Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/Wpi3_FkswmIaaIgKf0anqAZxJ64.roa
File: Wpi3_FkswmIaaIgKf0anqAZxJ64.roa (raw, json)
Hash identifier: 0UkCO1u9zUqZOcHVlV6KO1E6zL+Jq8IEi+HY3dh0W5Y=
Subject key identifier: 5A:98:B7:FC:59:2C:C2:62:1A:68:88:0A:7F:46:A7:A8:06:71:27:AE
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 0194CB80D8A6D46383CD3C7E761BBA5BDD05
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/Wpi3_FkswmIaaIgKf0anqAZxJ64.roa
Signing time: Mon 03 Feb 2025 11:10:06 +0000
ROA not before: Mon 03 Feb 2025 11:10:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 94.232.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cb:80:d8:a6:d4:63:83:cd:3c:7e:76:1b:ba:5b:dd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Feb 3 11:10:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a98b7fc592cc2621a68880a7f46a7a8067127ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:72:07:b2:05:63:6a:43:4d:b0:19:17:a4:
09:68:69:35:2d:8a:c7:0e:2b:36:5c:7a:bd:1e:df:
ef:ed:58:f5:3b:b3:28:ff:d9:c8:bf:e6:31:c3:75:
47:6c:69:f4:2c:77:e9:d6:05:f2:cb:d4:74:51:91:
74:96:a3:26:ca:89:22:dc:13:2e:d5:05:24:cb:83:
a1:48:7f:42:df:cf:25:b8:37:c2:30:ff:93:ab:52:
26:13:ef:2e:be:84:67:9f:39:e3:12:9e:f3:71:7e:
53:e3:20:5e:f4:6e:b1:e3:8f:fd:67:b0:ec:84:bb:
6d:2f:47:09:27:c0:60:51:f9:16:ab:1b:96:88:a6:
9f:af:a7:27:4f:77:47:ee:f6:f9:7b:18:5e:e8:bb:
40:66:f8:9b:0a:fc:79:e6:b6:47:11:62:cd:07:51:
50:f4:98:89:15:60:5e:df:9a:8d:5f:b3:50:39:e7:
24:26:45:72:97:e6:06:da:1c:52:b1:93:ab:ea:17:
13:4c:e8:65:36:43:21:02:45:16:5f:8d:13:cc:14:
c3:f2:e7:33:0c:c9:3b:bf:92:22:8b:cd:7d:a3:c9:
f9:b2:6a:42:d5:0a:b6:0f:74:7a:43:cf:f5:36:de:
9e:51:86:cf:51:45:2a:08:12:0b:8a:c4:88:89:4d:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:B7:FC:59:2C:C2:62:1A:68:88:0A:7F:46:A7:A8:06:71:27:AE
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/Wpi3_FkswmIaaIgKf0anqAZxJ64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f2:89:b7:b6:3e:34:4d:be:fa:99:c8:44:81:a6:a9:78:ae:
3a:03:39:9f:27:42:f5:a9:e2:bc:58:c9:40:ad:25:65:9e:23:
e8:32:be:eb:e7:78:44:c8:ac:45:7b:b1:ff:8d:46:79:dd:53:
c7:1b:4d:43:a6:bc:b6:6d:5e:80:fe:0a:44:df:80:3f:cb:96:
6f:9f:cc:ef:6d:ce:ca:22:a4:e5:12:9d:b0:d5:3b:5c:9e:1c:
c2:93:c9:76:70:36:93:39:ba:c0:02:d1:aa:1a:c0:5d:63:52:
9c:fb:98:13:76:81:0b:9e:fa:bf:fe:47:f8:77:a5:78:d9:33:
9f:fe:a6:8c:e8:a8:ec:16:09:96:1b:e4:7d:43:e5:f6:ad:35:
f4:15:09:77:b9:91:24:1a:93:70:66:50:33:7d:35:0b:ac:22:
91:a1:49:41:42:c6:70:99:36:6a:be:d2:2f:66:b8:70:ee:0c:
dd:ff:dd:ec:0e:af:0d:b6:33:c8:0e:e1:bb:7e:64:c1:51:b9:
51:9a:f6:01:0e:78:95:71:9e:ce:4d:75:79:a3:28:89:c2:9f:
46:f1:8c:21:69:84:76:97:e1:c9:ec:13:d6:cb:ce:94:5e:3a:
2d:85:a4:e5:f3:7d:c7:2c:25:e2:d6:9d:a9:6e:af:1c:c0:e3:
38:a7:41:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTLgNim1GODzTx+dhu6W90FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWI5MGZmZGZhMGFiMjg1NDg1ZTc4NDQ2Yjg3MTk5OGIy
NGRjYzAwHhcNMjUwMjAzMTExMDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk4YjdmYzU5MmNjMjYyMWE2ODg4MGE3ZjQ2YTdhODA2NzEyN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0tyB7IFY2pDTbAZF6QJaGk1LYrH
Dis2XHq9Ht/v7Vj1O7Mo/9nIv+Yxw3VHbGn0LHfp1gXyy9R0UZF0lqMmyoki3BMu
1QUky4OhSH9C388luDfCMP+Tq1ImE+8uvoRnnznjEp7zcX5T4yBe9G6x44/9Z7Ds
hLttL0cJJ8BgUfkWqxuWiKafr6cnT3dH7vb5exhe6LtAZvibCvx55rZHEWLNB1FQ
9JiJFWBe35qNX7NQOeckJkVyl+YG2hxSsZOr6hcTTOhlNkMhAkUWX40TzBTD8ucz
DMk7v5Iii819o8n5smpC1Qq2D3R6Q8/1Nt6eUYbPUUUqCBILisSIiU0U1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqYt/xZLMJiGmiICn9Gp6gGcSeuMB8GA1UdIwQY
MBaAFOFbkP/foKsoVIXnhEa4cZmLJNzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEt
Y2JiZmRhOTI0MTlkLzEvV3BpM19Ga3N3bUlhYUlnS2YwYW5xQVp4SjY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81ZjNlMjEtNmI0MS00OTY0LWJmZGEtY2JiZmRhOTI0MTlk
LzEvNFZ1UV85LWdxeWhVaGVlRVJyaHhtWXNrM01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuj+MA0G
CSqGSIb3DQEBCwUAA4IBAQAd8om3tj40Tb76mchEgaapeK46AzmfJ0L1qeK8WMlA
rSVlniPoMr7r53hEyKxFe7H/jUZ53VPHG01Dpry2bV6A/gpE34A/y5Zvn8zvbc7K
IqTlEp2w1TtcnhzCk8l2cDaTObrAAtGqGsBdY1Kc+5gTdoELnvq//kf4d6V42TOf
/qaM6KjsFgmWG+R9Q+X2rTX0FQl3uZEkGpNwZlAzfTULrCKRoUlBQsZwmTZqvtIv
Zrhw7gzd/93sDq8NtjPIDuG7fmTBUblRmvYBDniVcZ7OTXV5oyiJwp9G8YwhaYR2
l+HJ7BPWy86UXjothaTl833HLCXi1p2pbq8cwOM4p0Ee
-----END CERTIFICATE-----
Generated at Tue Apr 1 23:51:44 2025 by rpki-client on console.sobornost.net