Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa
File: wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa (raw, json)
Hash identifier: NmuSbPbfuym67xH2QLuOVMqeZvLtav7Q7SRmwtYGojM=
Subject key identifier: C1:B4:3F:D0:CB:38:3E:96:E3:AC:08:96:E4:1B:07:DE:1D:CD:45:C0
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 0194206852626D63B037D4ECA65C6FCBD077
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa
Signing time: Wed 01 Jan 2025 05:48:15 +0000
ROA not before: Wed 01 Jan 2025 05:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197451
IP address blocks: 147.229.0.0/17 maxlen: 24
147.229.128.0/18 maxlen: 24
147.229.192.0/19 maxlen: 24
147.229.224.0/19 maxlen: 24
185.62.108.0/23 maxlen: 24
2001:67c:1220::/46 maxlen: 48
2a03:2e0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:52:62:6d:63:b0:37:d4:ec:a6:5c:6f:cb:d0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1b43fd0cb383e96e3ac0896e41b07de1dcd45c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:38:28:03:d1:23:f6:5f:72:74:a3:c1:5f:
44:fa:a2:cf:61:da:68:1f:58:6b:5a:27:db:ec:3d:
76:37:fa:87:90:ac:9c:60:20:05:60:f0:46:c8:db:
3f:03:15:71:86:af:32:12:70:06:73:50:73:f8:11:
8f:26:a0:94:72:72:05:31:76:38:f6:84:6b:d8:5a:
84:c8:15:e7:4d:e5:52:6e:90:df:de:91:7a:3d:61:
a1:82:a9:1e:a6:55:2e:a2:c4:a9:8b:3b:e8:c7:93:
06:c0:85:f1:c1:ea:40:43:c2:4f:d0:96:92:27:0b:
3c:62:27:f4:c5:07:3c:30:d5:e7:f3:a2:53:7a:29:
1c:00:48:38:4d:18:0e:ed:d0:da:1b:02:95:df:2a:
bf:18:6b:9a:d0:fc:c9:ce:c1:14:dc:9a:ef:13:3d:
4b:7c:f8:84:ec:58:8a:de:75:02:49:d8:40:9b:0c:
f3:06:18:9f:e9:cc:25:30:a6:ea:0c:b0:e3:90:16:
5d:0d:41:a1:fb:e5:53:ba:0f:e3:ce:3b:1a:86:bd:
b3:c1:c4:24:d2:11:27:f1:26:15:2f:68:6a:c1:6d:
78:eb:1a:af:dd:fa:1c:5b:83:e6:ea:3a:ac:0e:e1:
6c:1a:a9:e7:0e:85:bb:12:11:39:24:a6:e3:87:13:
9b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B4:3F:D0:CB:38:3E:96:E3:AC:08:96:E4:1B:07:DE:1D:CD:45:C0
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/wbQ_0Ms4PpbjrAiW5BsH3h3NRcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.229.0.0/16
185.62.108.0/23
IPv6:
2001:67c:1220::/46
2a03:2e0::/29
Signature Algorithm: sha256WithRSAEncryption
8c:53:f7:cf:46:0a:a5:cf:4c:71:2b:d9:17:c5:3b:0b:66:e3:
47:89:65:a6:e3:28:4f:d3:71:8c:29:2d:5f:98:f4:c3:ed:8d:
05:02:7b:10:f8:b0:c2:94:bf:67:38:ca:73:e5:d2:3f:11:42:
ed:31:d0:d2:ad:01:46:08:f1:7a:f3:18:45:45:85:97:59:3a:
8c:95:36:bb:10:c2:ca:c7:76:ae:51:75:44:e6:78:d1:9a:6f:
da:41:c2:fc:a1:99:2f:99:db:15:d1:34:28:76:5e:60:c5:31:
d4:5f:60:cc:28:44:69:83:e7:74:44:4c:3f:f2:6f:22:03:41:
4a:8c:c5:f0:f4:d7:d6:2b:88:9e:7d:5b:ee:69:83:76:f0:07:
21:f9:7e:f2:88:f8:ea:1a:55:85:68:56:f8:d3:b2:88:9e:36:
26:f1:59:66:b5:12:4c:62:71:57:f5:2c:7f:87:b3:14:cb:53:
52:82:c1:ff:38:b8:6c:58:93:04:60:3d:b5:40:6e:47:73:ab:
d3:d2:00:13:c2:96:49:51:2d:ea:1f:c8:4c:1b:2c:b1:b0:a1:
8d:41:8b:b9:c8:9a:cd:8a:2a:16:76:ba:6a:2b:2a:99:15:34:
5f:74:44:83:cb:3a:96:95:11:65:20:73:41:13:90:0c:b5:82:
e4:8c:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net