Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa
File: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (raw, json)
Hash identifier: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=
Subject key identifier: C3:96:9D:4C:9E:AB:A7:1E:C6:16:1F:47:C2:BA:6A:3D:25:4F:76:25
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 01942444ED51B7BDDBD77DDF01A64567ACFD
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200030
IP address blocks: 77.241.164.0/22 maxlen: 22
77.241.168.0/22 maxlen: 22
77.241.172.0/22 maxlen: 22
92.63.112.0/22 maxlen: 22
92.63.116.0/22 maxlen: 22
92.63.120.0/22 maxlen: 22
92.63.124.0/24 maxlen: 24
92.63.125.0/24 maxlen: 24
92.63.126.0/24 maxlen: 24
92.63.127.0/24 maxlen: 24
185.49.156.0/22 maxlen: 22
2a01:a360::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ed:51:b7:bd:db:d7:7d:df:01:a6:45:67:ac:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3969d4c9eaba71ec6161f47c2ba6a3d254f7625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:86:7d:4f:28:1b:53:76:83:14:5b:61:3f:
a3:24:f7:40:a1:07:ef:77:f2:ae:97:39:29:fe:8f:
86:3c:d7:19:1b:73:01:ce:0c:ba:6e:05:df:be:6d:
50:2b:4f:e3:f9:81:95:ba:29:10:da:0a:e5:d4:52:
b6:d4:7a:5b:e3:7f:9e:06:69:42:0f:b6:c4:57:67:
a2:07:58:f1:08:05:60:1b:9e:a5:8c:01:bf:47:e8:
42:a8:7c:58:79:26:ae:89:fb:36:83:da:81:71:fd:
f9:46:f5:8a:f5:04:47:5b:97:e5:b0:b0:8e:2f:c8:
11:38:cc:a0:8a:c0:fb:f9:05:31:1e:e2:08:da:fe:
06:94:3f:81:5c:07:88:54:ff:15:ea:dc:c9:fe:94:
ad:22:1c:af:2c:23:79:b5:80:33:31:16:e1:5e:e0:
fc:c8:de:9b:74:66:fe:9c:1c:df:a1:4e:12:a3:b0:
c0:ab:95:6b:21:13:a6:47:90:19:57:c8:0f:4d:26:
47:20:44:b1:9c:bb:4d:7b:53:38:07:24:a5:3b:e1:
c9:5f:af:26:93:4c:f8:38:49:48:c7:8e:f3:11:a7:
a9:80:8a:88:88:2f:a7:bb:68:22:d9:59:fb:5a:5b:
76:f7:04:76:df:ca:d9:d2:6a:85:c0:3d:27:ef:c9:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:96:9D:4C:9E:AB:A7:1E:C6:16:1F:47:C2:BA:6A:3D:25:4F:76:25
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.164.0-77.241.175.255
92.63.112.0/20
185.49.156.0/22
IPv6:
2a01:a360::/32
Signature Algorithm: sha256WithRSAEncryption
8e:d6:b0:d5:27:ab:5a:1e:5d:bc:0c:0b:d9:88:b5:19:df:7f:
4c:1f:d6:cf:b0:a1:2c:1d:f3:78:b8:06:d9:77:c2:b1:b2:5e:
a0:ab:87:6c:45:38:18:51:86:3d:45:0f:50:5d:b4:a1:82:fe:
d5:38:28:0a:5a:40:66:97:68:45:80:e6:a7:fb:f1:ef:a6:8c:
c7:f2:23:7e:ce:d7:d1:ca:b1:1c:b4:77:78:a6:be:cb:9f:be:
2d:05:c7:d3:4b:3e:ce:33:91:c5:a2:65:f4:3b:8a:f8:e5:53:
0b:f6:16:e9:79:1e:3a:bb:2a:c8:ae:1e:e0:a2:2b:59:98:3e:
77:bd:61:b0:bf:48:cf:61:c7:2f:37:a0:e2:1a:f4:f1:30:67:
d6:c4:96:b7:f0:31:dd:69:a7:3e:6d:02:b5:f1:ef:72:8f:81:
98:37:17:69:99:3e:a8:74:4b:54:25:65:b2:a6:75:ec:3a:b8:
9b:38:ce:7a:5f:91:e2:c0:f9:f2:c9:77:57:09:2b:28:39:d1:
83:60:74:d0:55:96:88:70:31:78:dd:ba:3b:ac:06:55:17:4d:
92:44:4d:2c:7e:42:64:a7:d5:78:89:ba:24:45:bc:a0:51:c2:
f9:8d:a7:1b:1d:b0:ba:87:83:b9:16:72:f4:de:3c:f8:45:f0:
92:af:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:27 2025 by rpki-client on console.sobornost.net