Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/WpIYL0DvGR69MNqQHSOeKTTXrTw.roa
File: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (raw, json)
Hash identifier: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=
Subject key identifier: 5A:92:18:2F:40:EF:19:1E:BD:30:DA:90:1D:23:9E:29:34:D7:AD:3C
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019422FBDDEDF6D1D5E63EE2EFC6598882A1
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/WpIYL0DvGR69MNqQHSOeKTTXrTw.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204615
IP address blocks: 185.225.113.0/24 maxlen: 24
185.225.114.0/23 maxlen: 23
2a13:2a00::/48 maxlen: 48
2a13:2a00:1::/48 maxlen: 48
2a13:2a00:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:dd:ed:f6:d1:d5:e6:3e:e2:ef:c6:59:88:82:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a92182f40ef191ebd30da901d239e2934d7ad3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:65:84:92:73:f2:91:e5:51:73:20:60:84:
96:03:43:46:47:20:eb:b6:84:e2:f8:7b:99:9b:07:
5c:74:0b:83:11:3a:33:3b:a7:da:91:40:6b:6c:8a:
df:80:b0:e0:b5:c1:05:e3:1f:f2:08:0b:85:b8:bd:
67:a8:bf:16:88:8d:2e:a2:f8:b0:45:52:a9:06:db:
9d:07:3e:2e:a0:86:23:79:e4:ce:e4:c5:7a:9d:42:
be:8e:e5:3b:a0:dd:7c:fd:61:b0:25:8c:81:b1:8a:
27:84:ef:e4:bb:3d:fe:81:30:cf:2c:6c:67:c4:b1:
e2:92:98:3e:dc:f3:e8:3c:31:e2:44:1b:86:a9:8e:
fe:6b:c6:f4:04:92:b8:ea:f6:84:52:e6:1d:b2:da:
76:3e:d1:f1:76:46:65:bc:c7:bc:03:f9:02:d6:b7:
47:1e:b0:1c:14:05:99:eb:9d:c4:c4:64:7e:8e:78:
b4:ab:69:f7:d2:33:a6:18:b7:04:07:a9:c8:c9:c3:
c5:3e:74:f4:b2:65:de:fa:93:ee:ba:5e:96:be:df:
1b:97:7f:5f:e6:bc:33:c3:e2:06:6b:2c:1a:b9:82:
2e:76:af:af:31:77:4d:1b:f1:9f:99:0e:f2:11:45:
35:4b:9a:3e:89:30:03:9a:a1:0b:e8:ce:c2:36:d0:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:92:18:2F:40:EF:19:1E:BD:30:DA:90:1D:23:9E:29:34:D7:AD:3C
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/WpIYL0DvGR69MNqQHSOeKTTXrTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.113.0-185.225.115.255
IPv6:
2a13:2a00::-2a13:2a00:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
01:ca:49:8f:4b:5f:21:88:3f:1b:c2:dd:e2:90:c2:62:37:93:
fb:a3:75:d5:e0:8e:98:d2:c7:c5:dd:5c:16:d7:88:b1:b1:33:
86:66:24:af:af:ae:39:8f:ba:66:37:33:cd:8e:14:a6:3d:83:
1c:11:cf:80:a2:23:c3:05:bb:1c:92:0b:34:8b:6e:f2:7b:71:
67:62:95:54:be:15:c2:a0:dd:ef:6c:c9:f1:a7:ff:af:8a:d8:
66:84:2f:33:0c:71:ac:6c:8d:57:51:5c:32:8e:42:65:9f:7a:
51:da:1d:31:57:1b:83:dc:c6:cb:a3:b5:7b:ec:20:0c:41:71:
76:9f:ce:8d:b6:26:eb:81:3a:8d:36:8e:a3:ae:8b:02:dd:8e:
ff:51:3b:9a:b5:ec:2f:ce:e4:ae:23:9d:71:e3:63:61:81:fb:
f5:ca:e1:fd:8f:8a:bc:83:0a:48:70:a2:a1:38:64:e0:e3:e6:
c3:a1:de:62:e7:18:87:20:e8:f0:d4:5a:f6:59:8d:1a:30:1c:
e7:c2:ac:5d:96:88:a4:b3:a5:2d:e7:87:02:e9:ce:36:56:f5:
d8:63:2d:a4:f1:89:4f:d7:6d:12:4d:bb:73:3a:7c:86:66:0b:
f9:ef:29:a2:42:1d:8c:05:29:ed:78:be:ce:85:fc:f7:fb:15:
76:2c:99:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:38 2025 by rpki-client on console.sobornost.net