Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WJSWhFKwx0zrp3ID5lpwaqknUQo.roa
File: WJSWhFKwx0zrp3ID5lpwaqknUQo.roa (raw, json)
Hash identifier: qqP2aJkfN3TddAmP37tw06S3FvfxygpxI2ezncvqlgw=
Subject key identifier: 58:94:96:84:52:B0:C7:4C:EB:A7:72:03:E6:5A:70:6A:A9:27:51:0A
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAABEF47A15E14235D1D822572394D
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WJSWhFKwx0zrp3ID5lpwaqknUQo.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207676
IP address blocks: 46.243.179.0/24 maxlen: 24
141.101.249.0/24 maxlen: 24
178.170.249.0/24 maxlen: 24
178.170.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ab:ef:47:a1:5e:14:23:5d:1d:82:25:72:39:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5894968452b0c74ceba77203e65a706aa927510a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:f3:2a:3b:c7:af:32:dd:11:43:1a:78:96:
9b:23:27:d5:7b:6a:e8:6d:d7:78:66:0b:cf:3d:e9:
e4:eb:73:ec:3f:55:aa:fc:df:52:51:91:ce:11:20:
df:5c:09:ef:55:c7:92:0b:09:0e:83:53:9c:56:c0:
77:5b:32:b9:90:b1:51:12:e0:8f:14:b3:f3:23:49:
27:05:87:ee:b5:20:a6:52:4e:58:3b:bf:2e:18:0f:
7d:67:c1:29:ac:f1:fe:ed:82:b3:1f:d5:79:a4:84:
dc:25:ab:f5:65:8a:a1:77:77:cc:6d:2b:17:e5:86:
6d:34:ab:fe:a8:c1:1e:0b:7b:85:c3:54:d6:70:b0:
6c:2f:44:b0:3e:8c:04:a9:ed:f9:d1:c1:3b:ec:bd:
b7:b6:e9:65:cb:9d:ad:f3:f2:eb:e2:0b:9d:86:56:
0f:08:3b:48:9a:42:c6:10:f3:e4:ff:fd:eb:46:a3:
cf:05:54:29:48:8e:d8:2a:cc:90:9c:e1:9a:46:36:
75:ba:7e:34:fb:61:bd:4a:3e:98:7b:93:c0:03:ba:
69:7f:69:d8:07:70:32:e4:60:dd:48:25:70:75:14:
28:d1:6c:db:84:ea:9c:02:ed:3d:91:bf:f0:d0:97:
0f:dc:0d:33:13:a2:1e:bc:e5:05:3c:1d:f1:80:ce:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:96:84:52:B0:C7:4C:EB:A7:72:03:E6:5A:70:6A:A9:27:51:0A
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WJSWhFKwx0zrp3ID5lpwaqknUQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.179.0/24
141.101.249.0/24
178.170.249.0/24
178.170.251.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:2f:ca:3f:1c:fb:33:01:e3:a4:5e:d4:3e:0a:8e:09:40:f4:
6b:37:92:df:8e:2f:20:6e:5b:54:e2:74:0c:06:23:fc:5a:16:
bc:14:83:53:a9:9b:25:48:c5:04:1b:9c:71:3b:33:5a:98:3c:
ae:f2:0f:9d:b8:88:eb:67:ad:6f:36:f8:09:8d:d4:2e:e0:5d:
a6:d2:56:46:27:05:0a:36:a1:70:bb:0b:26:39:85:52:70:50:
46:7a:c0:15:94:c5:7a:f7:ee:74:5a:07:31:14:dc:95:7f:a9:
f9:29:24:4d:52:db:b6:a5:f2:e5:be:5e:e6:b2:81:41:0d:98:
aa:5c:14:6b:f2:83:22:b8:e0:38:01:8f:97:0d:08:2a:55:36:
ee:fa:37:b4:7b:b9:4b:6b:06:67:9f:fb:4d:da:34:9a:4e:44:
ec:86:9c:46:09:ea:90:e4:90:d6:6a:03:1f:ec:27:ea:1b:a7:
2f:6d:f6:58:e1:19:0c:91:37:1b:4c:1c:e0:c0:3f:5c:47:5f:
d9:1c:5e:a9:c0:8f:a3:ea:95:99:7e:0f:49:63:9d:a8:f0:d2:
6e:aa:b7:0b:f5:7a:39:56:64:c1:8c:0f:6f:0b:92:4a:75:11:
43:0e:ff:60:aa:15:6c:4a:f0:2c:7e:43:b2:81:97:71:6e:ec:
5f:18:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:55 2025 by rpki-client on console.sobornost.net