Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/WZEbVkL7G2Qj36QisnZkv8BFkNA.roa
File: WZEbVkL7G2Qj36QisnZkv8BFkNA.roa (raw, json)
Hash identifier: f7XKUwdOUxo0bFV2++z3NCiuNhXfpczYvfcpVS/l/Jk=
Subject key identifier: 59:91:1B:56:42:FB:1B:64:23:DF:A4:22:B2:76:64:BF:C0:45:90:D0
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 019420D60A150965C5A0AE4D542E62EE4339
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/WZEbVkL7G2Qj36QisnZkv8BFkNA.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206225
IP address blocks: 193.247.48.0/21 maxlen: 24
193.247.56.0/23 maxlen: 23
193.247.59.0/24 maxlen: 24
193.247.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0a:15:09:65:c5:a0:ae:4d:54:2e:62:ee:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59911b5642fb1b6423dfa422b27664bfc04590d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:95:ec:1c:a0:81:cc:c2:75:3d:80:8d:ce:
77:0b:e6:b0:c7:eb:a1:cf:1d:b8:b0:a1:38:9c:f4:
47:85:e2:79:0a:96:bf:03:13:f2:38:03:ad:de:c8:
66:51:d7:32:eb:e8:a1:ff:a7:4c:a9:fe:e4:c7:5c:
c9:52:53:a3:97:40:3a:e9:1c:9a:95:8c:95:a1:be:
c4:cb:9c:5e:a0:3b:74:32:b2:77:a1:1c:f9:e8:75:
38:e8:95:14:d6:cf:20:0d:e5:5c:eb:d9:05:af:6c:
ff:90:d9:9e:b0:96:14:23:f9:d0:b3:f1:c8:be:e9:
58:ba:5d:84:de:0b:3b:7e:36:56:4c:1d:88:38:5e:
3e:6f:dc:d0:7a:e1:63:96:87:ba:d4:da:1f:43:a7:
a0:ae:ba:43:9e:25:fd:57:5f:e3:a9:f0:7d:8b:9c:
ca:73:c6:60:c5:f8:b0:51:da:dc:dd:80:e6:cc:2e:
ef:77:3a:35:23:30:3f:c8:d7:52:ca:42:5e:08:99:
11:c5:32:ec:12:87:10:05:b2:7b:8f:bd:1f:de:6c:
fa:01:bd:73:3e:18:77:08:5d:6a:ad:1b:b1:e4:73:
c6:7b:07:dd:39:a9:f2:d1:3a:ae:5d:f4:6c:8b:f4:
06:ec:1c:02:9e:f2:69:c6:83:a7:e8:bb:ce:50:4e:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:91:1B:56:42:FB:1B:64:23:DF:A4:22:B2:76:64:BF:C0:45:90:D0
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/WZEbVkL7G2Qj36QisnZkv8BFkNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.48.0-193.247.57.255
193.247.59.0/24
193.247.62.0/23
Signature Algorithm: sha256WithRSAEncryption
47:16:82:74:43:ed:8e:40:45:41:6a:b8:28:a6:28:f2:34:0b:
fb:66:71:8d:3d:52:d4:47:96:75:fb:97:ca:8f:0b:eb:a1:e9:
8a:06:e4:90:37:7e:a2:d2:f6:25:84:1d:e9:17:c2:7d:63:47:
a9:65:54:35:3b:fa:cf:4c:2a:0b:7d:36:a9:53:eb:b2:28:4b:
3e:96:62:9c:b5:be:11:c3:49:89:0c:18:92:d0:0b:b5:6a:34:
d2:42:ac:48:33:fb:81:1b:ec:a3:c9:a7:d0:46:f8:b4:15:92:
81:a1:05:5d:60:40:70:02:75:cb:d6:68:12:be:58:01:f7:db:
5d:b0:95:74:a0:f8:eb:98:1d:5f:f1:58:f1:55:69:92:93:ec:
70:02:06:9a:21:26:32:f4:09:d7:c1:84:83:2e:3b:75:61:dc:
a7:3a:5a:c5:6e:33:82:6e:2b:b8:74:d9:5d:0f:2b:84:1d:28:
8c:b3:3b:db:f8:ea:fb:64:01:ff:ef:10:0c:e8:72:f8:5c:87:
82:a3:96:ac:de:e2:04:9b:43:52:eb:a6:12:3b:16:cb:80:d9:
67:b9:25:46:2c:3d:d1:2b:91:50:b8:26:29:b4:6e:31:3c:d9:
b6:6d:11:a9:99:b8:23:96:6b:39:06:9c:9d:d2:06:f4:6a:37:
f9:d6:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:39 2025 by rpki-client on console.sobornost.net