Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OrdWNePRO-azuf-x7WJ0gNqkZc8.roa
File: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (raw, json)
Hash identifier: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=
Subject key identifier: 3A:B7:56:35:E3:D1:3B:E6:B3:B9:FF:B1:ED:62:74:80:DA:A4:65:CF
Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Certificate serial: 01942445150D5F7A7C4E6027E756FB36EEE0
Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OrdWNePRO-azuf-x7WJ0gNqkZc8.roa
Signing time: Wed 01 Jan 2025 23:48:14 +0000
ROA not before: Wed 01 Jan 2025 23:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197033
IP address blocks: 217.119.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:15:0d:5f:7a:7c:4e:60:27:e7:56:fb:36:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ab75635e3d13be6b3b9ffb1ed627480daa465cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:0c:ee:3b:de:a7:3c:dc:d6:ee:5c:db:71:
6c:64:ed:be:8e:a8:98:09:0f:21:b4:32:a3:82:a5:
4c:76:d7:c8:78:a4:8c:40:46:89:df:3e:8d:5a:eb:
7b:3e:4c:2d:1f:5a:96:73:e7:8c:7d:45:aa:29:dd:
40:f4:44:17:c5:f1:68:f8:f0:2f:e1:23:27:a6:9c:
af:69:35:d6:28:1c:03:b1:7f:c0:97:bf:b2:55:37:
24:2e:12:3b:53:e1:9c:d3:bf:e4:9c:bc:0a:ab:72:
71:21:d9:d5:9f:69:1f:56:ad:cb:db:e2:30:50:9f:
97:c4:eb:cc:4a:03:65:c6:01:c1:a6:c0:2c:3f:96:
de:f8:8d:08:82:d1:67:f1:93:b1:2c:32:77:c5:32:
67:a2:f4:23:e6:06:40:cd:38:6c:d9:52:a2:ec:76:
95:7e:1a:41:f7:1b:f6:4e:09:35:c2:bd:3f:6d:aa:
2e:12:75:68:79:5a:b6:81:27:d3:65:5e:69:07:58:
ee:b6:b7:fd:71:9d:b3:a5:95:0a:35:c6:09:8a:1e:
71:14:fd:b7:81:7d:39:e5:5f:0e:34:10:2b:a6:de:
50:6a:de:69:da:50:dc:f2:27:14:80:65:a0:47:5b:
eb:5c:39:60:3b:3d:4e:e3:ff:3b:2d:ff:57:a1:56:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:56:35:E3:D1:3B:E6:B3:B9:FF:B1:ED:62:74:80:DA:A4:65:CF
X509v3 Authority Key Identifier:
keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/OrdWNePRO-azuf-x7WJ0gNqkZc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.185.0/24
Signature Algorithm: sha256WithRSAEncryption
47:48:7e:ab:f2:00:81:9d:64:f3:6c:48:37:83:e0:5e:53:16:
22:d7:52:9b:b2:1c:69:72:e4:39:36:e3:50:f9:1a:4e:99:f2:
d2:ac:ac:46:2e:91:29:32:e9:ef:5d:9b:3a:fe:c7:63:88:ef:
3b:61:dd:74:22:88:9f:d8:63:b3:70:d2:bf:9f:8d:52:5f:65:
9b:3f:e3:f1:83:cf:ea:93:5c:e9:cf:be:b4:50:7a:43:ca:31:
19:2b:5f:a9:dd:28:fd:25:b5:d3:42:db:62:c7:21:97:46:44:
86:48:12:02:3b:e4:a9:52:9b:29:2f:28:3f:e1:b8:7c:3d:d5:
c0:0b:08:6a:2a:07:fa:81:66:52:e5:8d:be:20:70:11:70:62:
18:cb:20:a0:c9:df:49:e7:46:98:2f:ba:de:51:b8:34:89:7a:
8d:30:bb:6d:2b:9a:2d:2e:4d:76:56:8d:15:f8:24:9a:b2:59:
d0:c2:00:70:f0:a0:9b:76:36:9a:30:bc:8f:db:0b:d3:4a:03:
51:17:d9:a5:7f:c5:77:0d:37:3a:26:eb:9b:86:ff:68:b0:6b:
33:b6:4a:72:a4:69:7c:14:1b:d5:d5:a3:2d:09:3b:9d:0b:53:
3e:64:d7:48:5d:f5:a4:c7:c3:27:37:75:b2:53:3a:24:fc:80:
e2:12:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:15 2025 by rpki-client on console.sobornost.net