Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/Wi8TeX6HlCf6UscTIz-eiQunz20.roa
File: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (raw, json)
Hash identifier: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=
Subject key identifier: 5A:2F:13:79:7E:87:94:27:FA:52:C7:13:23:3F:9E:89:0B:A7:CF:6D
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 01942369330A6D02E8908E16E941E3D33AB4
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/Wi8TeX6HlCf6UscTIz-eiQunz20.roa
Signing time: Wed 01 Jan 2025 19:48:04 +0000
ROA not before: Wed 01 Jan 2025 19:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12861
IP address blocks: 91.237.216.0/23 maxlen: 24
212.29.64.0/24 maxlen: 24
212.29.66.0/24 maxlen: 24
212.29.67.0/24 maxlen: 24
212.29.68.0/24 maxlen: 24
212.29.69.0/24 maxlen: 24
212.29.70.0/24 maxlen: 24
212.29.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:33:0a:6d:02:e8:90:8e:16:e9:41:e3:d3:3a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Jan 1 19:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a2f13797e879427fa52c713233f9e890ba7cf6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:3e:9d:a8:18:de:92:83:88:a3:75:39:df:
74:82:c6:6a:99:f1:5f:cf:16:ac:0e:5a:97:0d:6f:
2c:58:fc:a9:df:1b:d1:7e:57:8d:eb:5e:a3:14:2c:
ad:ef:96:8d:cc:93:0d:12:3d:e1:21:99:e0:d1:23:
3c:9c:61:5b:0d:9e:95:26:cb:0d:f8:1a:ec:7d:ed:
63:b4:91:58:06:8c:b1:dc:7f:ca:fa:1b:15:e1:b1:
5c:b7:8c:97:3b:98:89:b1:d2:fc:e1:e5:b4:46:48:
9c:70:78:ca:11:32:43:41:1d:42:d2:3e:0a:86:01:
68:fa:6b:a4:c8:42:38:86:05:0e:95:14:7d:85:a0:
13:0f:38:ae:bb:81:69:71:c4:c9:42:4f:0e:f9:e5:
45:38:41:89:a6:d2:09:bf:63:ff:65:dd:43:4f:e5:
22:f7:cb:df:43:43:1a:11:c9:32:a7:c6:5d:6a:66:
af:a6:8f:55:71:36:ad:78:9d:17:d6:bd:cd:ce:79:
32:bf:a2:df:5a:39:d8:4c:a5:7f:0c:b5:c9:b0:11:
c1:ac:d6:4b:6d:d2:c3:c6:75:d6:c4:bd:b6:0b:d8:
a6:a6:fa:a7:df:6f:c5:a8:e9:37:1e:6a:bd:c9:24:
5d:2b:26:d5:c7:20:c7:0d:21:c2:93:9e:22:89:c7:
9c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:13:79:7E:87:94:27:FA:52:C7:13:23:3F:9E:89:0B:A7:CF:6D
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/Wi8TeX6HlCf6UscTIz-eiQunz20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.216.0/23
212.29.64.0/24
212.29.66.0-212.29.70.255
212.29.90.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0a:68:78:6c:ed:a2:3d:b7:77:63:17:6f:d1:94:c9:b1:aa:
66:75:f3:6b:92:bd:6b:40:6c:6c:2d:2e:8f:c8:69:20:eb:9c:
8a:c1:20:9d:1e:bb:a5:03:6f:41:9b:34:63:4d:57:7c:90:fb:
bc:61:41:8c:3f:a6:d2:17:2d:20:c1:04:8e:92:61:f0:9e:13:
6e:11:4a:c1:97:b9:20:a5:81:11:7c:4f:39:c5:3a:20:69:e8:
d9:3d:43:95:bb:f0:f3:d5:c9:cd:84:5d:83:99:eb:b7:6f:27:
87:00:bf:6c:f5:02:68:20:52:48:15:02:da:50:7e:db:92:c4:
3e:b5:20:01:50:08:a0:53:13:13:6c:ae:1f:b7:1e:93:40:86:
b8:e8:18:bf:d9:9a:27:b2:42:7a:39:53:0e:8d:ec:c6:4f:0d:
a7:4e:df:e8:a5:27:ef:38:75:75:1f:1c:14:df:b9:19:35:80:
57:2d:f0:d3:dd:4d:4b:40:83:3e:e5:b5:73:a0:3e:75:64:69:
be:18:df:55:09:e2:50:6e:36:27:38:27:71:e9:40:36:19:48:
fb:ad:02:df:c6:26:45:7b:51:92:d2:18:3d:18:6e:27:73:d4:
9c:4d:81:f4:88:17:f2:3e:09:07:0a:9d:34:80:c2:17:3c:4c:
6a:60:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net