Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/Wka8U3x86jnATnb9jP1IM9JUg7Q.roa
File: Wka8U3x86jnATnb9jP1IM9JUg7Q.roa (raw, json)
Hash identifier: U3QbT6zi/lWoOslxKHpAgFLF1TaLlii47IIoTKw4FTY=
Subject key identifier: 5A:46:BC:53:7C:7C:EA:39:C0:4E:76:FD:8C:FD:48:33:D2:54:83:B4
Certificate issuer: /CN=822b30d89b1bcff699f641f88026942d16a72bcc
Certificate serial: 01942143B7EB85FD00CD47AA21050AC20AF4
Authority key identifier: 82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/Wka8U3x86jnATnb9jP1IM9JUg7Q.roa
Signing time: Wed 01 Jan 2025 09:47:53 +0000
ROA not before: Wed 01 Jan 2025 09:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3243
IP address blocks: 2.80.0.0/14 maxlen: 24
37.189.0.0/16 maxlen: 24
81.193.0.0/16 maxlen: 24
82.154.0.0/15 maxlen: 24
85.240.0.0/13 maxlen: 24
144.64.0.0/16 maxlen: 24
168.182.128.0/17 maxlen: 24
176.78.0.0/15 maxlen: 24
185.2.84.0/22 maxlen: 24
188.80.0.0/14 maxlen: 24
188.250.0.0/15 maxlen: 24
194.65.0.0/16 maxlen: 24
198.56.128.0/17 maxlen: 24
212.55.128.0/19 maxlen: 24
213.13.0.0/16 maxlen: 24
2001:8a0::/32 maxlen: 32
2001:8a0:4000::/34 maxlen: 34
2001:8a0:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b7:eb:85:fd:00:cd:47:aa:21:05:0a:c2:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822b30d89b1bcff699f641f88026942d16a72bcc
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a46bc537c7cea39c04e76fd8cfd4833d25483b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:ef:64:7c:5c:67:18:3b:52:4f:17:4d:a1:
2c:1f:a7:4c:b0:2c:ed:4f:bb:42:f0:da:26:ee:59:
0c:0e:8f:b1:d1:76:c5:85:d3:28:04:c9:0d:0e:c2:
11:85:de:02:62:5f:d1:5b:2c:70:38:97:8d:cc:ba:
b4:bc:c1:fc:2d:c5:3d:ab:fc:c4:9b:ce:11:0f:44:
a7:a6:25:a8:12:11:28:cb:bf:6d:14:3f:8c:7b:8b:
15:d4:71:91:2b:b4:41:87:97:d7:26:f3:0e:00:2c:
e3:99:49:f2:fe:77:ac:04:6c:b0:a6:de:d7:37:9c:
b9:c2:ba:ef:08:e0:cf:06:93:9b:cd:d0:e4:9c:5d:
7f:f5:44:04:5a:4f:23:04:f1:45:31:e0:d4:ae:14:
89:ac:b8:1a:0b:2c:dd:b1:f1:a0:79:40:da:6a:dc:
be:59:56:78:78:8d:4e:86:71:57:b4:95:05:61:c8:
1d:d1:8d:d7:e7:96:8d:8f:1d:49:d2:fb:92:49:1c:
78:23:c0:4d:78:34:92:48:3a:a3:43:85:30:73:7e:
fa:12:86:1b:da:d5:a0:c2:3c:c3:9e:00:93:46:0f:
ed:69:4c:ad:21:f9:c7:7a:fb:4f:a9:87:cf:36:8b:
be:7b:6a:5b:36:df:11:08:09:9e:fc:33:0c:99:b0:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:46:BC:53:7C:7C:EA:39:C0:4E:76:FD:8C:FD:48:33:D2:54:83:B4
X509v3 Authority Key Identifier:
keyid:82:2B:30:D8:9B:1B:CF:F6:99:F6:41:F8:80:26:94:2D:16:A7:2B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gisw2Jsbz_aZ9kH4gCaULRanK8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/Wka8U3x86jnATnb9jP1IM9JUg7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e68770-edf2-4358-b821-914d5dc5197f/1/gisw2Jsbz_aZ9kH4gCaULRanK8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.80.0.0/14
37.189.0.0/16
81.193.0.0/16
82.154.0.0/15
85.240.0.0/13
144.64.0.0/16
168.182.128.0/17
176.78.0.0/15
185.2.84.0/22
188.80.0.0/14
188.250.0.0/15
194.65.0.0/16
198.56.128.0/17
212.55.128.0/19
213.13.0.0/16
IPv6:
2001:8a0::/32
Signature Algorithm: sha256WithRSAEncryption
79:a1:ee:98:fc:2c:38:d7:b6:04:6a:18:71:b4:58:95:3d:81:
74:95:31:68:0e:61:ee:5a:69:48:e8:79:7e:86:89:e6:56:18:
fe:f6:b7:4f:1a:46:fe:36:30:ec:8c:47:61:5b:e1:26:eb:29:
0c:31:b1:3e:31:21:90:52:51:c5:ef:6b:9b:02:ec:b6:f6:b4:
4e:4f:e7:f0:d8:b1:4e:9b:0b:38:3c:bb:dd:75:fd:af:14:d7:
c9:a4:50:0e:8e:da:e3:04:9b:06:17:e7:1f:1b:de:34:93:f0:
0d:73:42:e9:16:6e:75:bb:19:cc:f5:28:5b:74:04:c2:bc:e3:
af:26:66:68:67:37:e0:28:53:0f:a9:61:c6:31:7f:3e:cf:44:
74:95:86:b2:d7:04:f2:66:bc:aa:4a:c1:15:96:30:fd:52:54:
d3:e3:24:c7:50:76:bc:14:e1:c4:f4:35:cb:22:1e:df:0e:32:
fd:8c:2f:ec:6c:4b:2a:bb:e4:6f:ea:68:dc:e4:b8:90:6e:66:
87:70:9f:63:2d:c3:a2:20:f2:48:57:8d:b3:b6:74:e3:d3:dc:
95:6b:36:e3:4a:20:92:f5:e0:43:91:80:b4:b3:46:7a:bc:a4:
2b:2e:6f:f8:52:7f:43:c5:35:ea:a5:66:b7:d7:91:7c:17:36:
13:63:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net