Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/W5t6K8mhaeB1jcBRnZnKCObRLXo.roa
File: W5t6K8mhaeB1jcBRnZnKCObRLXo.roa (raw, json)
Hash identifier: vlPvYnrh67Sac6G89vl74L5sy1jyV/vOZ0tMCXQKGc4=
Subject key identifier: 5B:9B:7A:2B:C9:A1:69:E0:75:8D:C0:51:9D:99:CA:08:E6:D1:2D:7A
Certificate issuer: /CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Certificate serial: 01941F8C26E20C8FB27B0D868F4AE7F60A78
Authority key identifier: 7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/W5t6K8mhaeB1jcBRnZnKCObRLXo.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50628
IP address blocks: 178.208.0.0/19 maxlen: 19
185.173.68.0/22 maxlen: 22
185.194.156.0/22 maxlen: 22
2a04:3d80::/29 maxlen: 29
2a0b:3b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:26:e2:0c:8f:b2:7b:0d:86:8f:4a:e7:f6:0a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b9b7a2bc9a169e0758dc0519d99ca08e6d12d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:e0:76:aa:58:02:25:e5:e5:a4:c7:21:93:
3c:54:d7:a2:3f:03:7f:79:54:c9:19:a4:95:75:da:
75:ef:55:fc:1e:ee:24:de:5d:3e:84:6a:54:1c:62:
85:e2:b8:17:d0:35:fe:f5:d8:86:3f:14:71:8d:68:
bf:d1:d9:e7:ff:8e:51:4a:bf:63:1d:82:1a:e8:7e:
57:a6:32:94:b6:6d:1b:80:b1:66:ed:3c:5e:46:ea:
09:ef:b9:55:d0:40:e1:93:36:cb:83:6b:e8:f2:8f:
26:bc:5b:3a:05:11:02:cf:92:99:ec:d6:e6:8d:9d:
02:62:3f:11:21:47:64:b5:08:97:69:55:85:8b:11:
72:4d:cf:af:45:d9:72:20:28:53:43:b8:27:71:54:
52:fc:9b:8a:e7:f8:1b:80:ea:5c:75:f7:ac:2a:2a:
78:4d:c7:a1:98:88:76:4b:6e:f2:ae:ed:d9:50:43:
49:56:9a:03:7f:86:d9:ad:62:16:f2:18:e3:28:b0:
21:ae:89:af:2b:fa:55:60:38:ce:f3:e7:7f:99:2b:
8c:51:f8:c5:49:36:75:bc:2d:da:ba:09:5c:e2:46:
33:88:d2:95:8c:78:e5:f8:d1:00:b5:12:56:a5:4e:
3a:fd:14:37:d7:b5:c0:75:2a:12:4b:e6:94:1f:15:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9B:7A:2B:C9:A1:69:E0:75:8D:C0:51:9D:99:CA:08:E6:D1:2D:7A
X509v3 Authority Key Identifier:
keyid:7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/W5t6K8mhaeB1jcBRnZnKCObRLXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.0.0/19
185.173.68.0/22
185.194.156.0/22
IPv6:
2a04:3d80::/29
2a0b:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
18:ee:31:3b:11:34:87:5a:60:4f:47:29:78:b0:77:f7:7c:2d:
a0:79:da:87:46:9c:71:d9:11:c4:1a:0b:61:d7:16:01:c0:59:
14:43:41:8b:7a:3a:5c:82:ef:ec:37:02:6e:9e:c6:b4:0f:28:
96:54:62:c3:75:80:fc:29:71:db:ad:b8:89:93:a0:d0:fb:58:
59:9f:4d:45:e2:99:44:49:3f:2b:39:33:fe:bc:93:58:7f:d1:
9f:5b:6f:fc:41:c9:34:3d:4f:25:bd:80:21:2a:cf:ce:c8:de:
c4:82:6a:42:af:cd:bd:0d:7b:83:14:de:81:0a:1e:b5:06:86:
59:ee:8a:67:ed:11:6f:03:a4:74:a8:67:b8:ce:09:c4:40:13:
0b:a5:28:5f:f8:06:75:6e:f2:d7:5f:3b:59:1b:e3:74:8d:ad:
78:39:a0:ee:87:a9:db:72:cf:48:b5:0a:8d:dc:07:cc:39:33:
f4:88:7d:a4:93:00:46:54:a2:81:42:c7:38:a0:81:48:ea:09:
1f:fd:59:4f:51:40:fa:bd:f4:85:ce:e6:29:7f:a3:a4:ef:ef:
03:35:dc:7d:13:81:b3:7b:34:87:42:1b:4d:d8:da:aa:30:98:
d6:1d:11:79:ed:62:c3:af:60:a9:9c:d4:f3:92:b4:a6:df:ce:
36:0b:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net