Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wDzexJPbmuXoTEUF9T28nMF6mio.roa
File: wDzexJPbmuXoTEUF9T28nMF6mio.roa (raw, json)
Hash identifier: fjGLTzQvNG3nbcT8P7SnuHvQjGewBX6Eu/zyAfDOMnU=
Subject key identifier: C0:3C:DE:C4:93:DB:9A:E5:E8:4C:45:05:F5:3D:BC:9C:C1:7A:9A:2A
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01962C74E287BDD84CA524664193980B61DC
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wDzexJPbmuXoTEUF9T28nMF6mio.roa
Signing time: Sun 13 Apr 2025 00:02:59 +0000
ROA not before: Sun 13 Apr 2025 00:02:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 147.185.196.0/24 maxlen: 24
193.168.202.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
207.244.208.0/24 maxlen: 24
207.244.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:74:e2:87:bd:d8:4c:a5:24:66:41:93:98:0b:61:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Apr 13 00:02:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c03cdec493db9ae5e84c4505f53dbc9cc17a9a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:8d:69:9b:b9:6d:2c:68:6a:36:eb:1d:fb:
69:9a:40:52:bc:ab:f0:d3:d5:d2:3d:dc:3f:83:85:
54:e0:04:a1:30:b7:dd:fa:a1:09:14:e2:e3:0f:60:
79:74:a1:85:2f:7e:af:52:b1:05:21:03:3e:fd:4b:
9b:2f:84:72:c6:89:1e:14:bd:53:c6:ce:15:51:58:
aa:3d:85:73:db:17:34:74:a1:26:83:7c:87:82:c5:
8c:a7:72:5b:94:88:33:e0:6e:0f:6f:c3:44:dd:59:
ae:c3:94:c0:c9:24:53:fa:b0:d2:c6:89:ef:24:cb:
02:73:2e:0e:4b:9a:7a:8b:28:79:30:de:77:da:61:
16:d0:9b:24:11:eb:dd:ce:3a:94:41:30:79:71:a4:
b3:4e:77:01:bd:67:7e:9c:6d:a8:24:9a:c5:00:28:
05:f6:90:b7:b7:9e:5b:43:8e:49:64:76:e2:af:50:
72:84:c0:a9:fb:6e:0e:ba:09:be:9d:2c:b3:1c:f6:
ee:d6:95:38:c4:d6:fe:7f:4a:d7:dd:f2:fe:3e:3d:
1d:78:99:2b:38:3e:a4:09:61:54:b5:38:fc:ff:6e:
93:f1:b6:69:b9:91:06:40:4f:ff:de:73:3a:70:23:
9a:c9:01:9a:94:e6:b5:d5:07:50:af:99:a5:ac:9a:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:DE:C4:93:DB:9A:E5:E8:4C:45:05:F5:3D:BC:9C:C1:7A:9A:2A
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/wDzexJPbmuXoTEUF9T28nMF6mio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.196.0/24
193.168.202.0/24
207.244.198.0/24
207.244.208.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:5d:c8:ec:a2:02:d9:c0:82:3c:d4:20:b9:ab:cd:e8:7b:09:
7c:ee:90:c5:fb:85:02:89:f0:fb:28:ac:a8:fb:3c:92:43:5e:
ad:7f:80:b3:c3:ae:a2:45:da:8d:8a:4f:98:90:e5:39:87:2a:
57:a8:f0:f2:79:f1:b4:10:6d:f9:25:a2:14:29:e4:c0:81:20:
07:ce:8f:8f:9f:8d:34:22:a4:98:94:7a:c8:53:2c:e2:c5:5c:
32:36:ba:15:76:a9:f2:94:af:9c:50:36:91:6b:6b:31:49:b9:
30:cc:e5:bf:84:c3:19:3a:e1:bb:ee:7c:fc:55:58:22:ca:38:
d3:32:1c:6e:6d:1f:bc:19:2d:fb:81:88:75:fe:88:8a:c7:14:
85:45:c3:8f:3c:f0:5b:ca:58:8e:98:44:19:60:e6:2a:72:33:
e2:c9:71:ef:a2:00:1d:fd:45:cb:1b:0f:af:a9:de:47:c9:09:
2c:38:d3:bb:f9:9a:94:0d:cb:f3:5e:f4:ac:95:b0:85:c7:aa:
79:2e:fa:6b:ec:8e:52:c8:3f:cb:f8:39:ca:48:20:fd:8d:13:
92:7b:0d:ed:ec:f2:88:52:d7:c2:e2:ac:0d:7f:ee:86:bc:25:
22:82:b6:ee:0f:51:48:12:3a:ac:80:8f:3b:1d:bb:49:13:8b:
6d:65:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:08 2025 by rpki-client on console.sobornost.net