Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/5dE_GC4RYmruYsEQCosEswqhvMw.roa
File: 5dE_GC4RYmruYsEQCosEswqhvMw.roa (raw, json)
Hash identifier: PKjCYy3vCzlACHchkXt5SVZDwsnRqMCgtgL6CJOnCUg=
Subject key identifier: E5:D1:3F:18:2E:11:62:6A:EE:62:C1:10:0A:8B:04:B3:0A:A1:BC:CC
Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Certificate serial: 019589DB5E3D7F6C48B40DB124BE601426E1
Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/5dE_GC4RYmruYsEQCosEswqhvMw.roa
Signing time: Wed 12 Mar 2025 10:16:49 +0000
ROA not before: Wed 12 Mar 2025 10:16:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31655
IP address blocks: 46.227.48.0/21 maxlen: 21
185.47.104.0/22 maxlen: 22
2a03:15c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:db:5e:3d:7f:6c:48:b4:0d:b1:24:be:60:14:26:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Validity
Not Before: Mar 12 10:16:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5d13f182e11626aee62c1100a8b04b30aa1bccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:cf:ae:a5:0e:75:3c:2b:82:1d:08:a3:ef:
bb:c3:4f:ea:19:e3:5f:86:93:60:fc:22:22:12:b2:
0e:21:e8:d5:6b:4a:1f:03:f3:4b:e4:4e:4e:45:ab:
7b:14:ce:3f:77:62:c2:c3:53:02:ad:51:b5:0e:e3:
a9:65:51:b4:8d:a7:5d:ca:32:64:ff:a9:b1:7b:5b:
8c:d1:12:16:5c:1b:9c:8f:94:e4:30:4e:d9:ae:5d:
30:64:ab:9d:00:f4:32:b5:47:50:c8:f7:9c:90:06:
8e:44:ee:ea:36:e7:30:66:e2:c2:4c:6a:d2:c1:6b:
4a:72:1a:44:e8:c1:d0:8e:64:24:30:3c:80:ba:2e:
92:04:e9:b2:c5:bf:51:1a:b4:67:be:21:99:fb:89:
e4:bd:0d:f2:25:25:56:8a:39:dc:0e:5a:cb:46:ea:
22:00:3a:ed:24:25:b2:03:fb:e7:44:fa:14:1f:e6:
a2:37:5f:cd:40:c5:51:69:95:96:ce:d1:71:ae:15:
ed:58:67:d3:27:b0:58:c1:4c:8d:a7:12:33:36:84:
5b:4f:8e:5b:45:85:e0:a8:29:ac:f5:1e:d9:84:67:
3f:c9:bd:b0:dd:27:5f:78:42:72:f4:eb:b3:70:b1:
d4:3a:e6:17:96:59:5a:c9:e6:9b:2b:be:7d:85:90:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:3F:18:2E:11:62:6A:EE:62:C1:10:0A:8B:04:B3:0A:A1:BC:CC
X509v3 Authority Key Identifier:
keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/5dE_GC4RYmruYsEQCosEswqhvMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.48.0/21
185.47.104.0/22
IPv6:
2a03:15c0::/32
Signature Algorithm: sha256WithRSAEncryption
5d:25:16:0d:b2:23:fb:34:be:f8:30:65:e1:2c:ef:5d:89:37:
d5:dc:36:85:00:bd:8a:c6:85:60:78:69:b2:ef:82:c1:56:25:
29:ec:ad:95:27:2a:67:91:68:cc:43:a3:f3:a9:14:5f:89:7a:
08:96:6f:4d:cf:38:19:e0:8c:12:43:4c:9a:17:95:44:9d:d7:
98:b7:93:af:11:43:e8:b2:a8:ba:57:07:e6:fd:01:af:7e:93:
f6:48:53:17:44:c0:0e:3f:dc:c2:00:98:20:c9:2a:41:9d:1b:
de:38:b7:83:e8:fa:f1:41:d6:1a:d4:26:6f:e5:a3:f5:4a:e9:
6b:3c:86:d2:f7:99:a8:be:15:d8:6c:d6:f1:39:1d:1d:8b:02:
f2:ae:16:2b:e7:a1:42:0a:2a:c9:8c:0e:38:38:84:26:bb:78:
e4:79:66:e4:ba:6a:3d:37:9b:73:f7:bf:10:ab:8d:9f:8a:b4:
dd:aa:25:72:80:70:2a:51:07:a7:93:5d:83:cc:e2:95:ca:b9:
77:b8:17:44:71:ad:f5:48:fc:c8:db:d8:8c:ff:5c:8f:e0:87:
54:a6:44:86:40:0a:c0:16:a2:26:97:83:5e:39:99:73:38:a0:
67:40:45:8f:74:ba:f9:20:7e:c0:ed:62:59:8f:0c:0a:a2:d3:
9e:08:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:49 2025 by rpki-client on console.sobornost.net