Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/z6n_jUG6I_xYjDJHeip0DRFjTRM.roa
File: z6n_jUG6I_xYjDJHeip0DRFjTRM.roa (raw, json)
Hash identifier: /Wm48sS3g9Z/4zp/4yyUdkHbex7iTx088gxRDh1F6/8=
Subject key identifier: CF:A9:FF:8D:41:BA:23:FC:58:8C:32:47:7A:2A:74:0D:11:63:4D:13
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019423D754D4F9F4A10BB873AA20B30748AA
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/z6n_jUG6I_xYjDJHeip0DRFjTRM.roa
Signing time: Wed 01 Jan 2025 21:48:21 +0000
ROA not before: Wed 01 Jan 2025 21:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201748
IP address blocks: 5.40.158.0/24 maxlen: 24
95.39.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:54:d4:f9:f4:a1:0b:b8:73:aa:20:b3:07:48:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 21:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa9ff8d41ba23fc588c32477a2a740d11634d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:91:c1:95:4f:5a:9e:fc:64:cd:80:3f:5c:
67:e6:0f:bc:a2:5a:c5:e7:94:3f:2a:a0:54:65:49:
a7:48:0b:77:12:92:11:83:8d:fa:20:c5:fa:31:16:
43:37:86:c3:8b:94:b8:ef:16:17:89:df:01:ef:7b:
b3:ea:7b:b9:c8:74:55:9d:fb:c3:4d:85:66:be:99:
72:58:3e:fe:a5:ce:cb:49:96:1c:71:06:e3:1e:c2:
52:46:07:a7:61:99:81:d4:b9:76:ed:8b:6d:78:32:
48:9a:89:a1:ff:ea:d8:62:51:11:a5:e8:17:eb:92:
27:e4:19:31:94:b3:d4:9e:75:de:4c:d9:67:08:87:
fa:58:b6:2e:12:8f:4f:dc:20:77:66:53:de:0c:0d:
ce:ae:c3:82:c5:d3:0c:ac:b6:a6:07:bf:b3:bb:78:
16:88:6d:40:a8:df:b1:db:48:79:d7:90:9f:cc:34:
d8:56:bb:ed:8f:04:14:42:be:0d:03:2f:a2:4d:0c:
e9:45:a9:6a:7e:ea:1c:e6:0f:be:7a:d5:28:a1:ea:
0a:55:bd:c0:62:57:b9:a8:06:79:91:d4:1a:fe:f7:
8c:f1:84:b1:e9:13:ab:eb:c3:9b:b6:16:46:25:ce:
fc:56:3e:83:0d:c9:29:b3:2a:f1:dd:49:20:cc:9f:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:FF:8D:41:BA:23:FC:58:8C:32:47:7A:2A:74:0D:11:63:4D:13
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/z6n_jUG6I_xYjDJHeip0DRFjTRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.40.158.0/24
95.39.17.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a9:81:25:98:6e:89:fb:36:96:04:78:45:05:cf:88:29:c7:
98:8a:03:15:4b:ea:fa:46:23:eb:9b:84:8b:55:b4:5f:dd:66:
a7:20:e7:77:e7:e7:32:b8:38:93:bf:69:24:a8:0c:c7:e1:4b:
71:aa:84:b3:73:44:b2:c4:b0:b3:11:eb:cc:51:71:c9:fa:c8:
e8:50:47:27:c6:a2:59:66:6d:2f:ef:2d:40:ac:4c:e7:52:b4:
e4:ff:e8:fe:51:76:25:5d:3b:00:82:c8:68:b7:1d:ab:2e:81:
fb:d9:b0:35:6f:4e:93:09:f3:d9:f7:ed:51:87:86:90:dd:a6:
73:9d:47:e3:5f:60:0d:af:dc:5f:aa:5f:15:33:a1:a8:90:e1:
da:c6:0f:b1:8d:31:ee:bd:9f:e0:53:7a:4a:f7:98:b0:e6:45:
67:9f:a1:8b:b6:00:e4:a3:d6:27:9b:7a:a7:8e:a6:a5:b0:2c:
5d:f9:e8:0c:f5:a4:2a:b2:ea:70:c9:4e:0a:dc:70:e9:fa:6d:
b6:0c:d1:f8:a8:c5:92:93:33:4d:7c:d1:54:47:48:b3:f8:5c:
8a:f8:6b:8d:38:3d:81:77:af:ba:02:57:0f:22:6f:86:7f:49:
33:c4:96:d3:3f:fa:67:32:f6:76:b9:6d:52:31:44:37:7b:9d:
b9:41:ec:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net