Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/Wwk65fWkkC0KWWHed6RDHU5zdWE.roa
File: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (raw, json)
Hash identifier: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=
Subject key identifier: 5B:09:3A:E5:F5:A4:90:2D:0A:59:61:DE:77:A4:43:1D:4E:73:75:61
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 0194266ABC7AC638047426FC2CC61B6F6C24
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/Wwk65fWkkC0KWWHed6RDHU5zdWE.roa
Signing time: Thu 02 Jan 2025 09:48:36 +0000
ROA not before: Thu 02 Jan 2025 09:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48650
IP address blocks: 195.8.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:bc:7a:c6:38:04:74:26:fc:2c:c6:1b:6f:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Jan 2 09:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b093ae5f5a4902d0a5961de77a4431d4e737561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:33:b6:c7:6a:e8:48:ee:73:48:72:e0:39:
9f:c0:8b:a5:7d:79:7e:a0:f9:6c:4e:88:ce:5d:3c:
2f:51:86:48:9c:1f:4a:3d:ac:70:ba:9d:73:bb:15:
8c:e0:08:c9:cc:30:d7:2c:8b:3e:b2:58:3d:85:c2:
64:b7:b2:9f:d6:0d:9a:01:84:c1:14:c8:f6:cd:cb:
ef:e6:65:01:db:e6:3e:00:70:fc:1b:85:0f:8e:61:
8e:6f:10:f6:f2:90:cf:34:5f:11:12:77:67:4b:a2:
b6:f5:81:b9:ea:6a:d4:f5:d6:94:37:96:92:5a:83:
01:f6:c6:37:9d:15:7e:bd:37:d9:c6:d8:2c:00:9d:
ce:37:cf:92:92:74:a7:81:96:31:17:d0:30:81:dc:
d4:be:75:eb:37:70:c4:12:4a:20:8d:df:a2:6a:bf:
52:e9:7f:d7:03:e1:10:91:93:31:05:97:82:10:7e:
86:e9:2f:7d:88:51:0b:63:15:f6:9d:c7:e1:7d:1e:
13:e9:79:be:27:c3:02:aa:c9:5b:b6:7b:f6:61:db:
0d:0c:58:9a:56:cf:82:ca:ce:bc:29:3e:6d:37:32:
89:87:70:ea:00:45:9a:47:39:d1:28:25:40:67:2d:
e6:8b:01:48:81:40:2d:cb:1a:ed:35:b3:aa:b7:b3:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:3A:E5:F5:A4:90:2D:0A:59:61:DE:77:A4:43:1D:4E:73:75:61
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/Wwk65fWkkC0KWWHed6RDHU5zdWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.40.0/23
Signature Algorithm: sha256WithRSAEncryption
48:dd:14:7f:99:4f:b6:16:7d:d6:b5:76:16:31:60:6a:31:93:
be:b7:70:2d:85:a8:d0:8f:1d:a1:4d:75:d7:0a:14:59:a3:3d:
17:1f:e3:73:3e:7e:7d:57:11:b5:5d:41:2b:01:1f:1e:33:ac:
88:f0:be:be:91:52:7b:81:3d:b3:cd:85:98:57:2e:f5:39:a2:
98:ab:20:f3:fe:78:04:0b:06:06:a9:cf:23:dd:3e:52:83:20:
7c:a9:4e:74:d9:98:43:ab:4f:31:de:0c:c5:b6:5c:8d:4f:d2:
62:e8:bc:f5:0b:ad:fe:28:73:d7:7d:9b:46:e6:4c:d6:34:4b:
df:0d:17:2e:a4:33:45:4c:2e:ed:09:4e:65:94:a1:c0:74:d5:
4b:95:aa:0c:20:10:94:b7:fc:8c:d9:83:9e:cd:22:ab:8d:ab:
95:30:25:81:46:09:8a:7c:c5:b1:c1:3a:8b:dc:d3:7e:2f:1f:
fc:7f:81:b4:77:c1:33:b1:07:04:fd:d9:b0:7b:bb:3c:7f:73:
57:77:8d:16:d9:7e:a3:30:99:b5:05:c0:51:a3:3e:d2:5d:c9:
55:f1:f5:71:41:5a:06:83:3e:8c:dd:10:33:77:4e:40:c1:c3:
f5:e6:a4:92:6a:bb:58:c1:d7:c4:af:6d:4f:18:a9:56:1e:39:
3d:b7:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:52 2025 by rpki-client on console.sobornost.net