Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/WgE1kNJ4HqqNdSzDkbfFtyN_DXk.roa
File: WgE1kNJ4HqqNdSzDkbfFtyN_DXk.roa (raw, json)
Hash identifier: db+3EkIhxelgTwb79CorySnIdUAtErdWodxq+R94Dd4=
Subject key identifier: 5A:01:35:90:D2:78:1E:AA:8D:75:2C:C3:91:B7:C5:B7:23:7F:0D:79
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 01941FFA16FCC59BB2E7FBA135667C3C9F04
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/WgE1kNJ4HqqNdSzDkbfFtyN_DXk.roa
Signing time: Wed 01 Jan 2025 03:47:50 +0000
ROA not before: Wed 01 Jan 2025 03:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57069
IP address blocks: 89.22.64.0/19 maxlen: 19
89.22.64.0/24 maxlen: 24
89.22.66.0/23 maxlen: 23
89.22.68.0/22 maxlen: 22
89.22.72.0/21 maxlen: 21
89.22.83.0/24 maxlen: 24
89.22.84.0/22 maxlen: 22
89.22.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:16:fc:c5:9b:b2:e7:fb:a1:35:66:7c:3c:9f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a013590d2781eaa8d752cc391b7c5b7237f0d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:32:68:87:a8:78:45:95:e7:08:68:6d:ea:
3c:09:1d:74:bf:46:e3:86:c8:95:82:b0:5a:f9:40:
40:ca:33:dc:f1:11:3b:35:0a:2b:45:1c:01:f8:71:
3c:f4:73:1f:a0:9f:10:80:2b:91:32:0d:3c:c1:a4:
23:6d:7e:17:12:f2:84:18:3b:82:d0:1b:aa:af:e4:
a8:57:5d:24:b9:ec:5b:d1:df:00:52:92:86:27:5e:
d4:28:46:69:d6:ee:25:1f:4e:76:52:09:bc:b3:ca:
6a:0c:e1:b0:a2:49:fb:69:02:b5:34:e1:8e:fa:8f:
ad:bb:49:33:54:2b:82:36:ae:03:c6:dc:1b:71:9e:
37:15:d5:2a:f4:74:4c:76:40:c7:f3:d1:0b:96:1d:
c8:70:75:90:19:52:2d:48:99:48:ff:c0:24:c3:c7:
96:ef:dc:8d:1a:61:19:c5:99:2f:4a:5f:08:08:25:
8b:39:02:92:0f:3b:9d:6d:85:d4:cb:76:27:8e:27:
35:e6:51:0e:06:32:df:35:0a:32:96:26:39:d3:dd:
86:f4:94:fb:e7:2a:28:7c:71:bd:ce:23:63:ed:14:
f5:b1:bf:b1:2d:f1:64:ae:cd:91:db:d4:c8:ff:7b:
2c:bc:e3:10:4f:08:9c:bb:b8:93:a7:d0:be:a2:f5:
fe:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:35:90:D2:78:1E:AA:8D:75:2C:C3:91:B7:C5:B7:23:7F:0D:79
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/WgE1kNJ4HqqNdSzDkbfFtyN_DXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.64.0/19
Signature Algorithm: sha256WithRSAEncryption
23:1b:f9:09:1d:d5:ce:28:41:3f:a6:60:4f:7d:c9:40:67:9a:
80:27:e3:51:0c:0a:80:9b:02:87:44:cf:cb:17:d6:b9:e4:b5:
69:68:82:f2:46:a7:8e:81:90:a5:35:04:da:63:3c:8f:7b:dd:
fe:dd:30:c0:62:47:11:ae:84:01:a4:27:58:f2:0a:58:e8:54:
f4:7c:aa:86:3e:f8:7f:8e:e5:c8:6a:6b:77:55:4c:cb:8b:5a:
d2:27:90:28:ef:bb:6d:18:a2:7d:1a:44:5c:1c:96:83:16:da:
99:5d:61:1e:1f:34:bd:82:98:fc:32:39:79:02:55:64:94:18:
1f:d5:d3:be:2b:ae:14:6a:f8:1a:d6:e1:30:c4:8e:b1:a2:f6:
78:c8:72:8a:70:1c:f3:ce:ba:31:e6:04:8a:b7:6b:d8:13:a6:
24:84:61:96:e4:c5:ac:73:72:02:26:0f:63:8f:d3:cc:80:cc:
cc:f9:ee:b9:5f:d3:2e:3a:cb:af:0a:0a:c0:f1:b3:bd:7d:40:
cc:d8:d1:ab:4b:04:01:e4:15:a4:2a:2d:cd:17:55:c0:43:2d:
c7:3b:8f:d7:bc:59:3b:32:c6:ae:19:ec:39:11:14:64:64:f5:
8d:de:03:71:5e:05:2e:b6:6f:d5:66:51:71:b8:30:a7:f2:6d:
72:c4:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net