Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/Wk-27-wm2MeWL1AcRJVfERPG3M4.roa
File: Wk-27-wm2MeWL1AcRJVfERPG3M4.roa (raw, json)
Hash identifier: /2ZrWGFGh9bM8J1i4JDEX8CG9Dlb6SOL52JzWa/nfw0=
Subject key identifier: 5A:4F:B6:EF:EC:26:D8:C7:96:2F:50:1C:44:95:5F:11:13:C6:DC:CE
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 0194228DE27C5B8F334A674211AA74B45E35
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/Wk-27-wm2MeWL1AcRJVfERPG3M4.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62102
IP address blocks: 185.47.176.0/22 maxlen: 22
185.47.176.0/23 maxlen: 23
185.47.176.0/24 maxlen: 24
185.47.177.0/24 maxlen: 24
185.47.178.0/23 maxlen: 23
185.47.178.0/24 maxlen: 24
185.47.179.0/24 maxlen: 24
2a01:7ce0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e2:7c:5b:8f:33:4a:67:42:11:aa:74:b4:5e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a4fb6efec26d8c7962f501c44955f1113c6dcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:42:3a:e5:37:c5:5e:4f:b0:ae:5a:da:72:
85:3d:56:45:29:51:19:72:46:4c:ce:e4:b0:81:29:
98:67:a2:5d:bc:04:78:b2:d6:3e:4d:12:1e:78:79:
54:35:bf:8f:15:b6:91:8c:aa:10:a4:d1:3e:59:8d:
d4:04:d5:ac:06:45:e7:1b:dc:b3:01:d1:bf:ae:bb:
57:66:e2:52:62:de:d0:86:b2:bd:9d:ed:7c:c3:a9:
d0:d6:b7:b8:76:2a:5c:88:a9:a7:0c:33:da:d7:88:
f9:ab:1b:c6:26:32:5a:a5:a8:b7:75:ce:a9:a6:9b:
0a:ae:67:14:33:2d:34:b3:4a:e0:04:23:07:99:b7:
0f:e1:6b:5c:18:8a:0c:0d:f9:4a:f8:a0:9f:f7:8c:
d0:ab:e7:19:6c:c2:eb:8d:10:1c:a4:61:f4:65:35:
9d:f4:ab:36:2c:34:99:8a:53:19:fd:77:df:7c:e3:
17:e2:cb:ef:c2:87:53:2a:a7:8c:5a:a9:94:4d:f2:
ca:11:d5:ba:03:3c:51:91:2f:91:d6:e1:ab:50:20:
f9:62:42:7d:48:e3:63:aa:97:c1:19:89:48:4b:e4:
08:d2:f5:0e:0c:a9:f2:2f:1f:fd:5c:40:5d:61:95:
0e:d8:e4:3a:8c:6a:b6:93:78:91:a9:a5:cb:a9:0f:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:B6:EF:EC:26:D8:C7:96:2F:50:1C:44:95:5F:11:13:C6:DC:CE
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/Wk-27-wm2MeWL1AcRJVfERPG3M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.176.0/22
IPv6:
2a01:7ce0::/32
Signature Algorithm: sha256WithRSAEncryption
61:2a:3c:40:7c:20:84:3d:ab:88:67:e5:d1:1a:4c:34:12:e8:
3d:4d:c9:8b:f7:2f:cc:61:13:83:83:95:cd:31:e8:8b:13:ee:
4d:75:7a:e6:91:40:a8:ad:8e:d3:c3:98:87:a5:8c:da:60:03:
ac:0c:ab:4c:4a:63:0b:de:6c:45:ac:73:af:81:0b:16:e4:95:
50:66:c3:81:1e:cf:d2:36:6f:67:83:08:2c:3a:69:16:d9:d1:
47:5f:47:44:67:09:81:20:fb:43:9e:99:5a:b6:a9:d0:57:91:
f1:9a:97:88:0c:cc:89:38:3f:73:80:05:3a:c9:ba:7f:d3:78:
7e:50:84:5a:4c:10:27:86:6d:5e:10:03:50:4e:53:24:4e:eb:
8d:cd:95:c4:95:04:4b:af:7c:70:2b:27:e5:27:b1:65:59:86:
a8:f2:fb:d3:30:0e:76:34:03:2a:ef:c7:f3:7d:6b:b5:d6:9c:
03:02:91:f5:ed:1f:76:23:a8:87:17:36:55:89:64:8a:c6:e3:
1f:09:10:62:e4:00:cd:fc:8c:c4:cd:f8:94:d2:a7:85:81:cb:
a9:de:7c:a5:98:07:b6:c7:49:95:35:c8:7f:68:a7:cc:5a:8b:
8b:72:de:f2:8e:0e:1a:14:ed:23:05:b0:eb:d9:7f:7d:a6:79:
7d:4d:fc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:58 2025 by rpki-client on console.sobornost.net