Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jO9a6nvZSwzICFQ_o1vKOps4rjU.roa
File: jO9a6nvZSwzICFQ_o1vKOps4rjU.roa (raw, json)
Hash identifier: ExArNhCEE9Eo4pcOrjxEUtZ9AwUmZfZ8TxQH06EWxcY=
Subject key identifier: 8C:EF:5A:EA:7B:D9:4B:0C:C8:08:54:3F:A3:5B:CA:3A:9B:38:AE:35
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0195039D6C88C62A09F5C1F55767E70BCEFF
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jO9a6nvZSwzICFQ_o1vKOps4rjU.roa
Signing time: Fri 14 Feb 2025 08:40:03 +0000
ROA not before: Fri 14 Feb 2025 08:40:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3267
IP address blocks: 217.107.75.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:03:9d:6c:88:c6:2a:09:f5:c1:f5:57:67:e7:0b:ce:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Feb 14 08:40:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cef5aea7bd94b0cc808543fa35bca3a9b38ae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:1e:4a:0c:e0:ef:da:a9:58:53:d8:0c:ec:
c2:2c:64:b3:dd:e9:68:ce:46:10:08:49:42:f9:5e:
f7:ef:48:44:fb:15:32:35:07:9c:8d:3b:60:75:4b:
7b:f6:b7:28:41:3e:87:ef:db:73:c9:4e:c2:f2:cf:
81:aa:1d:0a:dd:3e:e8:6b:0d:48:b2:b5:b5:a7:e3:
b8:c1:ea:df:cf:00:b9:9d:98:2a:62:9d:ad:35:c8:
15:a4:f2:5a:83:f7:2f:28:32:c5:33:9d:ab:8b:01:
76:60:61:dc:98:70:62:81:d0:ec:1a:ed:97:24:1d:
46:c0:ca:77:8c:70:57:74:57:b6:67:c3:7b:55:16:
f1:fb:b8:17:44:3e:fb:bb:30:77:db:cc:46:25:85:
a1:5f:fb:e7:c0:50:58:3f:dc:34:50:f5:45:e5:74:
35:4e:59:02:40:4d:d8:3d:3b:0d:5c:30:60:13:89:
38:0f:f3:3e:b6:8d:13:bc:37:a4:8c:2c:b2:35:3e:
a6:ac:58:b7:29:25:e5:fd:59:3f:1e:a2:81:49:b0:
0c:d6:89:e9:0c:eb:ee:4a:c2:66:d7:51:4f:5c:18:
e4:9f:40:7a:0b:df:79:f2:91:d3:fe:b7:bc:cd:fe:
0b:f0:f4:f1:70:ce:9f:03:a1:0c:f6:0d:5d:7c:b7:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EF:5A:EA:7B:D9:4B:0C:C8:08:54:3F:A3:5B:CA:3A:9B:38:AE:35
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/jO9a6nvZSwzICFQ_o1vKOps4rjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.107.75.0/25
Signature Algorithm: sha256WithRSAEncryption
04:4b:46:8f:bf:7d:79:76:e3:ee:12:c3:07:ce:82:15:60:c1:
4c:29:8d:cd:3d:73:57:e5:7f:e3:56:2d:51:9b:fb:98:16:89:
8d:15:1a:b4:4b:80:af:22:cc:0b:18:0f:54:e1:5d:ea:da:36:
9a:41:df:c3:cf:58:96:6e:ca:e1:d9:ef:49:96:8c:f9:55:22:
fe:a0:40:d8:58:f7:04:63:af:6a:d0:58:b0:0c:fa:13:23:1c:
c1:b1:f3:f2:54:78:b4:d7:de:52:cf:ca:d0:b5:e5:5a:8b:b4:
61:3e:6d:c0:57:21:80:c2:50:fe:61:bd:03:22:d7:f2:20:2d:
bd:ed:06:cf:00:8e:3b:62:67:ba:4b:9e:c2:de:b7:04:00:b0:
a8:92:f5:de:46:61:40:4f:76:59:90:a3:69:ab:18:d0:b7:76:
f1:60:c4:9d:1b:ed:7e:6c:33:d2:88:46:b3:19:76:cf:92:ac:
3b:d9:be:81:16:67:74:cf:28:0f:04:66:f4:01:61:10:22:3c:
73:a0:51:8e:63:4a:78:4a:83:1b:9f:fd:10:97:4e:af:29:40:
3c:ee:ff:4b:ad:69:44:7a:da:9b:1b:c2:74:c8:13:d4:c9:7a:
b9:1a:63:c3:59:8e:91:b5:18:f8:d7:1f:bc:1b:64:14:49:da:
ae:1e:be:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net