Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/WH3ATFl5oOvMW11PuPzK34ZYhKM.roa
File: WH3ATFl5oOvMW11PuPzK34ZYhKM.roa (raw, json)
Hash identifier: jp96q+m3VdPl0zQPj7Pq6mGipum7ll7pnBOC/XlQbqw=
Subject key identifier: 58:7D:C0:4C:59:79:A0:EB:CC:5B:5D:4F:B8:FC:CA:DF:86:58:84:A3
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 0194274642943AA37FBCB0EF19DC116228F4
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/WH3ATFl5oOvMW11PuPzK34ZYhKM.roa
Signing time: Thu 02 Jan 2025 13:48:23 +0000
ROA not before: Thu 02 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 193.111.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:42:94:3a:a3:7f:bc:b0:ef:19:dc:11:62:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=587dc04c5979a0ebcc5b5d4fb8fccadf865884a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:47:b1:e6:48:31:90:28:4d:5e:f6:2e:21:
d6:dd:6c:2a:2b:2f:68:16:de:e0:77:e1:05:25:61:
4a:b2:76:60:f5:fd:7f:40:df:f2:80:da:26:33:08:
7e:79:d8:35:8d:57:4d:a7:a9:93:02:e3:e8:46:2b:
4f:c9:b6:a2:70:02:59:d3:da:3f:18:67:4b:93:a3:
39:42:11:13:fd:5f:e0:17:cb:9f:01:ff:e0:fb:66:
1f:be:00:e3:f9:90:06:6d:e1:64:31:42:15:7c:91:
0c:21:ca:d1:4b:78:58:5a:2e:a8:1b:35:71:8e:c1:
11:02:6f:9a:6a:26:dc:02:07:f4:25:b7:05:99:4b:
0c:1d:36:da:77:ef:06:91:ba:24:f1:e8:25:01:8c:
c8:2c:e3:45:46:5b:e1:b3:5d:b9:a9:6e:62:c3:67:
53:d5:33:73:38:de:85:0a:4e:80:70:8c:09:e1:c5:
80:cc:ee:26:82:9a:57:fd:73:53:70:b7:4a:dd:d7:
ac:12:23:39:14:b3:46:9d:6e:97:6b:ec:3c:e8:8f:
76:42:99:63:7a:83:e5:75:54:ee:3c:03:3b:37:0b:
13:85:17:42:4d:bf:72:e9:dd:b0:35:a8:fa:b1:d5:
5c:47:61:82:bf:90:52:29:7e:76:6a:8b:6d:8c:3c:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7D:C0:4C:59:79:A0:EB:CC:5B:5D:4F:B8:FC:CA:DF:86:58:84:A3
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/WH3ATFl5oOvMW11PuPzK34ZYhKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.250.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:59:12:dd:1d:0e:3f:25:86:f7:c6:8b:59:fd:bf:e4:26:c2:
2d:3c:8f:a3:cf:95:93:a4:5b:40:67:f3:3c:ee:2d:49:e4:2e:
eb:b9:10:65:2f:c1:fc:32:8c:d3:49:47:fd:0b:ab:81:ce:d1:
6e:aa:0c:ff:95:5c:b5:56:cb:47:db:97:6d:a5:9d:5b:f6:6b:
48:9c:af:b7:b7:61:77:9b:75:32:ae:a7:8d:c9:03:3b:b2:3b:
70:c0:09:b1:c7:41:3b:fe:cb:a2:9d:a9:ea:6f:ec:87:cc:ff:
f3:56:f3:23:50:f5:02:d9:7c:79:0c:29:11:80:2e:66:d9:69:
4c:34:05:0f:43:79:9c:7e:54:79:b6:c7:e4:96:df:7a:37:1d:
b9:20:c8:f0:e0:ee:7e:d1:3c:f8:ad:6d:5c:b7:5e:da:6c:27:
e3:57:24:d1:f8:0b:28:35:ad:07:db:73:e6:a2:22:64:38:52:
80:aa:64:a2:86:30:c8:ae:46:b0:81:79:44:1f:4e:86:ce:f2:
84:e0:4f:cd:e7:07:44:ad:0a:0f:1f:de:49:9d:a1:c9:4e:49:
68:61:10:3e:90:d3:e9:91:90:96:08:8f:68:79:07:e0:c0:e5:
41:63:41:2b:3f:80:ef:b6:ce:ed:41:22:50:36:23:d9:ff:ee:
ba:d7:e9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:26 2025 by rpki-client on console.sobornost.net