Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa
File: Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa (raw, json)
Hash identifier: Kx6Oc/JjYSTEsN+RCZ0T24iZupA82iqVacFfzuICYqY=
Subject key identifier: 59:B7:F7:4E:91:8F:5B:AF:E6:59:A1:BA:E9:7C:6D:31:44:E6:6F:99
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019424B398A1F2D5A4F8B371CDF333DCF398
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211796
IP address blocks: 91.188.248.0/24 maxlen: 24
91.188.249.0/24 maxlen: 24
91.202.244.0/24 maxlen: 24
2a0c:6ec0:1::/48 maxlen: 48
2a0c:6ec0:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:98:a1:f2:d5:a4:f8:b3:71:cd:f3:33:dc:f3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59b7f74e918f5bafe659a1bae97c6d3144e66f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:44:68:c6:29:52:ab:11:85:c0:12:6f:e8:44:
01:6e:36:02:b3:ec:fd:26:e6:d2:47:19:a0:d8:bc:
48:e7:c5:e1:8c:fe:78:a1:34:ff:7f:b2:1f:a1:4e:
50:e3:b4:29:47:73:42:e5:df:f6:e8:fc:eb:2a:17:
f1:ac:69:f2:aa:c7:e5:19:00:fa:89:b4:54:3f:05:
04:8d:6f:68:e5:88:1d:d7:7a:02:dc:fc:1e:d4:37:
72:bf:e4:44:76:65:47:ed:ae:c4:12:13:8d:ca:8a:
b7:0c:b1:ff:86:0f:2e:56:7e:38:b8:7f:99:1e:0e:
c1:1b:76:93:e9:c7:6b:df:95:d0:ee:ae:cc:b1:2b:
16:2c:bc:48:82:1f:02:8b:68:7e:73:44:2b:0e:9d:
57:94:cb:4f:05:a2:79:91:2c:db:b0:1d:a0:cf:a7:
ae:1b:79:ca:4d:5a:94:e5:47:a5:c7:8d:5e:59:bc:
2b:30:0c:21:9d:e7:bf:48:51:a9:cf:bc:2d:95:34:
5c:99:be:df:8c:88:69:59:af:9b:78:bd:db:15:e4:
3d:36:93:1f:69:be:97:fa:8e:b2:5b:ab:27:67:3c:
6a:60:15:78:ba:e9:e9:d7:82:f7:22:b3:93:61:31:
8a:9b:af:bb:c9:52:d0:45:e7:4a:1a:da:49:10:cd:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B7:F7:4E:91:8F:5B:AF:E6:59:A1:BA:E9:7C:6D:31:44:E6:6F:99
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/Wbf3TpGPW6_mWaG66XxtMUTmb5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.248.0/23
91.202.244.0/24
IPv6:
2a0c:6ec0:1::-2a0c:6ec0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
81:e0:22:fc:67:db:10:bd:16:7d:2f:6e:8b:65:f5:3c:64:4d:
de:48:97:e8:a3:65:2a:78:d1:3e:8b:cb:6a:e5:fa:3c:c5:54:
5e:d1:b6:36:f2:c8:87:be:5d:fc:45:03:53:cf:a8:2d:e5:65:
36:0f:2e:93:8b:29:0d:9f:03:8f:6b:f7:e7:e8:44:13:b4:c1:
c7:51:bf:88:f1:1e:c8:45:6d:2e:96:61:23:83:bb:36:36:7f:
2f:fb:aa:fe:fe:42:87:b0:af:11:8c:70:21:d4:2a:7e:38:c2:
5c:01:35:c7:3b:e8:e9:91:4b:0b:9d:41:a1:b6:32:97:2f:a8:
98:4c:ab:d9:8e:b1:21:62:9a:df:9a:f3:b7:f1:0c:56:3c:fa:
c9:d1:dd:74:ba:d9:fe:2a:38:57:0b:a3:66:7d:b6:d1:9e:8f:
dc:f9:d7:1e:37:7b:2e:e4:e2:e2:60:f8:ab:9c:96:ae:85:9e:
71:11:8e:f4:25:a8:b0:e1:97:7d:83:77:ce:70:3b:3a:53:a8:
68:cc:e3:68:19:39:b3:82:6d:1e:d4:57:28:ac:fd:9e:0b:d7:
c7:50:21:ea:d3:b8:e8:2b:a4:93:c2:9c:31:58:1b:24:28:90:
ab:65:6f:dd:1f:9b:3c:55:b8:d1:0e:84:ac:54:6e:9c:85:e9:
2e:e0:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:46 2025 by rpki-client on console.sobornost.net