Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/WBWNPZAIG5TxeFXlAVS083RLBkk.roa
File: WBWNPZAIG5TxeFXlAVS083RLBkk.roa (raw, json)
Hash identifier: qjzS4SOpKRY0Euyn5aPWAnwBT2wsSH59WxJEL/JtBjg=
Subject key identifier: 58:15:8D:3D:90:08:1B:94:F1:78:55:E5:01:54:B4:F3:74:4B:06:49
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019425FDA85F4E086FE88C6F937222DAE86B
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/WBWNPZAIG5TxeFXlAVS083RLBkk.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61177
IP address blocks: 185.16.96.0/24 maxlen: 24
185.16.97.0/24 maxlen: 24
185.16.98.0/24 maxlen: 24
185.16.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a8:5f:4e:08:6f:e8:8c:6f:93:72:22:da:e8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58158d3d90081b94f17855e50154b4f3744b0649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:c0:fb:9c:29:11:13:60:39:1d:fa:53:cf:
af:c1:f0:5b:ba:83:f4:78:32:61:87:83:f4:91:2d:
5d:5d:3b:85:85:59:3e:0f:bd:05:09:89:1b:07:ff:
21:76:0a:e6:99:9e:1e:bc:ef:a0:78:11:d0:dd:96:
fa:32:22:77:d7:5b:ac:ed:b8:ea:70:df:23:76:26:
8c:84:4b:84:c4:51:2c:eb:ea:e5:e4:fb:a5:e3:da:
1e:8d:99:88:50:5f:4e:a9:53:06:69:44:20:c2:ce:
04:7f:5c:58:49:65:16:a8:90:60:06:b6:4d:9a:55:
35:d3:f9:21:5f:e6:77:23:0f:2a:0a:67:5c:3e:1f:
dc:ca:1e:e4:c3:e9:90:3f:6f:bf:d6:65:ce:ca:d3:
aa:cc:25:91:6d:a5:1c:aa:b2:5e:32:57:85:ad:02:
26:58:5a:82:ee:a9:33:55:f0:68:b2:e7:74:34:c4:
4a:b8:95:0b:41:35:f6:ca:0e:55:93:54:4e:a5:1c:
6e:f2:ed:df:44:33:fc:b0:84:e4:0a:ba:1d:47:ac:
0e:5d:1b:59:3b:77:64:1f:f1:af:48:09:73:ef:fa:
53:1f:2d:b4:c2:7f:c8:7e:b1:ab:d6:a4:14:5a:77:
c2:3f:fc:d1:16:52:dd:e4:41:74:b7:d6:e0:2d:d5:
05:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:8D:3D:90:08:1B:94:F1:78:55:E5:01:54:B4:F3:74:4B:06:49
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/WBWNPZAIG5TxeFXlAVS083RLBkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:91:30:7e:e3:18:34:89:6c:7c:2e:2e:d5:48:71:f9:fe:8d:
ba:ae:17:ed:07:03:e1:84:3a:73:ac:18:34:e7:4c:1f:f5:0f:
c1:38:1c:55:62:3d:17:e0:b6:eb:cb:8a:0a:36:12:6b:ae:d1:
2e:dd:13:3e:cd:da:be:59:03:69:6f:87:f3:b2:6c:8f:32:64:
93:91:fa:5c:96:f0:f5:fc:3a:42:83:05:55:84:2d:3a:de:bf:
cb:0b:6e:7e:0b:05:72:f9:c9:79:06:5d:9e:69:e1:bc:fc:39:
24:8b:da:40:ff:d9:66:08:39:d6:60:98:f2:5b:6c:98:e6:dd:
ec:b7:98:f9:1b:f8:40:fe:25:8a:2f:2f:52:38:f6:f9:e5:78:
f3:b9:13:38:93:3b:95:dc:a2:e3:95:79:9a:95:ef:0c:46:50:
91:74:39:28:db:a3:0d:86:33:ba:80:9e:ee:a5:eb:63:fa:79:
5e:70:b6:ff:2e:81:18:b9:f7:ce:85:c7:cc:22:d2:93:aa:88:
10:9c:2a:71:47:55:33:0e:f8:15:b8:65:5e:4a:49:ae:8e:aa:
ae:47:bf:40:83:6e:71:08:0f:81:18:bd:91:e0:b5:8d:3d:4c:
9c:ab:09:bc:dc:e8:f8:6a:4a:e2:d4:55:89:b8:32:f3:cc:08:
f8:b9:d8:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ahfTghv6Ixvk3Ii2uhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZWIwYWVjNjM5NDlmNDEyNWM3M2FhNjE3N2VhMGI3MjFk
NTI3YmIwHhcNMjUwMTAyMDc0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE1OGQzZDkwMDgxYjk0ZjE3ODU1ZTUwMTU0YjRmMzc0NGIwNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDTA+5wpERNgOR36U8+vwfBbuoP0
eDJhh4P0kS1dXTuFhVk+D70FCYkbB/8hdgrmmZ4evO+geBHQ3Zb6MiJ311us7bjq
cN8jdiaMhEuExFEs6+rl5Pul49oejZmIUF9OqVMGaUQgws4Ef1xYSWUWqJBgBrZN
mlU10/khX+Z3Iw8qCmdcPh/cyh7kw+mQP2+/1mXOytOqzCWRbaUcqrJeMleFrQIm
WFqC7qkzVfBosud0NMRKuJULQTX2yg5Vk1ROpRxu8u3fRDP8sITkCrodR6wOXRtZ
O3dkH/GvSAlz7/pTHy20wn/IfrGr1qQUWnfCP/zRFlLd5EF0t9bgLdUFTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgVjT2QCBuU8XhV5QFUtPN0SwZJMB8GA1UdIwQY
MBaAFH7rCuxjlJ9BJcc6phd+oLch1Se7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMt
ZDI2ZDdkNGMyNTA1LzEvV0JXTlBaQUlHNVR4ZUZYbEFWUzA4M1JMQmtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMtZDI2ZDdkNGMyNTA1
LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRBgMA0G
CSqGSIb3DQEBCwUAA4IBAQBPkTB+4xg0iWx8Li7VSHH5/o26rhftBwPhhDpzrBg0
50wf9Q/BOBxVYj0X4Lbry4oKNhJrrtEu3RM+zdq+WQNpb4fzsmyPMmSTkfpclvD1
/DpCgwVVhC063r/LC25+CwVy+cl5Bl2eaeG8/Dkki9pA/9lmCDnWYJjyW2yY5t3s
t5j5G/hA/iWKLy9SOPb55XjzuRM4kzuV3KLjlXmale8MRlCRdDko26MNhjO6gJ7u
petj+nlecLb/LoEYuffOhcfMItKTqogQnCpxR1UzDvgVuGVeSkmujqquR79Ag25x
CA+BGL2R4LWNPUycqwm83Oj4akri1FWJuDLzzAj4udgc
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net