Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/WpMT8suijybaT-axFHyfyzyaTBs.roa
File: WpMT8suijybaT-axFHyfyzyaTBs.roa (raw, json)
Hash identifier: I0+iXOVNpy84NiUe0arMh2Z225OGAdH9+ziecARxFHA=
Subject key identifier: 5A:93:13:F2:CB:A2:8F:26:DA:4F:E6:B1:14:7C:9F:CB:3C:9A:4C:1B
Certificate issuer: /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial: 019425FD887561C8712A58524D93E7E214F0
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/WpMT8suijybaT-axFHyfyzyaTBs.roa
Signing time: Thu 02 Jan 2025 07:49:20 +0000
ROA not before: Thu 02 Jan 2025 07:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210080
IP address blocks: 185.221.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:88:75:61:c8:71:2a:58:52:4d:93:e7:e2:14:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a9313f2cba28f26da4fe6b1147c9fcb3c9a4c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:83:73:9d:75:27:37:3c:b6:fe:5e:dc:d1:
3f:8b:8a:5d:e5:b4:95:55:52:a8:5d:00:8c:8f:c5:
e5:a1:de:c3:f5:37:72:46:c0:df:e0:12:ba:29:d4:
c7:2f:3b:9c:e5:56:10:c5:41:f2:0f:0d:15:91:d3:
d9:66:0f:0d:41:98:9d:4b:73:cc:08:a3:98:e2:c0:
99:dc:da:11:6b:ef:f9:e7:36:ce:65:fd:c4:5f:51:
48:ea:69:72:ad:09:a9:dd:64:39:21:7d:1a:18:3f:
5a:89:c2:8c:aa:1c:42:a3:a0:f0:d8:1e:48:21:8f:
b5:45:05:db:48:8b:b9:26:c7:b3:63:d2:93:0d:e6:
9d:38:58:4b:d4:d9:3a:a4:e3:d9:c0:e5:dc:00:b4:
16:77:af:d4:29:32:52:13:ca:38:fd:34:8c:24:dd:
cf:61:fd:e3:c1:d0:de:fa:68:4f:a4:f7:b9:28:c1:
09:55:6a:4c:f6:6a:a3:85:2e:60:d6:c6:15:ed:39:
45:bf:d7:42:7a:cb:b7:df:42:f1:71:59:4c:2f:cb:
96:16:3f:8e:5e:4c:a8:04:14:5c:19:b1:fb:19:7c:
24:de:47:d0:4b:3d:85:6c:aa:11:77:bb:f1:b9:7f:
f0:d3:4f:4d:49:f9:81:10:30:ec:1f:7e:6f:2c:9d:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:93:13:F2:CB:A2:8F:26:DA:4F:E6:B1:14:7C:9F:CB:3C:9A:4C:1B
X509v3 Authority Key Identifier:
keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/WpMT8suijybaT-axFHyfyzyaTBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:5b:c6:35:53:0c:6d:bd:d6:52:a2:f2:b1:53:eb:a0:3a:fb:
35:3c:94:e7:dd:a5:8f:e1:ef:9a:7b:eb:9c:e4:07:66:8b:1c:
c6:de:bc:4f:cf:ba:df:6c:24:f6:aa:06:92:7d:1e:44:59:cd:
7d:23:15:01:79:54:cf:32:a2:66:67:e1:8c:25:4b:d8:9c:b8:
3a:06:ef:70:ae:07:78:fe:5d:c9:be:1d:aa:78:f5:9a:5f:be:
6f:32:5d:b0:1a:28:e3:b0:a3:5a:72:5a:5d:18:bc:6f:a5:77:
4a:97:09:57:d2:e0:a5:ce:5b:df:89:80:60:d7:ff:cc:79:e1:
1b:73:87:d3:52:7c:b7:b8:36:ae:be:f5:e7:a2:74:ba:80:21:
ea:db:86:d8:aa:cb:f3:04:9b:10:5b:c9:7c:fb:2a:70:82:e3:
6a:5f:b2:c1:72:a6:28:91:43:39:3a:ad:94:05:7d:9f:0e:58:
72:22:fe:c4:79:0a:1e:8d:ec:7d:ba:ef:5f:dd:09:d5:d1:0e:
0c:5e:4d:da:0b:ef:e3:a4:db:9a:4d:3c:2e:f9:28:81:ce:16:
d0:a9:ae:39:c8:cd:04:5b:4d:5d:29:bb:4f:bc:5f:e8:72:f4:
83:e0:a2:93:ed:ec:92:de:95:0c:3d:67:96:45:79:b3:1f:2d:
0f:44:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:07 2025 by rpki-client on console.sobornost.net