Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/WHDVZjGugRwMeX1uyc1OWsTDifc.roa
File: WHDVZjGugRwMeX1uyc1OWsTDifc.roa (raw, json)
Hash identifier: q7iXJroGzHCQ0YLFY1CubEz4X0PbSryw0NA9jPo0jEg=
Subject key identifier: 58:70:D5:66:31:AE:81:1C:0C:79:7D:6E:C9:CD:4E:5A:C4:C3:89:F7
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01941FF9FF74B2E5CF16A4134F7D103E6577
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/WHDVZjGugRwMeX1uyc1OWsTDifc.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39361
IP address blocks: 46.231.227.0/24 maxlen: 24
46.231.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:ff:74:b2:e5:cf:16:a4:13:4f:7d:10:3e:65:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5870d56631ae811c0c797d6ec9cd4e5ac4c389f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:bb:31:12:a2:6a:c5:dd:90:87:9a:16:19:
e6:f7:da:27:74:43:6a:61:cd:c3:27:30:5e:49:77:
ec:37:59:a8:b2:27:74:5e:27:52:6c:82:be:46:33:
a8:da:e1:36:35:79:c4:98:c1:bb:42:89:19:ed:4d:
14:b8:f9:6b:b8:60:16:75:e6:26:08:f9:ed:41:4b:
28:4c:ec:54:d7:44:0f:6e:d8:7a:0a:e5:76:2e:73:
10:11:4a:a4:9b:ba:2f:d0:6b:ad:ec:04:32:22:1c:
05:56:35:72:95:f5:a3:ef:f4:7d:cf:56:32:e0:c7:
b2:11:2c:8a:40:d0:ce:46:bc:eb:d9:56:77:d6:e5:
ac:dd:be:1f:38:bc:76:12:8d:97:6f:1e:29:d0:ee:
c1:c4:b9:44:ad:b5:5b:52:01:af:c3:21:6c:6c:42:
c8:8b:d6:cc:27:64:a7:9c:ed:5f:bf:da:0b:06:cf:
63:9f:54:8e:c7:43:ae:f1:71:f7:fa:be:67:b5:ef:
18:cc:11:73:46:b4:a5:4b:04:3b:4f:dd:38:19:f7:
5a:65:01:f3:f0:ba:b5:d6:eb:e1:29:47:fa:c4:bd:
e6:16:c1:9a:35:1d:bc:9a:c2:9e:b1:8d:82:93:ff:
9e:a6:1b:61:e0:ed:14:d5:70:2b:26:e2:59:02:f2:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:70:D5:66:31:AE:81:1C:0C:79:7D:6E:C9:CD:4E:5A:C4:C3:89:F7
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/WHDVZjGugRwMeX1uyc1OWsTDifc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.227.0/24
46.231.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:44:ed:04:0e:05:96:38:44:3a:60:da:f3:97:76:d5:31:46:
06:ed:f1:47:cc:fa:6d:0d:bc:9d:94:a1:a3:f0:ec:47:cf:50:
24:4a:94:f2:0f:ec:5b:df:c0:f9:d5:9e:42:d9:f8:6d:5b:e1:
23:c8:63:f8:50:c2:36:6b:cc:90:a2:12:c1:df:0d:de:aa:fc:
48:c0:39:45:5e:60:e3:1e:1d:59:ef:3c:d9:0d:71:1e:f5:21:
d5:c7:24:7e:cb:b6:22:fd:79:b7:26:d6:37:be:be:4d:c5:79:
19:8b:db:cd:a9:e9:45:0e:b0:1a:87:4a:ac:3d:43:86:f4:1f:
f0:8e:df:8d:a7:6d:bd:1f:c5:9e:75:0e:3b:5a:b3:4d:da:ee:
2b:45:2c:6b:36:48:a4:e4:67:76:9e:c4:b5:b1:83:d4:f9:32:
28:6b:c9:5f:f9:6b:01:16:df:0e:f0:d8:4d:3a:d0:6f:59:27:
91:f6:65:d4:f6:8d:78:12:52:71:54:34:4c:f6:2c:98:bc:33:
53:18:b4:a2:41:81:25:e5:18:26:ed:81:58:b1:de:ea:29:bf:
5b:16:a6:aa:15:aa:56:bf:80:46:3a:92:05:3d:c1:4a:35:d0:
8e:40:ad:80:dc:15:d8:f0:ec:29:b8:c3:8b:69:a0:53:30:00:
41:43:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:55:17 2025 by rpki-client on console.sobornost.net