Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa
File: WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa (raw, json)
Hash identifier: 5tkFh2eMBLLpaXb8k6oCA+R1YYUjz+3ZjunAdpKVKWo=
Subject key identifier: 59:25:A4:C8:CE:8C:17:10:35:64:0F:B3:01:55:12:C1:D8:1E:25:62
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 01941F8C60F2441869DAC2DCA6DBA3CFF5FF
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa
Signing time: Wed 01 Jan 2025 01:48:01 +0000
ROA not before: Wed 01 Jan 2025 01:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200697
IP address blocks: 185.98.24.0/24 maxlen: 24
185.98.25.0/24 maxlen: 24
185.98.26.0/24 maxlen: 24
185.98.27.0/24 maxlen: 24
2a04:7800::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:60:f2:44:18:69:da:c2:dc:a6:db:a3:cf:f5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5925a4c8ce8c171035640fb3015512c1d81e2562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:88:e4:68:b3:7a:91:b6:fc:62:a4:1b:8d:
d1:9b:ef:0f:ad:7d:6e:62:1b:a2:3d:63:1c:d9:b4:
ee:90:22:77:a8:3c:76:ad:6b:bc:85:fd:ac:a7:53:
c0:aa:dc:c4:00:07:6f:09:cb:5d:79:42:2e:f6:22:
f5:3e:5e:4d:12:9a:54:e7:5d:62:4c:96:c1:59:5b:
6b:e1:e8:99:1f:f1:aa:e4:4a:82:66:99:f4:e4:7c:
73:e5:2a:1c:90:7f:8d:9f:7c:73:1c:29:d9:75:c9:
91:70:c7:f7:be:db:e2:bf:9d:98:cd:29:b2:da:bd:
e7:ae:03:35:b6:13:06:e6:f8:85:2e:de:72:73:5e:
97:40:fc:70:5f:4d:ce:b5:42:74:7b:55:aa:4a:ff:
dd:30:a5:32:d5:2a:e0:c0:0b:6f:cb:1e:96:a4:d9:
9e:22:ec:f5:97:c7:b8:71:d6:79:88:89:06:28:96:
f5:ec:e3:db:24:04:92:a3:5c:d7:b9:b3:23:c6:ec:
f6:83:be:08:f8:79:16:94:ca:84:aa:49:de:e4:25:
e0:36:91:20:a4:ad:c5:a4:f5:86:21:05:92:b3:08:
ca:38:19:d1:56:11:f7:cf:3a:a1:ae:3f:39:46:06:
be:13:ac:75:1d:77:d8:08:d2:10:76:4e:1b:3b:b6:
96:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:25:A4:C8:CE:8C:17:10:35:64:0F:B3:01:55:12:C1:D8:1E:25:62
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.24.0/22
IPv6:
2a04:7800::/29
Signature Algorithm: sha256WithRSAEncryption
0c:6a:d8:e5:88:e9:f2:63:dc:af:fa:b1:ff:f8:47:b1:41:8a:
ac:d5:f4:0d:0c:ad:cd:86:49:bf:9d:e7:63:ce:63:7b:c8:01:
a6:da:cd:56:5a:37:ae:03:e8:d9:02:94:71:ba:ad:5a:b2:67:
d7:ee:6d:5c:23:4a:fc:ea:28:a2:9d:17:3b:8f:6b:9e:74:76:
dd:90:b2:b3:ee:9e:6f:04:25:52:c5:81:12:33:55:3a:74:ba:
1d:a3:79:eb:c8:2e:00:49:38:64:c7:ce:42:c4:3b:4b:4c:61:
48:ea:8f:88:6b:9a:1d:73:5f:f9:27:11:be:a9:71:c9:12:4c:
51:80:d5:e7:c0:49:ae:40:f4:d4:0a:9b:9e:4d:8d:56:61:86:
be:b7:28:2b:76:93:bb:88:e8:a6:f4:ad:12:59:b6:1c:c9:f6:
64:68:14:a4:45:98:fa:43:89:98:73:1c:e7:12:fb:fd:7a:2b:
56:15:5a:23:80:d2:e8:96:95:b5:96:29:3f:2a:58:5e:07:d1:
ea:f8:70:ea:b2:a3:b2:65:d1:c8:f1:a9:20:20:70:69:68:f3:
7a:2f:f5:c5:16:62:0d:c6:68:c6:2b:f2:90:34:6c:7e:b4:a3:
70:18:03:9b:63:bd:ac:74:d5:09:26:94:a8:ad:ad:9a:eb:04:
17:0b:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net