Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/wN-88kHsfZoIQbMbBeQSvFTLUAA.roa
File: wN-88kHsfZoIQbMbBeQSvFTLUAA.roa (raw, json)
Hash identifier: TZn5hV31aDddpb82jvBnOx8ugm4e4LbJg3sHA8zL+QM=
Subject key identifier: C0:DF:BC:F2:41:EC:7D:9A:08:41:B3:1B:05:E4:12:BC:54:CB:50:00
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 019425FD57EA90147ADADF93EFACFA3B3383
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/wN-88kHsfZoIQbMbBeQSvFTLUAA.roa
Signing time: Thu 02 Jan 2025 07:49:07 +0000
ROA not before: Thu 02 Jan 2025 07:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60199
IP address blocks: 84.239.96.0/22 maxlen: 22
141.101.60.0/22 maxlen: 24
2a00:6900:10::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:57:ea:90:14:7a:da:df:93:ef:ac:fa:3b:33:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Jan 2 07:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0dfbcf241ec7d9a0841b31b05e412bc54cb5000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:b0:fe:8d:b1:2e:33:fb:04:fd:3e:96:7a:
ed:1e:4d:96:df:dc:83:bd:94:be:ad:45:d4:85:3a:
fa:11:39:de:a0:9b:c1:50:02:65:2d:00:72:28:f9:
6d:09:e0:a3:62:4e:e0:1a:c5:c1:b1:4b:65:30:35:
cf:ca:cf:e7:9e:37:cf:06:10:da:d3:3e:4b:44:9b:
33:28:df:be:ec:7d:7a:94:65:93:1c:84:e7:cf:81:
cb:a4:4c:05:90:f0:87:8f:b3:ff:dc:e0:4f:f2:cf:
ae:80:d9:a5:f2:62:9d:59:c8:43:f9:71:bf:86:35:
8a:7b:a1:ac:cb:6c:4f:b5:03:12:6a:6c:b2:d1:27:
93:28:b0:0d:33:58:f9:63:ea:f4:39:fa:a4:35:8e:
df:7a:17:c6:04:32:da:63:57:f7:68:df:e9:83:59:
3d:83:4d:d6:6b:c9:a5:fe:78:1b:83:2f:0b:92:bd:
18:14:f7:57:2b:8a:1e:17:43:d0:3f:8d:72:20:6b:
3d:99:a3:89:3b:40:22:23:da:a6:2f:f7:b2:4d:43:
4c:c1:c2:1c:8a:27:e8:35:b8:b4:00:bb:59:94:8f:
35:5a:57:84:35:2e:3c:e3:13:71:56:8a:62:87:8a:
7c:2b:bd:34:e4:4b:0b:27:5d:d4:ab:b3:20:7a:79:
94:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:BC:F2:41:EC:7D:9A:08:41:B3:1B:05:E4:12:BC:54:CB:50:00
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/wN-88kHsfZoIQbMbBeQSvFTLUAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.96.0/22
141.101.60.0/22
IPv6:
2a00:6900:10::/48
Signature Algorithm: sha256WithRSAEncryption
74:bd:b0:d0:1f:35:27:d9:ba:90:5d:1c:02:7e:eb:13:d7:52:
be:39:33:00:fe:23:30:b9:8e:59:2b:56:a8:f3:16:74:6f:dd:
6f:99:27:98:70:a0:a1:bb:70:2a:c5:b1:3f:fe:91:43:f8:af:
3b:ed:e0:4a:2b:46:aa:27:2c:66:75:89:89:40:01:8c:70:23:
82:41:b0:50:a6:3e:cd:fa:28:e5:56:fa:68:f3:d3:64:4f:9f:
4a:23:8e:f4:96:d5:6d:58:fc:b9:35:5f:99:ac:4d:15:b8:23:
41:17:8d:e9:c3:e9:a9:3a:87:b7:1d:99:a5:8e:27:76:8b:c9:
12:f9:08:af:de:53:6b:90:06:2d:d7:8a:41:b9:33:a0:dd:05:
84:55:18:c2:d0:61:13:a8:f2:1c:65:fb:42:d8:66:6b:f9:8d:
cf:30:2b:a6:7b:3d:5e:80:f6:26:23:00:54:ac:2c:4c:e6:51:
92:8a:75:33:7b:4a:bf:dd:3b:b7:41:e7:37:49:55:db:a4:ee:
39:7c:f4:84:c2:39:4c:d7:f3:7b:52:04:97:e2:7d:a5:fd:54:
59:96:d0:12:f4:eb:5e:62:36:c5:50:96:03:bb:ec:a7:b3:f3:
63:f9:64:55:a1:a8:56:13:e0:a4:5e:6c:4f:c3:65:3c:d2:6a:
12:32:06:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net