:26:1f:20:d4:dc:b0:37:73:d5:c5:1b:
94:42:1e:fc:e7:75:dd:48:5a:9f:26:3a:c1:19:93:
99:9c:c8:ce:64:b5:7c:66:c5:1e:27:61:19:43:cd:
17:bb:1f:aa:2e:da:e8:c0:71:2c:9f:84:f1:43:b7:
10:82:ad:32:8a:45:6b:15:65:fc:8d:9d:2a:e0:c1:
78:6d:9b:f7:0a:1e:4c:6a:8e:a7:21:a8:32:41:cc:
f0:1c:ea:7c:ce:17:21:d0:1f:83:85:bd:04:7f:4b:
91:e8:74:a7:b7:2c:a9:3d:a4:0a:d4:5b:53:e8:6d:
12:a2:84:79:16:47:61:ae:ae:2b:36:6a:8a:f3:04:
53:70:14:da:ea:3b:cd:13:06:49:3d:49:e6:ce:7f:
7c:1b:d8:d8:08:58:67:f1:ba:98:0a:13:a6:e6:77:
72:47:c1:d9:15:a4:ff:b8:59:38:76:5f:ff:2e:23:
99:4a:04:17:7d:dd:11:58:b2:29:8e:41:90:65:96:
90:76:b6:48:55:16:e2:93:8f:d4:3e:44:19:ed:a9:
92:6b:6d:6b:6c:62:0e:49:63:82:34:3d:c1:c3:0f:
05:ca:d3:f9:7c:88:b8:3f:53:2a:8b:76:72:ec:4a:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:47:9B:67:C6:D8:AE:DE:8F:FE:87:7F:2C:33:56:75:97:9D:FF
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/5MNHm2fG2K7ej_6HfywzVnWXnf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.84.0/23
Signature Algorithm: sha256WithRSAEncryption
59:27:4c:22:a4:4a:3b:1a:47:52:64:a9:8f:32:e1:ca:f4:b2:
27:88:1f:ba:4e:aa:19:cf:11:19:35:a3:99:1f:e2:53:7d:9f:
af:2f:70:1e:25:a7:a5:c8:81:9c:bd:ec:a3:93:2b:34:c5:0d:
83:84:45:79:75:ee:4d:50:a3:ff:28:01:23:dc:f1:39:7e:96:
0b:ea:0d:c2:af:79:5f:d0:44:24:cd:ba:f1:e0:f8:2e:e7:b0:
86:87:ef:30:ac:66:34:e2:ed:85:22:b7:03:2c:7a:7d:d1:74:
26:4d:b9:a7:c0:7d:8e:6a:f5:60:87:57:1f:52:b8:ab:de:f1:
fd:bd:31:45:e8:f8:26:c5:be:f1:ce:5d:e0:99:dd:39:b8:53:
7d:e4:d5:8f:80:d2:43:a8:b7:e4:a5:20:c8:46:bf:ff:2c:eb:
b0:95:73:1d:51:be:3c:91:66:67:e8:1e:08:28:2b:40:55:4d:
d8:9b:a2:92:66:40:4c:ea:b3:bc:72:5e:12:f0:1b:96:5c:8f:
bb:c5:cd:7f:ff:0e:0f:2a:b4:f8:10:da:1f:35:8b:72:2f:02:
7d:82:59:8c:56:df:00:cd:dd:20:8b:5e:5d:d1:1d:c1:96:c4:
d1:5d:b4:2f:18:f3:cb:06:f3:3e:f8:96:02:f4:07:15:1d:96:
f8:09:c7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net