Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/5UnHlEhm50CtuwPcH8NrwNWIRVE.roa
File: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (raw, json)
Hash identifier: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=
Subject key identifier: E5:49:C7:94:48:66:E7:40:AD:BB:03:DC:1F:C3:6B:C0:D5:88:45:51
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 01942823876635A9C0B4A2FB41A86F6C60E3
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/5UnHlEhm50CtuwPcH8NrwNWIRVE.roa
Signing time: Thu 02 Jan 2025 17:50:04 +0000
ROA not before: Thu 02 Jan 2025 17:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50188
IP address blocks: 88.135.160.0/20 maxlen: 20
213.5.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:87:66:35:a9:c0:b4:a2:fb:41:a8:6f:6c:60:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Jan 2 17:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e549c7944866e740adbb03dc1fc36bc0d5884551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:fc:99:82:de:09:31:37:b7:7f:3a:f7:36:
9f:bc:8c:cb:65:0b:f2:6c:26:b4:25:3a:57:be:a7:
68:f1:2e:bb:1e:bc:79:a9:99:3b:03:8d:52:c1:f7:
b4:5e:28:aa:0e:3d:a7:7b:b9:08:94:ab:b9:3e:ab:
8a:5c:b8:79:b8:2c:8e:f3:f8:f3:04:4f:54:be:c0:
41:eb:dd:19:92:0b:63:2d:22:15:13:e7:85:29:0d:
1d:d3:da:1f:14:28:ab:50:96:e5:3b:22:7e:cf:e2:
7a:93:19:53:17:22:68:5d:22:c1:0a:08:c2:0f:b0:
25:5b:38:fd:73:0d:4c:19:fd:b1:aa:89:9e:23:78:
69:d5:cc:be:7e:a6:2a:cc:db:c3:cc:aa:43:3c:f5:
1c:9f:06:2a:43:08:dc:23:54:70:98:ce:4c:59:32:
32:41:dd:71:d4:51:70:69:74:d2:bc:de:da:bb:3b:
67:be:32:6d:5e:d6:f1:6f:de:29:2b:b1:01:3a:7a:
33:47:f2:b3:23:31:9a:a1:e0:59:c0:fc:78:49:ac:
2a:e3:c8:a3:c8:b2:32:1b:0d:3e:4f:53:01:3d:70:
68:ac:45:28:99:ca:55:bc:10:40:bf:f9:3e:2d:67:
02:d2:22:99:86:66:45:b3:91:a9:f0:9a:b9:25:7e:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:49:C7:94:48:66:E7:40:AD:BB:03:DC:1F:C3:6B:C0:D5:88:45:51
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/5UnHlEhm50CtuwPcH8NrwNWIRVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.160.0/20
213.5.248.0/21
Signature Algorithm: sha256WithRSAEncryption
38:85:fc:90:62:ac:5a:d2:09:6d:22:6b:ce:cf:1c:36:bd:26:
90:5e:a4:cb:ed:0e:01:13:d9:7c:50:e3:44:db:76:45:2d:19:
06:bc:2a:74:2d:62:22:2d:71:df:5f:15:11:9b:86:4a:bc:8d:
cf:3c:47:57:98:be:a8:22:19:0a:63:59:93:3e:0d:6b:bd:d5:
4d:e6:bf:c9:ae:b8:c5:eb:2a:e2:96:4a:b9:dd:8f:fa:bd:d5:
42:b0:fa:ef:3b:7d:74:4a:64:57:ae:35:1f:d6:6d:62:63:4c:
07:d8:99:ee:48:6d:da:9e:72:9d:d1:79:21:8b:e6:db:23:af:
2d:ce:71:b3:17:ab:f2:e8:a3:7d:d2:b1:f6:ce:54:bd:ea:73:
51:78:2e:56:44:6c:a1:05:2b:f6:11:d2:0e:05:79:44:82:b8:
57:62:a1:b8:23:a3:da:c5:46:75:09:3d:5b:13:c5:f3:8d:1f:
5c:17:21:81:9a:5b:81:11:0b:08:73:80:92:29:9b:4b:f6:60:
c2:71:15:6b:02:fa:95:39:96:68:7e:d1:b4:e0:d6:1d:6c:9d:
58:2c:38:b2:fc:b6:e8:0c:86:4c:f7:55:13:e2:7f:69:98:7f:
b4:d8:da:eb:4a:05:8f:00:e4:a9:54:d2:14:99:77:df:bb:ab:
7a:13:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net