Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/PW17_Y421OHbEdWMpqGOAItDAMQ.roa
File: PW17_Y421OHbEdWMpqGOAItDAMQ.roa (raw, json)
Hash identifier: L2gpot5aAwJ9/O+fD4LlOhf1tqLhMij+IcuFZyDR7dA=
Subject key identifier: 3D:6D:7B:FD:8E:36:D4:E1:DB:11:D5:8C:A6:A1:8E:00:8B:43:00:C4
Certificate issuer: /CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Certificate serial: 0194258E86028C5FEA533CCC5F00D746FC09
Authority key identifier: A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/PW17_Y421OHbEdWMpqGOAItDAMQ.roa
Signing time: Thu 02 Jan 2025 05:48:04 +0000
ROA not before: Thu 02 Jan 2025 05:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35565
IP address blocks: 194.187.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:86:02:8c:5f:ea:53:3c:cc:5f:00:d7:46:fc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86057859d1660e8d872979ee6d6a6b2c433a305
Validity
Not Before: Jan 2 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6d7bfd8e36d4e1db11d58ca6a18e008b4300c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:8f:fa:82:a9:a7:10:5c:58:c3:a3:d3:47:
06:69:72:98:34:54:c7:88:f9:17:25:5e:d1:f4:8c:
cd:1b:fc:91:90:a1:a5:b2:c8:98:94:d5:62:f7:bb:
93:64:80:f1:33:d9:fc:2e:e4:9d:9c:8f:75:60:87:
fa:4f:5b:42:d4:43:63:c6:57:c8:f4:20:8c:f2:a6:
55:0a:8c:f9:cd:27:0e:96:63:14:57:8e:7b:ba:bf:
cd:1d:8b:7e:7f:aa:fc:22:cf:53:9c:de:77:56:52:
70:d4:57:95:e9:42:a4:38:d3:48:9c:b6:53:ef:e1:
5d:4b:cd:b2:2f:77:6a:68:95:70:3f:5a:6c:f3:c6:
9f:19:77:c4:1f:c8:26:50:cc:73:de:71:8a:5d:f7:
cb:1b:e5:6a:fe:3e:09:1b:2c:2d:a4:fc:58:9a:07:
40:8f:b5:e4:b4:68:ec:cf:dd:a9:af:4d:4c:73:a3:
c2:f6:08:2a:b2:43:64:f9:ab:04:eb:d6:fe:fd:b7:
a0:10:f0:df:1a:22:cf:f3:77:b9:be:93:3c:9a:7e:
ee:c0:60:4f:2c:d3:e5:0e:d8:34:db:51:0c:67:2d:
82:24:9a:bd:d3:a6:e7:03:d2:db:bf:80:bc:80:ee:
98:14:2e:a6:dd:e2:fa:3f:0f:7b:5b:32:3f:76:4a:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:7B:FD:8E:36:D4:E1:DB:11:D5:8C:A6:A1:8E:00:8B:43:00:C4
X509v3 Authority Key Identifier:
keyid:A8:60:57:85:9D:16:60:E8:D8:72:97:9E:E6:D6:A6:B2:C4:33:A3:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBXhZ0WYOjYcpee5tamssQzowU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/PW17_Y421OHbEdWMpqGOAItDAMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/21345b-4de7-4086-9abf-d4edc20cc1ac/1/qGBXhZ0WYOjYcpee5tamssQzowU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.60.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:89:0c:c0:a4:76:e4:fb:e2:8f:50:e0:01:d2:f1:b0:ef:16:
57:ff:39:65:85:52:52:a4:c7:ac:97:46:49:27:f8:22:00:c5:
d8:b8:e6:3b:aa:81:03:34:c3:23:1d:bb:53:f4:44:08:b5:b4:
38:84:b1:d7:98:a9:dc:fa:2d:56:ee:cc:be:d1:99:45:95:34:
12:f4:80:b3:00:fd:4e:1f:bc:aa:90:32:d7:79:6e:08:34:00:
92:c9:98:28:0a:1a:ed:0f:45:f4:91:13:db:22:9e:d4:89:2a:
74:e1:40:ef:22:95:58:4f:f7:c9:f6:eb:81:b6:66:40:30:19:
d1:f4:07:b1:86:07:1b:0d:ca:eb:1a:58:c4:c3:7c:83:c6:d4:
2f:29:2b:1f:18:11:d1:98:41:a2:cf:04:e7:44:ce:55:19:7f:
58:9b:8e:c9:34:d0:0d:ed:47:8c:d0:55:4d:5d:c1:db:90:67:
47:bf:f8:01:8c:50:09:d5:60:00:53:8e:be:7c:ea:91:2e:e7:
db:01:cd:a3:f8:1c:f0:d0:1c:37:0d:a4:18:f5:bf:a6:77:30:
90:5e:3a:3b:3d:e4:5f:b0:37:0e:38:ca:7f:3d:82:5c:d0:11:
3e:e6:b4:f5:b1:64:4f:23:2a:80:53:33:2e:b0:df:f6:a7:a8:
8b:cb:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:54 2025 by rpki-client on console.sobornost.net