Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa
File: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (raw, json)
Hash identifier: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=
Subject key identifier: 62:0D:FA:2E:34:57:09:74:82:76:60:E4:BB:3C:7F:62:1F:E7:39:77
Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial: 01941F8C1E0F034A9F3C2A7DD3B7A512F382
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5539
IP address blocks: 31.214.222.0/23 maxlen: 23
45.15.240.0/24 maxlen: 24
109.230.244.0/23 maxlen: 23
185.143.68.0/23 maxlen: 23
2a07:3340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:0f:03:4a:9f:3c:2a:7d:d3:b7:a5:12:f3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=620dfa2e34570974827660e4bb3c7f621fe73977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:15:16:f0:a9:e8:12:0e:86:d6:82:fc:06:
35:b1:f7:df:2c:5f:46:10:02:cb:c6:c8:4d:2a:1f:
ce:29:d5:25:9e:9d:a1:55:45:a6:f8:20:fa:89:07:
4b:a6:c4:96:0b:8c:5f:95:ad:f9:96:67:ff:49:ae:
80:35:8d:af:92:92:5f:bc:0b:f9:0f:cd:ca:53:80:
fb:03:19:4f:fe:63:85:7c:5e:99:62:40:67:ef:c7:
e2:e4:b1:33:50:7b:cf:cd:92:79:8c:3a:9b:93:07:
ca:55:26:ba:05:4c:91:62:23:5d:1b:41:f3:23:f5:
dd:b2:50:af:bc:78:2c:0b:56:4f:2d:7a:aa:28:5a:
f0:b0:6e:e2:a1:ef:72:50:0b:fe:23:e2:a0:89:c3:
ff:3f:c3:52:24:02:da:92:ac:43:d3:3d:30:0e:51:
ee:1c:eb:72:ef:41:dd:12:e2:e0:53:02:ea:c4:d1:
be:33:92:d1:e4:50:db:32:5c:92:33:81:8c:95:5d:
8b:23:55:0e:4f:34:84:f2:a2:b4:4e:61:d5:ef:f1:
9e:eb:fc:85:72:51:7a:3d:7a:36:91:ce:db:c6:87:
0f:8a:db:8e:d0:18:f4:fd:8d:e2:61:bb:00:ab:00:
6f:83:17:56:af:19:54:c6:dc:43:2a:25:df:7f:4d:
f1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:FA:2E:34:57:09:74:82:76:60:E4:BB:3C:7F:62:1F:E7:39:77
X509v3 Authority Key Identifier:
keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.222.0/23
45.15.240.0/24
109.230.244.0/23
185.143.68.0/23
IPv6:
2a07:3340::/48
Signature Algorithm: sha256WithRSAEncryption
78:c8:85:08:97:11:ff:ef:de:35:ff:e3:90:b6:13:1d:dc:f1:
f6:f8:2b:e7:bb:c2:f2:21:ba:02:fe:ab:a1:78:7b:6b:6f:97:
27:7c:ac:c5:f7:46:16:3d:d4:60:5e:26:6f:5a:1a:69:93:73:
f8:f4:21:b6:11:33:12:cb:6c:28:72:21:b1:70:a3:b8:b2:2b:
52:c4:71:e6:a3:51:bd:87:ec:d4:39:76:36:b9:e0:b8:05:d2:
52:5c:86:f0:35:c5:27:9f:9a:1b:d8:a8:f1:81:40:33:51:fb:
89:3f:48:bf:a4:ff:51:74:81:f2:9e:6c:9f:e9:b9:ef:0f:d8:
07:2e:bc:e5:44:43:1e:29:bd:88:8f:89:02:7a:55:c3:77:d3:
62:3e:f9:3f:bb:01:91:4f:81:f3:b1:c7:3e:de:3c:62:69:38:
ae:c6:91:25:b4:df:be:54:3f:01:64:28:22:5d:2d:5b:02:3b:
f8:6c:39:81:f4:e3:cc:3a:a9:27:b6:7a:f5:11:0f:24:b5:fc:
22:d3:65:bc:7e:a9:7e:c5:d7:82:9f:e0:ae:6a:be:83:29:db:
1d:84:55:ac:8c:3f:0e:6f:34:e2:73:93:d2:b1:4e:b7:65:7d:
3e:38:7b:00:43:c2:2a:a9:74:d1:b0:10:9e:f6:af:71:f6:c0:
a5:a2:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:47 2025 by rpki-client on console.sobornost.net