Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/WbzMJtvriwpBLgG099PPDIe8VG4.roa
File: WbzMJtvriwpBLgG099PPDIe8VG4.roa (raw, json)
Hash identifier: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=
Subject key identifier: 59:BC:CC:26:DB:EB:8B:0A:41:2E:01:B4:F7:D3:CF:0C:87:BC:54:6E
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 019427B4A3AC3C4B8FAFF4F9A45D1F6B9C89
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/WbzMJtvriwpBLgG099PPDIe8VG4.roa
Signing time: Thu 02 Jan 2025 15:48:57 +0000
ROA not before: Thu 02 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197889
IP address blocks: 85.119.8.0/21 maxlen: 21
185.223.16.0/23 maxlen: 23
185.223.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:a3:ac:3c:4b:8f:af:f4:f9:a4:5d:1f:6b:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jan 2 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59bccc26dbeb8b0a412e01b4f7d3cf0c87bc546e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:33:53:7c:53:04:1b:b5:bc:ef:6d:27:b8:
e7:e1:3b:af:bc:33:73:c4:69:7a:a2:bd:61:96:73:
93:61:8e:f6:e4:d4:f4:6f:cf:21:26:c5:5f:3d:72:
ce:b7:ee:59:ac:e8:26:6d:01:0f:b7:e6:af:7c:4e:
40:4a:6a:32:b1:7f:52:34:e0:9b:32:13:23:20:f4:
c5:0f:7a:ec:ae:9e:fe:e0:d3:7e:94:65:ee:e1:22:
79:b4:27:83:d7:fa:82:38:77:b8:3d:32:58:24:3e:
db:9b:dc:08:c5:c9:ef:d3:94:c6:c2:d1:fa:7b:3b:
cf:d6:27:c5:9d:f2:48:b7:e4:2d:62:bd:3c:04:9d:
c7:27:3a:7a:87:25:a5:25:a1:68:62:ae:0d:6b:73:
98:f8:d4:8e:74:ba:a5:29:28:3f:4e:54:5a:bc:c0:
4a:6a:0a:e1:3d:4a:2e:38:93:91:4b:50:0d:57:29:
89:d9:a0:13:21:47:02:5c:9f:37:c3:eb:d4:f9:c0:
a2:ac:44:de:34:6a:d4:5c:f8:42:74:5a:d0:d9:ca:
7b:c4:8e:58:19:b1:21:99:6f:02:e7:4b:a8:8e:66:
ae:da:1a:95:85:3d:fb:81:3b:8e:3d:6e:50:fa:4d:
0d:f8:d7:ab:be:17:46:27:2b:a1:38:7f:46:2f:55:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BC:CC:26:DB:EB:8B:0A:41:2E:01:B4:F7:D3:CF:0C:87:BC:54:6E
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/WbzMJtvriwpBLgG099PPDIe8VG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.8.0/21
185.223.16.0/22
Signature Algorithm: sha256WithRSAEncryption
d2:a2:f3:1d:7b:7c:ea:9d:a0:cb:ed:26:63:b1:69:aa:77:6f:
61:4a:48:6f:b6:69:cf:c3:a1:ae:c6:f1:b0:6b:46:5b:e6:f6:
4a:ef:c0:1d:c5:3e:ab:09:b1:35:8f:0f:90:90:9d:63:06:3f:
df:58:31:14:84:c8:4e:7b:3f:b8:28:4e:7e:c3:06:d9:6c:a4:
2c:d1:1b:b1:0d:cd:95:a3:b8:97:40:e1:d0:8d:10:f0:72:df:
62:07:1e:eb:2d:6b:7f:83:0c:78:31:f5:1f:c5:a3:d3:7d:d9:
a5:53:82:ff:74:e9:eb:32:9a:4c:9c:52:84:7a:7f:0e:a0:75:
c5:71:a7:8e:09:34:5e:3b:4a:8d:37:0e:7d:48:75:96:b4:37:
d1:4a:d8:99:f3:a2:76:03:19:07:dd:a3:96:4b:17:2a:4b:2d:
24:4a:ce:61:6c:7e:ec:3c:06:87:cc:00:3c:b8:72:24:44:31:
af:12:eb:06:79:4e:37:d4:b0:94:59:1c:f3:3c:fd:b5:02:2b:
d0:37:66:6c:30:2b:6a:d2:b1:84:b1:0c:41:ef:af:fc:be:5b:
63:ab:fa:fe:60:32:e8:ae:da:c4:98:5f:9e:60:1b:bc:70:ca:
b3:03:d9:a7:ed:e2:0f:ed:62:07:6d:0f:07:79:b5:21:7a:55:
c9:e9:4d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net