Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa
File: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (raw, json)
Hash identifier: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=
Subject key identifier: 5A:6C:57:EE:90:5F:A4:3E:5C:DA:6D:A4:1C:E5:0E:E0:CF:DB:06:00
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 019425FCBB9562F671CB280C003C9C16B9E5
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa
Signing time: Thu 02 Jan 2025 07:48:27 +0000
ROA not before: Thu 02 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39931
IP address blocks: 77.245.128.0/20 maxlen: 20
77.245.136.0/22 maxlen: 22
77.245.136.0/23 maxlen: 23
77.245.140.0/22 maxlen: 22
185.172.12.0/22 maxlen: 22
2a00:4fc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:bb:95:62:f6:71:cb:28:0c:00:3c:9c:16:b9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jan 2 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a6c57ee905fa43e5cda6da41ce50ee0cfdb0600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:b0:c0:24:3e:4e:f3:f6:2a:90:fd:d6:8b:
3d:b3:9d:01:c9:db:dc:1b:03:25:d2:bf:6f:cc:3e:
0b:4e:56:d5:93:55:16:69:bc:e4:5e:dc:a4:d3:40:
dd:27:46:98:7c:92:40:0b:e6:72:24:e5:68:a7:46:
c9:35:2a:6f:bf:19:15:86:9b:12:42:31:20:53:98:
e7:17:03:c3:3c:b7:ca:e2:a2:e5:0a:b3:3e:f3:7e:
87:7b:36:da:b0:03:2a:af:a2:79:82:e7:97:57:5c:
20:99:01:4c:7c:0d:d9:55:55:99:09:b9:9a:50:b9:
54:a3:76:a7:6c:bb:70:f4:1d:0d:17:52:2a:ea:28:
27:9a:ce:18:9b:e4:6d:ba:f5:ec:59:83:41:cf:7e:
87:48:50:a6:c9:95:bf:54:43:0e:c6:81:8d:07:eb:
2c:6f:f4:a1:5c:89:ad:6a:27:15:27:94:59:00:85:
a3:86:d4:9a:32:38:69:95:4c:d1:92:7b:63:fa:d3:
1a:d0:f1:6c:49:f3:c6:70:d7:b8:c0:16:31:c1:a8:
86:ff:30:3e:07:12:e9:92:4a:d9:ac:9e:87:ba:85:
c6:b2:a1:f7:16:db:f7:7e:22:3c:b6:68:b8:fe:37:
2e:41:bf:ca:29:f0:02:f6:9c:56:de:b9:16:91:ea:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:57:EE:90:5F:A4:3E:5C:DA:6D:A4:1C:E5:0E:E0:CF:DB:06:00
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.128.0/20
185.172.12.0/22
IPv6:
2a00:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
45:39:2f:9f:c6:14:40:8e:bc:63:b8:6d:6f:15:c1:c9:83:ec:
96:f4:90:f5:82:6a:97:c2:be:b5:0b:e8:75:94:6e:cb:43:fb:
b7:8c:47:18:13:e6:2c:0a:b2:ed:94:88:ee:4c:f4:58:67:c2:
52:1f:b6:84:a1:f4:33:89:65:ab:57:41:4b:64:be:63:6f:f9:
56:c6:24:a2:de:dc:2a:9c:50:e4:22:79:63:1d:70:ad:9e:51:
5d:ac:49:39:ec:ef:2f:2d:7f:6f:c7:ff:1d:55:6f:a6:bf:38:
00:cf:c2:ad:c7:6a:a6:be:58:ea:a0:46:aa:22:61:ce:b0:6c:
bb:00:63:e6:b3:f9:87:ac:a5:52:6b:a5:d8:03:a8:c2:b3:8f:
f7:8f:1d:5d:d2:94:b2:b0:26:5a:d8:a3:45:bc:c6:24:86:f4:
66:41:fd:25:71:ed:c5:f9:15:75:77:6e:e6:bf:03:7b:d4:88:
28:9b:96:c7:84:1d:27:3f:1c:7c:3c:be:a6:23:2a:66:fa:71:
45:ba:5f:ab:ec:6b:bb:7a:f1:86:cd:36:22:1a:f8:e3:e0:ef:
d2:5b:ed:d0:df:d6:e9:dc:9d:21:56:9e:ec:b0:94:2d:27:22:
de:96:3e:8b:79:63:f9:aa:0e:b7:7d:d4:b2:7b:1b:19:8c:02:
94:e6:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:11 2025 by rpki-client on console.sobornost.net