Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/wEdGwXpwYmsgP9g00gzYyHwBX_w.roa
File: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (raw, json)
Hash identifier: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=
Subject key identifier: C0:47:46:C1:7A:70:62:6B:20:3F:D8:34:D2:0C:D8:C8:7C:01:5F:FC
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 0194282358B99A9B6264D25632D2BF067256
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/wEdGwXpwYmsgP9g00gzYyHwBX_w.roa
Signing time: Thu 02 Jan 2025 17:49:52 +0000
ROA not before: Thu 02 Jan 2025 17:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57922
IP address blocks: 5.250.253.0/24 maxlen: 24
185.133.124.0/24 maxlen: 24
2a0f:4d00::/29 maxlen: 48
2a0f:4d00:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:58:b9:9a:9b:62:64:d2:56:32:d2:bf:06:72:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Jan 2 17:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c04746c17a70626b203fd834d20cd8c87c015ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:d3:2a:a9:97:df:a6:41:5e:36:b1:1d:8e:
f1:e6:74:ee:8d:fd:70:4c:6d:f9:7d:f3:d3:47:7c:
db:3c:06:99:63:1e:3a:a7:ba:a9:98:3d:ae:57:99:
f3:3d:de:20:82:92:27:bb:1e:f8:9e:67:8b:89:64:
91:5c:25:03:8a:e0:6c:2b:49:60:a0:2b:85:db:d6:
a4:9a:d0:b4:64:10:74:2e:e4:84:27:fa:40:38:c7:
aa:75:b2:c8:99:2e:59:be:1d:02:f4:7b:79:53:1c:
3d:6d:d9:c4:91:df:71:d7:94:35:98:e7:a8:27:2e:
21:3e:e2:f7:44:58:2b:ea:28:c5:05:68:be:45:7e:
47:d6:9d:ab:e0:35:44:99:db:44:fe:be:17:55:e4:
d5:f4:c4:42:bf:32:28:08:1a:f1:76:6b:e9:f4:43:
1c:c0:6b:56:c5:8d:cc:f8:e1:d7:28:a2:f6:a9:24:
e5:21:6b:45:35:44:1e:c0:95:3c:6f:f7:73:66:fd:
6a:3d:ec:2f:56:b0:29:0a:3a:82:45:2c:f5:d6:35:
36:fa:75:a6:77:75:0d:53:95:85:76:67:7e:d7:a6:
81:ea:1d:64:e0:7e:16:4e:ae:6d:dc:be:22:28:2a:
c3:2e:cf:1f:e8:a7:a0:f0:a1:7c:cc:e5:3c:bb:f2:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:46:C1:7A:70:62:6B:20:3F:D8:34:D2:0C:D8:C8:7C:01:5F:FC
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/wEdGwXpwYmsgP9g00gzYyHwBX_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.253.0/24
185.133.124.0/24
IPv6:
2a0f:4d00::/29
Signature Algorithm: sha256WithRSAEncryption
2e:27:50:ec:24:a3:5d:91:11:dc:25:4f:84:a7:90:9f:f1:78:
b3:90:b3:9f:62:d7:ed:61:b0:3a:c5:c9:99:60:99:e5:18:06:
15:82:98:e9:8f:a9:eb:5a:d0:c7:e5:2a:72:53:6d:c7:ef:6d:
4a:d2:ed:37:94:ad:ee:5c:cd:cb:9c:d7:ce:a0:7d:19:11:ba:
2d:8f:6d:b0:38:5c:23:f0:a2:79:2a:ae:d8:4a:86:1e:72:bb:
b8:e1:7b:e0:85:18:22:3a:23:18:bf:2e:f4:b1:51:a8:6b:72:
c9:e6:f5:1e:d5:61:6e:a3:35:95:89:06:60:7f:71:33:86:df:
8b:54:81:64:56:87:84:09:06:09:8f:71:32:d7:aa:a9:54:3e:
4b:b0:cc:94:2d:82:30:73:15:06:4f:a1:a9:5a:94:84:8d:69:
d7:b2:24:62:6d:47:be:6d:2d:f9:35:55:66:22:85:21:24:af:
a5:e5:0f:87:ed:e7:7c:87:37:fa:19:53:4b:9d:90:8a:aa:65:
72:b1:53:00:a2:87:3c:8c:28:c6:91:58:3b:f4:9a:2d:94:5e:
cf:ae:ce:17:92:b3:f9:dc:fe:06:00:6e:dc:60:02:82:56:14:
5a:3c:a6:72:9d:31:45:4b:42:f8:d7:50:66:01:50:2d:c3:28:
95:46:97:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:35 2025 by rpki-client on console.sobornost.net