Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/WxyFMVLPaoedm2KunMSjCPtRmII.roa
File: WxyFMVLPaoedm2KunMSjCPtRmII.roa (raw, json)
Hash identifier: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=
Subject key identifier: 5B:1C:85:31:52:CF:6A:87:9D:9B:62:AE:9C:C4:A3:08:FB:51:98:82
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 0194258F36E2466FDA0A44D03468DC2AD12F
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/WxyFMVLPaoedm2KunMSjCPtRmII.roa
Signing time: Thu 02 Jan 2025 05:48:50 +0000
ROA not before: Thu 02 Jan 2025 05:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47631
IP address blocks: 93.187.224.0/21 maxlen: 21
93.187.224.0/24 maxlen: 24
93.187.225.0/24 maxlen: 24
93.187.226.0/24 maxlen: 24
93.187.227.0/24 maxlen: 24
93.187.228.0/24 maxlen: 24
93.187.229.0/24 maxlen: 24
93.187.230.0/24 maxlen: 24
93.187.231.0/24 maxlen: 24
185.34.124.0/24 maxlen: 24
185.34.127.0/24 maxlen: 24
2a00:9460::/32 maxlen: 32
2a00:9461::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:36:e2:46:6f:da:0a:44:d0:34:68:dc:2a:d1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b1c853152cf6a879d9b62ae9cc4a308fb519882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:5b:5a:62:62:f8:d2:c0:10:07:33:0b:e7:
77:cc:d4:30:6a:c6:1e:69:a5:a9:fa:33:a9:2b:93:
c1:2f:a0:95:9f:31:d5:34:5a:47:a9:8f:db:71:44:
a6:55:7d:1c:36:ad:fc:40:70:e3:62:d7:07:dd:f5:
c2:a2:27:8b:87:c3:7f:73:39:db:6a:63:29:d4:b6:
06:4e:77:2e:63:0d:fc:7e:f6:84:46:a3:4e:01:ce:
4a:0a:0b:55:1e:9c:f1:20:dc:1b:4b:b9:d5:bd:a7:
ab:87:a6:9a:e3:31:3e:a0:a4:d5:58:af:05:85:80:
b2:81:a4:b9:e7:02:22:56:5d:b1:56:e1:8b:b1:b2:
93:01:77:1e:2a:73:cd:63:56:e8:94:1d:20:d1:bc:
a8:41:7b:08:50:e7:b5:d8:63:e5:09:73:bb:8f:1b:
ae:40:7b:43:e9:35:43:0a:12:4d:11:3f:8f:f9:8c:
e5:27:5d:f6:5b:19:47:58:c0:64:3e:ca:80:b1:86:
03:d5:7e:72:aa:e7:14:40:4b:55:ff:e5:ca:00:cd:
90:e1:7a:4d:ab:ee:c4:38:90:50:d0:74:dd:18:98:
92:35:3c:c0:32:22:d4:84:20:e2:2a:96:4a:ef:cd:
05:ba:fd:88:c4:b4:cd:89:93:87:7b:7f:d8:b7:f0:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:85:31:52:CF:6A:87:9D:9B:62:AE:9C:C4:A3:08:FB:51:98:82
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/WxyFMVLPaoedm2KunMSjCPtRmII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.224.0/21
185.34.124.0/24
185.34.127.0/24
IPv6:
2a00:9460::/31
Signature Algorithm: sha256WithRSAEncryption
8e:64:2f:bd:a1:55:b6:df:c9:0f:44:6f:dc:a3:2d:e2:49:0b:
c5:b8:9a:6a:33:f4:d0:11:d2:13:5f:a6:2a:f5:7b:34:0f:45:
4f:ab:bb:27:2f:17:19:5d:b8:ca:dd:2d:6a:69:62:b5:80:e7:
ac:01:b1:0e:0a:3b:d1:d6:0e:5c:f4:a1:d8:12:6b:c1:c0:c4:
76:ec:9c:f7:6b:89:68:72:d7:6f:23:4e:c8:10:b1:2f:af:7a:
60:07:d4:d8:e5:62:55:3e:74:f3:2f:8f:73:88:6f:81:17:05:
f8:18:75:94:4a:1e:05:5a:16:00:84:de:9a:a0:34:d5:ad:18:
94:e7:35:ea:ba:3b:47:91:bf:85:92:f5:57:db:a3:df:6b:51:
76:b7:a1:9d:5d:3c:30:35:8b:c1:4a:2f:73:c9:d7:4f:6b:43:
cf:96:72:19:55:50:82:98:8a:16:bd:3e:8e:34:21:65:87:c6:
be:aa:69:65:87:67:f7:f7:6e:8d:1e:53:12:7c:fc:9b:9a:4a:
86:41:bb:dd:c4:17:ec:b9:8d:45:48:e5:07:03:cd:57:35:f5:
9d:55:4a:96:52:cc:86:9e:65:1e:92:02:48:90:ae:c4:e2:32:
de:a5:cd:8f:44:e0:97:55:55:2b:91:01:09:c4:2b:52:77:6d:
79:87:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:28 2025 by rpki-client on console.sobornost.net