Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/WFi05y69wJK8xYZ7djgxRMe4JdI.roa
File: WFi05y69wJK8xYZ7djgxRMe4JdI.roa (raw, json)
Hash identifier: 38NfaEez2rHkQbLDVIDAczBWslMXi/gwh/We3R8xbaw=
Subject key identifier: 58:58:B4:E7:2E:BD:C0:92:BC:C5:86:7B:76:38:31:44:C7:B8:25:D2
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 019427B53DEC651E96FA491C0E87A0115C51
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/WFi05y69wJK8xYZ7djgxRMe4JdI.roa
Signing time: Thu 02 Jan 2025 15:49:36 +0000
ROA not before: Thu 02 Jan 2025 15:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44180
IP address blocks: 46.227.88.0/21 maxlen: 24
185.98.56.0/22 maxlen: 24
185.144.204.0/22 maxlen: 24
185.146.196.0/22 maxlen: 24
193.34.116.0/22 maxlen: 24
2a0d:9100::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:3d:ec:65:1e:96:fa:49:1c:0e:87:a0:11:5c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Jan 2 15:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5858b4e72ebdc092bcc5867b76383144c7b825d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:53:97:c6:06:a5:0e:13:43:62:4f:03:da:
cf:0e:f3:73:43:d1:19:4c:dc:eb:6f:0d:ef:92:1d:
15:a9:16:cd:44:33:08:79:30:41:07:67:48:31:f1:
db:ce:bd:33:46:b3:0e:ce:61:08:ec:37:92:4b:f5:
ea:69:59:e5:a0:36:95:38:6d:7e:5d:8b:fa:cc:a3:
58:51:a9:d9:42:84:cc:4d:7c:04:f7:e1:c0:64:f4:
84:85:a2:af:4a:67:e7:7e:19:c9:28:c6:ba:23:45:
58:48:28:77:0a:60:30:5d:58:70:01:b7:db:ca:49:
d9:87:f2:05:53:43:bd:16:ee:f8:16:a4:41:eb:15:
96:52:c9:d5:f4:e8:a5:33:d5:9f:d1:e7:e0:86:6d:
c0:0a:4c:2d:b2:8b:d8:78:0c:01:56:58:26:80:c3:
31:6e:1d:57:3b:51:9c:0a:45:21:a8:87:3c:4c:5b:
6b:62:c2:10:36:24:36:67:61:ef:37:bb:52:3e:db:
31:6a:75:29:71:95:e0:88:53:01:c8:2d:c9:af:c0:
b0:10:79:a5:69:99:94:b0:73:b1:3e:0e:83:4c:60:
c1:c2:03:e0:da:07:13:84:96:ed:3a:6a:52:50:c3:
a0:54:cb:27:54:38:15:d3:39:2a:9b:b0:b4:79:4e:
3a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:58:B4:E7:2E:BD:C0:92:BC:C5:86:7B:76:38:31:44:C7:B8:25:D2
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/WFi05y69wJK8xYZ7djgxRMe4JdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.88.0/21
185.98.56.0/22
185.144.204.0/22
185.146.196.0/22
193.34.116.0/22
IPv6:
2a0d:9100::/32
Signature Algorithm: sha256WithRSAEncryption
55:9d:b7:55:4f:5e:82:e4:57:68:0c:8f:b0:0d:ac:04:ba:4b:
fd:cf:b2:ff:6d:4b:93:2e:7d:a1:a4:e5:1b:d0:79:a8:6f:54:
9a:03:81:92:d4:27:67:ec:16:6f:28:10:7d:6c:55:b5:c4:88:
1a:9b:47:9f:4a:99:94:eb:04:d5:80:b0:e3:06:31:2e:cf:aa:
b4:5c:1e:f2:68:01:c1:ab:f9:ba:11:08:b7:e8:60:65:61:41:
2c:56:70:56:65:04:7f:0d:21:fd:b7:e3:52:06:50:7f:b9:71:
4e:5a:55:df:2b:17:dd:17:19:8f:4e:f0:84:83:ef:4e:4a:85:
1e:24:af:56:d8:14:4c:58:94:31:9e:cd:fe:99:e4:8f:11:2f:
1c:c1:bd:cb:41:e8:38:46:bb:2b:08:c5:e3:9a:a3:5b:15:05:
45:7a:ae:40:47:48:bb:4f:bd:46:75:f8:c3:89:de:cc:53:50:
f0:59:7f:90:e5:cb:8c:3b:c3:6b:25:b9:bb:7f:0d:38:54:68:
9d:65:7b:f4:d1:5b:2f:5a:10:07:4f:1e:3c:db:5f:f0:23:9d:
e1:9b:3b:54:34:59:51:0a:8a:da:65:00:5b:87:76:de:38:13:
01:f7:f4:17:fb:25:ae:50:35:ee:6b:2c:67:14:dc:74:58:a1:
46:c2:63:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:10 2025 by rpki-client on console.sobornost.net