Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/bWzRkWCt3v3bm-IZIROioFCJ8mo.roa
File: bWzRkWCt3v3bm-IZIROioFCJ8mo.roa (raw, json)
Hash identifier: Gh5JxyL071JSfkk/OFs2Jh7lq9MVbiHj6edZCvfMErQ=
Subject key identifier: 6D:6C:D1:91:60:AD:DE:FD:DB:9B:E2:19:21:13:A2:A0:50:89:F2:6A
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 0194266BB211B203DD517CD53CDA7C4D8081
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/bWzRkWCt3v3bm-IZIROioFCJ8mo.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12360
IP address blocks: 5.57.192.0/21 maxlen: 24
77.236.104.0/21 maxlen: 24
77.236.112.0/21 maxlen: 24
79.171.176.0/21 maxlen: 24
82.115.96.0/19 maxlen: 24
93.119.240.0/20 maxlen: 24
178.248.216.0/21 maxlen: 24
185.5.168.0/22 maxlen: 24
185.39.108.0/22 maxlen: 24
192.54.67.0/24 maxlen: 24
192.54.68.0/22 maxlen: 24
212.7.160.0/19 maxlen: 24
217.17.16.0/20 maxlen: 24
2a01:5580::/32 maxlen: 48
2a02:1628::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b2:11:b2:03:dd:51:7c:d5:3c:da:7c:4d:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d6cd19160addefddb9be2192113a2a05089f26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:0f:e6:9f:2c:17:f3:36:84:6e:71:15:47:
3c:6a:a9:9a:60:f0:c5:ca:8a:d9:4f:4d:32:e8:e0:
e3:82:7a:20:aa:13:e5:96:18:30:89:71:f7:fa:ef:
66:39:cc:a1:0c:58:31:01:0b:ca:7f:7c:ef:84:89:
5c:f6:ae:cf:08:9e:50:0b:8b:91:28:e9:90:82:61:
77:e9:43:c2:74:f4:e9:c4:2f:b9:0b:52:dc:f3:6f:
46:2f:a6:65:5c:b6:b7:b3:fd:3a:c6:f5:4e:00:89:
51:cd:9f:ff:61:e4:37:9a:a5:64:7f:26:e1:2b:c9:
8b:9e:f1:60:8e:43:4a:45:b7:24:c5:10:be:4c:13:
1b:7f:ce:64:d0:24:01:fe:69:f5:e3:4f:ed:bf:10:
d0:3d:56:f1:0f:b4:a2:cd:c1:4c:41:50:e6:09:d0:
a4:51:d1:a1:43:24:0c:e2:87:c7:7e:9f:97:38:eb:
4e:27:e5:bd:9a:e1:32:4e:e5:4f:a4:84:ef:37:f1:
89:4b:f9:92:4c:ce:b9:24:43:eb:43:cb:2c:02:56:
8c:57:0c:63:eb:29:0e:e3:fe:c4:1e:42:86:a8:ce:
59:bd:7a:4e:2c:91:7f:0f:0d:c8:bf:b3:fd:5a:91:
9a:c7:1e:ed:dd:38:9b:6a:d8:69:23:dd:6e:a6:85:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6C:D1:91:60:AD:DE:FD:DB:9B:E2:19:21:13:A2:A0:50:89:F2:6A
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/bWzRkWCt3v3bm-IZIROioFCJ8mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.192.0/21
77.236.104.0-77.236.119.255
79.171.176.0/21
82.115.96.0/19
93.119.240.0/20
178.248.216.0/21
185.5.168.0/22
185.39.108.0/22
192.54.67.0-192.54.71.255
212.7.160.0/19
217.17.16.0/20
IPv6:
2a01:5580::/32
2a02:1628::/32
Signature Algorithm: sha256WithRSAEncryption
3b:16:69:a8:98:c4:31:58:9d:e2:5e:19:7a:fc:1d:39:d8:bd:
d1:b2:1d:12:20:02:16:c3:10:ca:d8:c9:3a:20:51:60:93:bd:
6a:c4:98:85:6b:ce:72:d2:04:02:5f:77:f2:da:84:bd:6a:8b:
71:24:e3:b5:7a:ed:be:6f:9b:db:39:c7:67:71:76:53:8f:87:
96:b9:40:fc:4d:c6:76:00:49:e0:70:f0:0e:2b:fe:60:89:76:
c3:19:72:c9:9d:cc:60:8d:ed:87:26:f5:16:11:48:ef:8a:ea:
e4:2c:65:40:cc:20:07:8c:5c:3e:5d:fd:dc:68:8d:65:c5:b6:
c6:c1:b5:9e:a1:18:e3:1f:f2:b6:3d:6a:15:bb:8b:5f:f0:db:
35:3c:50:bc:15:be:d5:3b:b7:d3:75:41:3a:36:9b:36:e6:b5:
8d:72:9e:cc:f3:f1:ca:bb:ee:08:00:1c:78:aa:86:df:09:1b:
ba:19:ef:c2:30:60:d5:f2:2b:cb:37:f6:39:99:16:2f:c9:3b:
eb:74:d8:51:65:ff:a0:1f:e2:d2:e3:b9:32:56:d9:84:de:f1:
63:f9:02:a2:e9:6a:a9:3b:28:da:4f:ae:95:aa:59:69:6e:49:
ed:1a:77:1b:38:9b:9e:3a:f1:83:7e:eb:c0:bb:bf:68:79:9b:
7a:dc:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:17 2025 by rpki-client on console.sobornost.net