Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/W24XDFBHU-z4F9fb27SI8Ab4h34.roa
File: W24XDFBHU-z4F9fb27SI8Ab4h34.roa (raw, json)
Hash identifier: eJ7BiBTtN5rIeWnfO9LNx5jANEkgrD3RJ8frNLZ2xHk=
Subject key identifier: 5B:6E:17:0C:50:47:53:EC:F8:17:D7:DB:DB:B4:88:F0:06:F8:87:7E
Certificate issuer: /CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Certificate serial: 019421438F5BFBB3D1A88E0B457428A00F10
Authority key identifier: 25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/W24XDFBHU-z4F9fb27SI8Ab4h34.roa
Signing time: Wed 01 Jan 2025 09:47:43 +0000
ROA not before: Wed 01 Jan 2025 09:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204779
IP address blocks: 46.254.212.0/22 maxlen: 22
185.185.168.0/22 maxlen: 22
2a0b:5c80::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8f:5b:fb:b3:d1:a8:8e:0b:45:74:28:a0:0f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251f4224ffe893e9b837839aa0a68a00380f54c6
Validity
Not Before: Jan 1 09:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b6e170c504753ecf817d7dbdbb488f006f8877e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a0:b3:72:c1:74:76:70:76:71:14:a3:29:04:
21:fd:40:63:44:d1:d8:ba:03:a6:7c:7f:27:4f:4b:
e4:6d:43:1d:43:bb:c7:87:f9:89:92:7d:e9:ae:72:
63:00:ea:21:f0:f1:4d:47:bd:ed:74:82:b7:9e:e3:
fa:e7:6e:b7:18:f2:82:66:cd:86:b3:3f:a0:49:64:
61:8d:98:52:19:46:2d:e7:30:05:0e:d8:19:73:7a:
f9:fe:c6:3d:18:02:0f:23:99:55:d2:7b:15:5d:5d:
9a:c9:56:2b:49:ce:82:6b:de:31:1a:bd:c9:50:82:
20:db:00:36:f7:fe:f1:2f:50:6d:d3:ee:7c:0e:31:
67:f5:17:9a:1f:bd:00:a5:47:89:da:ff:85:01:23:
fc:5e:e1:c3:0f:ed:dd:28:91:11:03:4c:a1:65:66:
fe:26:83:ab:48:e3:71:ad:a7:04:11:63:e5:d1:c9:
90:6d:8a:f2:5e:a7:1e:88:3c:de:cb:07:a5:9d:e5:
13:eb:75:e0:97:2a:0b:2e:08:8e:d3:79:d8:5c:82:
71:46:60:1b:89:e0:16:2a:0d:07:43:27:41:28:64:
9e:c8:31:08:a1:25:67:88:f8:dc:ec:9a:98:39:49:
f8:ae:dd:f2:28:ff:c5:76:bd:89:74:68:f9:33:4e:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:17:0C:50:47:53:EC:F8:17:D7:DB:DB:B4:88:F0:06:F8:87:7E
X509v3 Authority Key Identifier:
keyid:25:1F:42:24:FF:E8:93:E9:B8:37:83:9A:A0:A6:8A:00:38:0F:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR9CJP_ok-m4N4OaoKaKADgPVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/W24XDFBHU-z4F9fb27SI8Ab4h34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/c0e651-85d1-4b32-8fc7-10c750c6e351/1/JR9CJP_ok-m4N4OaoKaKADgPVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.212.0/22
185.185.168.0/22
IPv6:
2a0b:5c80::/29
Signature Algorithm: sha256WithRSAEncryption
8f:3e:cd:1a:3b:95:30:78:dc:c4:71:73:96:c2:0c:b2:cf:70:
d6:3e:68:a0:d5:aa:d2:6f:22:cd:4e:54:a3:b7:13:85:35:52:
e6:f7:a7:f4:98:bf:3e:28:9c:81:37:18:b7:84:1b:35:9f:c3:
7c:d6:1f:8a:e8:85:2d:35:c7:d9:54:46:4f:d5:3e:56:d8:4f:
f3:69:2e:bf:ec:3b:f4:59:80:e8:55:64:c9:1d:bf:5c:ae:f4:
9f:68:bf:f1:94:a8:c8:28:c4:e6:13:7f:0c:71:3f:f3:2c:45:
e8:10:27:f7:da:30:c2:95:4f:2c:3f:67:91:c5:ec:50:05:10:
8f:5a:f5:cc:2f:3f:76:e4:24:bb:6c:f8:06:47:85:e5:de:30:
53:ff:f5:af:be:97:98:f9:10:69:b4:32:75:f0:87:63:6a:17:
37:e3:81:3d:e2:e5:53:54:74:66:0e:16:61:45:5f:3f:9c:2f:
06:fa:24:ca:23:f6:f4:8c:da:ae:93:08:95:0f:f0:93:3a:77:
ae:6a:c0:17:a3:6b:18:a5:25:82:9f:36:29:9d:ae:da:53:c6:
34:91:a9:08:0f:b3:8e:8d:19:99:b8:5f:d1:3b:ff:a9:97:70:
e1:d7:8b:5c:e5:af:1f:2a:04:86:b7:4b:0e:49:bd:1b:77:0e:
80:00:07:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net