Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wiV4TDNsR74iEKWKdqKC1WnWjVM.roa
File: wiV4TDNsR74iEKWKdqKC1WnWjVM.roa (raw, json)
Hash identifier: 7NTA9SoQpTAN6zxwmsDrAWV5MFVNxDfHXaO3bzVsFMw=
Subject key identifier: C2:25:78:4C:33:6C:47:BE:22:10:A5:8A:76:A2:82:D5:69:D6:8D:53
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019386793338D69F5BE7A64F10A16E2D9206
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wiV4TDNsR74iEKWKdqKC1WnWjVM.roa
Signing time: Mon 02 Dec 2024 08:25:10 +0000
ROA not before: Mon 02 Dec 2024 08:25:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204582
IP address blocks: 62.76.248.0/24 maxlen: 24
62.76.249.0/24 maxlen: 24
62.76.250.0/24 maxlen: 24
62.76.251.0/24 maxlen: 24
62.76.252.0/24 maxlen: 24
194.85.31.0/24 maxlen: 24
194.85.77.0/24 maxlen: 24
194.85.78.0/24 maxlen: 24
194.85.79.0/24 maxlen: 24
212.193.116.0/24 maxlen: 24
212.193.117.0/24 maxlen: 24
212.193.118.0/24 maxlen: 24
212.193.119.0/24 maxlen: 24
212.193.120.0/24 maxlen: 24
212.193.121.0/24 maxlen: 24
212.193.122.0/24 maxlen: 24
212.193.123.0/24 maxlen: 24
212.193.124.0/24 maxlen: 24
212.193.125.0/24 maxlen: 24
212.193.126.0/24 maxlen: 24
212.193.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:79:33:38:d6:9f:5b:e7:a6:4f:10:a1:6e:2d:92:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Dec 2 08:25:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c225784c336c47be2210a58a76a282d569d68d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:db:db:1f:10:e4:10:fd:c8:47:bb:c8:e8:
9e:dd:f0:e4:22:01:c4:35:45:32:f6:68:28:d4:d4:
9f:2a:42:d1:b6:2c:b0:5d:19:e4:11:ed:9c:c9:eb:
78:be:82:49:17:9a:6d:50:a1:0f:72:14:13:88:df:
16:ae:c8:56:7d:6a:31:46:58:05:eb:46:98:6c:9b:
4a:3b:53:f3:60:f3:6d:81:d8:27:20:1b:4f:aa:a6:
5a:a2:b0:1e:64:74:ab:91:8f:6f:aa:0b:1d:d6:5e:
d4:48:ce:18:dd:63:aa:84:38:e0:80:13:97:9c:69:
c5:c3:5f:7f:82:21:36:ad:95:53:ef:7f:d6:bb:c8:
a0:5f:3e:14:a7:ba:66:64:e2:4f:22:96:7f:fa:f2:
62:ac:e9:09:2a:61:4c:26:f2:70:37:ee:09:71:da:
c0:32:76:d3:7e:da:fa:d8:aa:21:95:0c:1e:6b:56:
9e:ac:67:bc:8f:88:20:44:01:ad:c8:85:28:93:cb:
cb:04:d3:f9:e7:c4:20:68:09:b3:a9:a0:cb:f7:e3:
97:d4:5f:2e:5f:66:7e:9c:0d:4f:42:f2:5b:b7:82:
ae:92:21:cc:7d:37:3f:02:24:ce:2f:dc:5b:dd:54:
05:0d:52:60:fb:5f:44:09:5c:db:f1:8f:61:26:04:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:25:78:4C:33:6C:47:BE:22:10:A5:8A:76:A2:82:D5:69:D6:8D:53
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/wiV4TDNsR74iEKWKdqKC1WnWjVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.248.0-62.76.252.255
194.85.31.0/24
194.85.77.0-194.85.79.255
212.193.116.0-212.193.127.255
Signature Algorithm: sha256WithRSAEncryption
0c:96:1f:f2:f3:19:d6:bd:38:f5:95:6b:49:65:77:ab:1f:ce:
ae:7a:e4:e9:83:52:2b:3c:19:b9:03:94:4a:53:7b:62:5f:4e:
66:eb:64:f5:a8:61:17:3e:b9:dc:2a:b2:4f:de:f5:c6:6b:e8:
cc:fe:32:dc:86:df:08:1d:6f:31:90:5a:e5:fa:11:52:98:d8:
d2:52:fb:c4:db:e0:8f:db:d5:59:38:d8:95:9a:8c:9f:75:56:
35:cb:be:07:9c:20:1e:a8:46:18:b6:25:56:68:4f:29:e6:18:
72:25:38:f6:c6:f1:3d:8f:23:5b:73:2b:83:08:3b:66:e6:a5:
39:c5:e0:ca:c3:b0:b0:1e:bf:b3:72:fb:60:b4:0f:f0:41:a9:
08:06:44:7c:fd:10:0e:d4:41:98:3c:ac:9e:08:e2:60:ae:d9:
af:ec:b1:07:5e:7e:7d:93:e3:11:3d:72:19:84:59:c8:c9:e3:
26:fa:3a:a4:02:2c:52:aa:c4:70:4e:09:29:1e:59:c5:ba:06:
d9:5c:ca:c8:b8:d1:6c:4f:50:19:f5:b1:53:ba:7b:05:b6:cd:
56:bf:52:10:c0:91:55:2d:d5:05:12:0c:c1:38:5e:c2:c4:87:
73:b9:9d:f8:40:85:c5:b3:fe:4f:55:c6:fa:28:0b:f5:d8:44:
50:8e:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:23 2024 by rpki-client on console.sobornost.net