Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/WWNEma98vqvt3aWub4KvZrisRPY.roa
File: WWNEma98vqvt3aWub4KvZrisRPY.roa (raw, json)
Hash identifier: 8ej/FxtmoHvT2+4JYPncO9OF+5JwUWMEm2sRynTw/0U=
Subject key identifier: 59:63:44:99:AF:7C:BE:AB:ED:DD:A5:AE:6F:82:AF:66:B8:AC:44:F6
Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial: 0194221F7FD446ABFD164270BAE6CC8709EF
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/WWNEma98vqvt3aWub4KvZrisRPY.roa
Signing time: Wed 01 Jan 2025 13:47:57 +0000
ROA not before: Wed 01 Jan 2025 13:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206663
IP address blocks: 185.167.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7f:d4:46:ab:fd:16:42:70:ba:e6:cc:87:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59634499af7cbeabeddda5ae6f82af66b8ac44f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ba:eb:f7:c6:4c:8c:c0:88:ba:8a:5a:6e:c5:
1d:51:99:73:26:1c:1e:6f:b1:cb:8f:c1:c4:ea:77:
b9:f2:10:84:97:63:92:32:89:28:9b:c9:a3:37:65:
9c:71:42:96:61:30:4b:89:8f:29:53:32:00:a9:55:
d3:06:54:b4:8a:15:c2:44:08:7b:18:07:cf:cb:cc:
a1:5c:cb:b0:e4:33:c5:b1:49:52:b8:48:3a:8f:4d:
da:3f:a1:05:10:27:d7:f0:b9:78:44:80:26:19:ba:
2d:44:0a:69:10:b9:01:8a:b3:01:ae:6c:e4:7e:24:
57:9d:cf:58:5e:81:53:75:7d:c2:f3:c9:78:1e:dc:
26:3e:0f:ce:70:22:f9:21:8d:05:52:f9:70:a1:85:
42:b2:fd:e3:eb:94:68:09:99:7b:45:a9:29:26:ee:
aa:f2:1d:b3:0d:af:74:c9:3f:2d:f5:23:5a:7b:e0:
1f:39:3a:c8:4a:b2:f8:21:f6:68:6d:09:d7:77:88:
71:24:90:73:2c:f9:49:01:a5:cc:33:4f:9c:39:8b:
27:4a:60:56:21:a8:c3:62:72:b6:0d:46:21:f2:99:
71:ed:52:6b:30:63:3e:cb:dd:b6:50:0f:17:5e:39:
14:86:d4:4c:fb:af:17:aa:cf:d3:8a:48:cf:51:61:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:44:99:AF:7C:BE:AB:ED:DD:A5:AE:6F:82:AF:66:B8:AC:44:F6
X509v3 Authority Key Identifier:
keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/WWNEma98vqvt3aWub4KvZrisRPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.180.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4b:28:81:3f:cb:41:91:1b:06:2a:71:6b:a1:8c:32:ca:5b:
f2:ca:fc:36:e5:56:b5:4f:3b:8e:d4:42:31:ed:74:3d:96:5d:
a1:f6:74:88:5d:1c:0c:1d:4d:f5:4b:c2:86:86:b1:7e:fb:58:
4d:98:eb:a2:93:05:93:2e:c0:b6:7a:e1:72:e7:be:59:8d:55:
d6:a0:dc:b9:57:0e:3a:3a:72:e2:04:16:e4:e9:a4:2c:00:ca:
87:1b:f1:42:b6:53:db:af:3a:61:81:82:ec:e6:0a:b1:91:b4:
9a:48:52:d1:87:ab:ce:24:23:56:d1:6e:bc:f4:32:74:a2:5e:
35:06:60:33:19:1c:b8:f4:6f:9d:d9:5e:d5:90:a2:0e:71:1e:
80:ea:40:d7:66:fe:04:b2:dd:98:8d:70:00:ae:2d:a2:97:90:
83:df:0d:10:16:de:91:c4:3e:45:9b:20:ee:6e:83:05:48:81:
fa:b9:24:0f:89:a3:69:67:cf:e0:2d:76:13:19:5d:8b:f1:76:
e4:5e:7f:bf:da:46:38:d1:9d:af:2d:db:d2:00:fa:d8:16:33:
b0:8f:65:34:ac:df:a6:66:9f:e8:a7:37:79:24:6a:da:04:10:
a8:b4:eb:bc:dd:93:17:c8:d0:c2:f7:ef:02:04:ff:bf:22:7f:
49:59:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:48 2025 by rpki-client on console.sobornost.net