Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/wvWJOusH9NjJmboQYN_96qUtjQA.roa
File: wvWJOusH9NjJmboQYN_96qUtjQA.roa (raw, json)
Hash identifier: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=
Subject key identifier: C2:F5:89:3A:EB:07:F4:D8:C9:99:BA:10:60:DF:FD:EA:A5:2D:8D:00
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 01942825419CC12BE8464E2760B12DBB49F7
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/wvWJOusH9NjJmboQYN_96qUtjQA.roa
Signing time: Thu 02 Jan 2025 17:51:57 +0000
ROA not before: Thu 02 Jan 2025 17:51:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31543
IP address blocks: 91.217.38.0/23 maxlen: 24
109.69.168.0/21 maxlen: 24
185.58.52.0/22 maxlen: 24
185.221.76.0/22 maxlen: 24
2a02:61e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:41:9c:c1:2b:e8:46:4e:27:60:b1:2d:bb:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Jan 2 17:51:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2f5893aeb07f4d8c999ba1060dffdeaa52d8d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:88:32:cd:3d:30:43:82:19:0c:d0:a7:d1:
f4:12:ea:59:41:d4:08:89:c3:2d:04:f9:7d:b8:af:
c2:05:b7:2d:11:f7:42:59:32:1a:ea:d2:a9:a5:3d:
71:93:4a:0c:2f:6f:ec:b8:ee:10:1a:e8:9e:94:f8:
7c:95:6d:2e:2d:88:84:16:8a:0c:94:7c:45:c7:27:
8d:68:01:2f:76:7b:ec:fe:05:13:39:fa:4c:d2:fa:
14:2e:8b:4c:e8:83:06:c6:d6:19:a3:7f:86:4b:bf:
59:08:9b:e4:d5:7d:fd:eb:de:c7:c0:8d:bd:96:51:
d5:ab:ba:93:f8:51:65:0b:c4:58:3e:ab:ed:6a:46:
69:64:b6:b7:e3:34:52:e5:99:1d:36:01:9a:3f:29:
7f:7f:5a:e0:3a:8a:14:7e:86:77:a2:60:68:9a:ed:
0b:f0:95:e3:34:4f:97:ec:d6:8c:10:62:e2:56:47:
75:ed:b0:19:a9:53:54:76:6d:a4:a2:d5:5e:5f:6d:
be:20:7f:08:e4:07:16:5b:53:aa:d3:7c:7c:da:42:
63:fd:37:de:e4:1b:40:b0:c4:85:dc:4f:f7:17:89:
10:1a:35:e7:87:34:25:af:7f:f0:59:95:32:88:97:
f5:9b:14:b1:b9:9e:aa:62:37:53:dc:45:16:11:b1:
a7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:89:3A:EB:07:F4:D8:C9:99:BA:10:60:DF:FD:EA:A5:2D:8D:00
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/wvWJOusH9NjJmboQYN_96qUtjQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.38.0/23
109.69.168.0/21
185.58.52.0/22
185.221.76.0/22
IPv6:
2a02:61e0::/32
Signature Algorithm: sha256WithRSAEncryption
20:e6:0b:8f:79:5a:42:ca:70:5d:9b:49:45:ac:63:46:f8:4f:
ea:94:de:b2:8f:cb:2c:19:df:04:58:26:29:98:0c:ea:c2:c7:
4c:73:42:9c:a6:c4:a6:ad:62:24:43:94:10:e0:ab:5f:45:be:
89:3f:d4:a0:0c:13:86:35:eb:2f:59:07:1e:1b:e6:bd:2c:e1:
1f:7d:07:75:13:e7:44:57:be:2b:e0:2d:79:cf:69:66:79:5b:
e7:0d:6b:7d:0d:44:80:27:1d:84:46:1e:14:dc:95:04:24:8c:
5e:9b:cc:ec:c6:00:95:e6:f1:e0:07:02:ff:a1:32:5b:f3:46:
c1:92:1f:6a:ae:a9:69:19:96:25:5d:32:39:f7:10:ad:07:43:
d9:d1:3d:6c:40:89:d6:92:3e:f6:10:26:4a:90:64:37:de:42:
b3:be:1e:d2:12:7d:c2:25:73:b9:fa:b7:98:75:71:fc:39:fc:
2c:1e:80:74:2f:14:d6:4d:3e:09:56:ab:02:ce:ae:27:76:f5:
89:9d:de:ab:13:74:f0:7a:0c:a5:d9:c7:c5:b3:42:c4:86:43:
91:0c:bb:22:34:75:6e:21:5d:5f:2b:ae:c2:26:39:67:26:89:
7d:f9:63:1a:ad:fc:c0:1a:20:7f:26:bd:28:c3:14:84:af:b6:
32:45:45:7c
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQoJUGcwSvoRk4nYLEtu0n3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDAzZTcxZWY4YzNkOTczY2U3NmQ0MjA0MmY3ZGZhMTg5
MTY4OGIwHhcNMjUwMTAyMTc1MTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmY1ODkzYWViMDdmNGQ4Yzk5OWJhMTA2MGRmZmRlYWE1MmQ4ZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf+IMs09MEOCGQzQp9H0EupZQdQI
icMtBPl9uK/CBbctEfdCWTIa6tKppT1xk0oML2/suO4QGuielPh8lW0uLYiEFooM
lHxFxyeNaAEvdnvs/gUTOfpM0voULotM6IMGxtYZo3+GS79ZCJvk1X39697HwI29
llHVq7qT+FFlC8RYPqvtakZpZLa34zRS5ZkdNgGaPyl/f1rgOooUfoZ3omBomu0L
8JXjNE+X7NaMEGLiVkd17bAZqVNUdm2kotVeX22+IH8I5AcWW1Oq03x82kJj/Tfe
5BtAsMSF3E/3F4kQGjXnhzQlr3/wWZUyiJf1mxSxuZ6qYjdT3EUWEbGnRQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFML1iTrrB/TYyZm6EGDf/eqlLY0AMB8GA1UdIwQY
MBaAFAtAPnHvjD2XPOdtQgQvffoYkWiLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQt
MGM2ODc3N2E0MDE5LzEvd3ZXSk91c0g5TmpKbWJvUVlOXzk2cVV0alFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9lZmY1OTItMWE0Ny00MGJjLTg0ZDQtMGM2ODc3N2E0MDE5
LzEvQzBBLWNlLU1QWmM4NTIxQ0JDOTktaGlSYUlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW9kmAwQD
bUWoAwQCuTo0AwQCud1MMA0EAgACMAcDBQAqAmHgMA0GCSqGSIb3DQEBCwUAA4IB
AQAg5guPeVpCynBdm0lFrGNG+E/qlN6yj8ssGd8EWCYpmAzqwsdMc0KcpsSmrWIk
Q5QQ4KtfRb6JP9SgDBOGNesvWQceG+a9LOEffQd1E+dEV74r4C15z2lmeVvnDWt9
DUSAJx2ERh4U3JUEJIxem8zsxgCV5vHgBwL/oTJb80bBkh9qrqlpGZYlXTI59xCt
B0PZ0T1sQInWkj72ECZKkGQ33kKzvh7SEn3CJXO5+reYdXH8OfwsHoB0LxTWTT4J
VqsCzq4ndvWJnd6rE3Twegyl2cfFs0LEhkORDLsiNHVuIV1fK67CJjlnJol9+WMa
rfzAGiB/Jr0owxSEr7YyRUV8
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net