Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/wbzeMwPRyxIqE7rdL232Kbv3lo0.roa
File: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (raw, json)
Hash identifier: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=
Subject key identifier: C1:BC:DE:33:03:D1:CB:12:2A:13:BA:DD:2F:6D:F6:29:BB:F7:96:8D
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D6565B9838AE466A130A4E5B348305
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/wbzeMwPRyxIqE7rdL232Kbv3lo0.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210646
IP address blocks: 89.25.24.0/24 maxlen: 24
89.25.119.0/24 maxlen: 24
213.145.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:56:5b:98:38:ae:46:6a:13:0a:4e:5b:34:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1bcde3303d1cb122a13badd2f6df629bbf7968d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:25:bf:59:2c:b6:9a:52:db:1a:76:92:e8:
c0:96:bf:fd:5b:78:de:df:a0:8b:b4:47:4d:89:50:
02:7a:d9:92:4e:f2:b9:de:89:3c:8c:8a:94:7c:3b:
ac:63:90:14:c2:b5:ef:e5:5c:12:3f:5c:e2:e3:dd:
2f:c4:95:8e:99:51:c5:d0:b5:3a:5d:36:c8:a5:21:
b4:35:00:53:ff:07:33:8d:03:2f:d6:53:a8:bf:e9:
c1:d2:88:02:41:fd:22:f0:f6:05:20:b6:b7:a5:ee:
fa:cd:01:c8:5c:a6:50:06:c9:42:ee:54:5f:d7:e3:
0c:64:92:f1:dd:74:f0:ae:b4:0c:59:5f:9d:be:93:
06:9e:cc:30:b1:74:e4:d4:32:ac:8d:9c:7d:b6:e9:
29:89:3c:bc:51:70:03:f4:29:8f:6a:4b:78:e6:1e:
de:63:05:18:f7:02:38:f9:b7:6e:22:38:a4:82:4c:
16:6c:5b:f1:96:9d:4f:df:b7:72:31:fd:d4:22:03:
c4:83:11:07:e0:bc:cc:60:5e:ac:09:03:e5:c3:b7:
b2:de:06:63:02:ea:d4:06:7d:87:92:6a:be:6e:96:
5e:53:f5:ef:23:49:ed:f0:04:77:87:ce:61:74:72:
ed:4e:11:03:44:1d:5e:83:85:ec:63:2e:6e:67:e1:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BC:DE:33:03:D1:CB:12:2A:13:BA:DD:2F:6D:F6:29:BB:F7:96:8D
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/wbzeMwPRyxIqE7rdL232Kbv3lo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.25.24.0/24
89.25.119.0/24
213.145.105.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2d:70:4b:c8:55:0d:5a:b9:a0:c3:5b:11:2d:ef:95:ce:2c:
e8:33:04:70:c1:e3:2d:5d:38:a0:09:f4:af:33:90:65:14:0f:
bc:45:f2:74:c1:a3:f9:b0:75:ed:96:e6:24:67:e7:7d:81:1a:
12:16:cb:76:81:b0:67:91:a6:7b:9f:c3:9d:1c:7a:38:95:41:
40:86:75:02:d7:01:14:a6:b5:e4:67:aa:a7:1b:cd:7a:ee:f0:
39:0d:3a:f6:e9:0a:d7:ed:40:39:e7:54:18:5c:9d:6a:4d:b0:
6b:a7:66:8e:3a:17:0f:bf:b5:0f:9e:92:29:ae:5b:6c:f9:7a:
f4:3a:06:d0:60:91:75:42:e7:5f:b9:58:9f:38:02:1d:8e:33:
bd:a3:93:e1:12:fb:be:2b:9b:3f:0f:15:36:0d:7b:99:46:a6:
c4:08:f7:75:87:90:49:14:68:ce:06:b0:a9:ce:4c:30:1e:99:
22:fc:b2:11:35:0a:59:ea:9c:56:06:91:80:00:10:d4:b0:b5:
f5:42:65:2d:34:6a:c3:41:62:14:de:d5:02:82:98:80:07:69:
49:a6:69:67:43:9e:2a:30:12:6b:77:c1:a9:96:01:71:12:00:
8b:f0:85:ac:d1:d0:02:81:bf:bf:82:b6:08:00:5a:a9:0e:f0:
1b:0a:78:2c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQg1lZbmDiuRmoTCk5bNIMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjUwMTAxMDc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWJjZGUzMzAzZDFjYjEyMmExM2JhZGQyZjZkZjYyOWJiZjc5NjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfklv1kstppS2xp2kujAlr/9W3je
36CLtEdNiVACetmSTvK53ok8jIqUfDusY5AUwrXv5VwSP1zi490vxJWOmVHF0LU6
XTbIpSG0NQBT/wczjQMv1lOov+nB0ogCQf0i8PYFILa3pe76zQHIXKZQBslC7lRf
1+MMZJLx3XTwrrQMWV+dvpMGnswwsXTk1DKsjZx9tukpiTy8UXAD9CmPakt45h7e
YwUY9wI4+bduIjikgkwWbFvxlp1P37dyMf3UIgPEgxEH4LzMYF6sCQPlw7ey3gZj
AurUBn2Hkmq+bpZeU/XvI0nt8AR3h85hdHLtThEDRB1eg4XsYy5uZ+FHAQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMG83jMD0csSKhO63S9t9im795aNMB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvd2J6ZU13UFJ5eElxRTdyZEwyMzJLYnYzbG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWRkYAwQA
WRl3AwQA1ZFpMA0GCSqGSIb3DQEBCwUAA4IBAQB2LXBLyFUNWrmgw1sRLe+Vzizo
MwRwweMtXTigCfSvM5BlFA+8RfJ0waP5sHXtluYkZ+d9gRoSFst2gbBnkaZ7n8Od
HHo4lUFAhnUC1wEUprXkZ6qnG8167vA5DTr26QrX7UA551QYXJ1qTbBrp2aOOhcP
v7UPnpIprlts+Xr0OgbQYJF1QudfuVifOAIdjjO9o5PhEvu+K5s/DxU2DXuZRqbE
CPd1h5BJFGjOBrCpzkwwHpki/LIRNQpZ6pxWBpGAABDUsLX1QmUtNGrDQWIU3tUC
gpiAB2lJpmlnQ54qMBJrd8GplgFxEgCL8IWs0dACgb+/grYIAFqpDvAbCngs
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net