Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/W_EWnDN7S-Lr4HAexwKFCibBunI.roa
File: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (raw, json)
Hash identifier: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=
Subject key identifier: 5B:F1:16:9C:33:7B:4B:E2:EB:E0:70:1E:C7:02:85:0A:26:C1:BA:72
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 019423D6A7A74EBE55CA0303E54206007D90
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/W_EWnDN7S-Lr4HAexwKFCibBunI.roa
Signing time: Wed 01 Jan 2025 21:47:37 +0000
ROA not before: Wed 01 Jan 2025 21:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206436
IP address blocks: 185.223.52.0/24 maxlen: 24
193.202.96.0/21 maxlen: 24
193.202.104.0/24 maxlen: 24
2a10:8580::/48 maxlen: 48
2a10:8580:1::/48 maxlen: 48
2a10:8581::/48 maxlen: 48
2a10:8581:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a7:a7:4e:be:55:ca:03:03:e5:42:06:00:7d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Jan 1 21:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bf1169c337b4be2ebe0701ec702850a26c1ba72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:89:67:54:e6:1e:05:16:a7:83:78:23:16:
48:ae:f4:e9:d7:7a:e2:2a:01:9c:c1:50:38:c7:8d:
ae:b4:dc:de:34:13:4d:e6:07:3f:d8:b6:67:1e:39:
40:8a:ab:12:d8:ea:59:9f:9d:e9:d5:bb:0f:77:43:
05:66:b3:6f:5d:f6:18:29:0e:34:60:38:bb:b5:33:
c5:db:5c:95:da:db:b3:22:50:72:2e:a1:68:e0:a7:
37:64:fc:09:ec:1d:b7:bf:a9:d3:d2:d1:b6:c2:b1:
11:a3:e6:4e:0e:5b:b1:91:4d:49:de:af:6e:ed:76:
1b:ff:d2:94:b3:bc:53:8c:c6:26:96:d5:2c:fa:0c:
68:1a:73:8d:7e:79:c3:be:c1:da:a0:dc:5b:2c:af:
0e:a5:8a:5e:dd:c6:e7:61:5d:0f:01:35:1d:82:d6:
12:47:a2:fd:fd:b0:29:11:41:9a:9d:ea:71:74:c8:
78:4f:e0:c6:de:1f:e8:9e:40:73:03:75:c8:4a:4d:
83:06:8d:a6:ad:16:61:46:d3:12:1c:bc:f6:c1:c1:
fe:03:bf:ea:85:6d:a9:76:ad:dd:c4:7c:a5:1f:9a:
ab:a8:46:47:e8:a2:ea:41:24:d8:a2:88:92:93:c6:
94:0d:35:f8:e9:b8:a3:36:5a:75:f9:04:b9:cb:9e:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:16:9C:33:7B:4B:E2:EB:E0:70:1E:C7:02:85:0A:26:C1:BA:72
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/W_EWnDN7S-Lr4HAexwKFCibBunI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.52.0/24
193.202.96.0-193.202.104.255
IPv6:
2a10:8580::/47
2a10:8581::/47
Signature Algorithm: sha256WithRSAEncryption
83:a0:7b:d2:30:7d:b3:91:e7:73:bd:26:5c:7e:f7:3b:9d:71:
44:96:84:71:93:5d:01:eb:06:f4:28:a9:ba:5a:9b:e8:4f:4f:
fd:9a:14:25:a4:ad:32:e2:a1:a8:07:6e:e5:3f:78:4c:7f:06:
7d:e6:01:0a:be:43:95:b6:9a:5a:f4:f2:0a:b3:d1:8c:b3:17:
48:9b:de:a9:96:55:b5:50:f8:f0:ca:29:76:02:08:56:3b:29:
22:5d:e9:ed:93:cf:25:d1:d3:2f:fb:2a:7d:4e:09:49:8a:26:
1b:b4:8c:cb:18:d8:06:b8:78:4a:fa:79:52:b8:f5:c6:4b:6b:
19:17:19:b2:c4:c2:7b:51:89:76:56:11:fb:52:d1:21:e4:03:
05:72:a3:78:26:2a:97:4e:aa:09:06:d0:9f:74:69:e9:c7:78:
4c:80:cd:b7:21:df:3d:8c:c0:89:7a:8a:b5:9c:15:da:6b:86:
8f:fe:30:d6:d0:2e:22:6b:99:e1:01:91:35:44:57:e6:3e:ba:
1b:22:a4:36:15:5b:4a:c3:94:dc:04:f0:77:82:5b:6e:6d:02:
96:33:f3:6e:89:91:ae:f9:4f:4e:52:18:05:af:73:68:0c:55:
41:cb:93:b3:ec:b8:fb:49:27:97:64:15:9c:95:3a:9c:c5:fb:
58:b8:3f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:29 2025 by rpki-client on console.sobornost.net