Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/W5W8H6uR-lCCEmn3v-XsPLRNVss.roa
File: W5W8H6uR-lCCEmn3v-XsPLRNVss.roa (raw, json)
Hash identifier: MqFZSzbOqhNyXJIgrbDDE4K1XPvGby9AbWHLANkDs8A=
Subject key identifier: 5B:95:BC:1F:AB:91:FA:50:82:12:69:F7:BF:E5:EC:3C:B4:4D:56:CB
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019420D64B5710A15B38A09ECA9D4A1484B6
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/W5W8H6uR-lCCEmn3v-XsPLRNVss.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41046
IP address blocks: 77.242.80.0/20 maxlen: 20
81.200.48.0/20 maxlen: 20
81.200.48.0/21 maxlen: 21
81.200.56.0/21 maxlen: 21
82.114.192.0/19 maxlen: 19
178.72.192.0/18 maxlen: 18
178.72.192.0/19 maxlen: 19
178.72.224.0/19 maxlen: 19
2a07:b5c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4b:57:10:a1:5b:38:a0:9e:ca:9d:4a:14:84:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b95bc1fab91fa50821269f7bfe5ec3cb44d56cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:af:f2:0c:24:5c:e4:d0:2b:bf:90:7c:29:
3e:10:da:9b:83:59:6c:47:ba:2f:d5:bb:bf:2d:de:
f5:76:92:00:6f:5c:c9:86:ae:14:2b:ef:ac:9e:a0:
4b:8b:58:a1:bf:05:0c:e7:02:ba:ee:ce:a6:89:0a:
73:44:48:7e:6d:98:69:14:df:a5:05:a6:fe:34:d9:
70:aa:79:a2:29:8c:9b:72:dc:95:8d:7b:99:3f:3c:
46:de:fc:01:f1:d2:c2:fd:55:d5:fa:7c:44:36:90:
8c:59:9a:e8:89:8b:73:fc:cf:76:71:b5:19:3e:0f:
20:62:93:ee:7f:e3:34:db:6c:f1:60:ac:8a:5d:67:
64:18:e6:18:d3:b4:b5:d4:2b:b4:90:d0:77:04:62:
80:ec:bd:7d:36:a2:cc:b0:19:fb:3b:d2:75:f9:c0:
7a:ba:ab:bb:8a:f5:0d:df:27:46:e5:19:b6:e6:48:
73:a0:fa:1c:84:c1:49:cf:b8:ba:b2:11:32:14:ca:
cf:43:2e:07:ba:e8:f3:8c:fc:46:80:eb:24:cf:a5:
aa:cd:d7:0a:68:fa:c9:13:e3:d8:04:d1:4d:fc:84:
40:13:a6:83:67:95:22:9a:bc:d2:35:72:b9:f3:f8:
76:e4:60:d9:32:a7:b3:e8:86:d9:36:dd:d7:48:b2:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:BC:1F:AB:91:FA:50:82:12:69:F7:BF:E5:EC:3C:B4:4D:56:CB
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/W5W8H6uR-lCCEmn3v-XsPLRNVss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.80.0/20
81.200.48.0/20
82.114.192.0/19
178.72.192.0/18
IPv6:
2a07:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:18:19:b3:a0:8e:36:b3:4b:6d:85:fa:f5:34:8f:07:7f:41:
05:00:79:c1:5f:56:44:97:8d:7d:3a:cb:8d:f0:61:90:cd:ba:
bb:9f:22:55:f7:9a:4e:43:a4:9a:26:ac:8e:e4:a1:18:61:b3:
db:cc:7c:e5:ef:7e:4d:96:7a:f9:b6:c7:ed:7b:3a:60:73:08:
78:f3:cf:cd:12:bc:98:a8:b8:4b:e2:07:34:ca:6b:82:33:75:
a8:ba:3f:54:34:c9:e5:a4:cb:25:90:5f:89:de:48:a2:bd:7d:
45:07:c7:3e:42:73:e8:4e:14:be:40:d3:bd:6a:2a:7b:43:d2:
9d:6c:a6:8a:d0:ca:f0:6f:25:f9:ba:25:14:b6:33:29:2d:d7:
6e:35:bd:da:dc:02:4f:88:d3:29:6b:68:4c:04:56:56:25:67:
a2:7c:ec:11:ae:22:cf:8e:fb:45:36:e6:c6:db:2e:51:6f:78:
da:1a:eb:a2:08:c0:45:2a:21:26:2a:9b:bd:47:81:b6:9a:0b:
b9:74:00:34:6a:9e:36:a6:f4:84:43:92:b4:4f:d1:5e:27:70:
16:51:4d:02:3c:08:f0:a2:c7:1f:e3:69:4a:bb:35:a4:e5:1a:
7d:42:46:1e:dd:c2:e8:f3:95:cc:f6:45:3f:a7:3a:c5:bb:1b:
40:c2:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net