Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/wo2zdFr365giMD5GmJjbyQ_qVBY.roa
File: wo2zdFr365giMD5GmJjbyQ_qVBY.roa (raw, json)
Hash identifier: Sf7Mc4QUihOBo0PCO1f1MqbHphMDfRs2qmYoA4b7koM=
Subject key identifier: C2:8D:B3:74:5A:F7:EB:98:22:30:3E:46:98:98:DB:C9:0F:EA:54:16
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 0195239CDF3FC2730EE584293650B50D6048
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/wo2zdFr365giMD5GmJjbyQ_qVBY.roa
Signing time: Thu 20 Feb 2025 13:47:17 +0000
ROA not before: Thu 20 Feb 2025 13:47:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39087
IP address blocks: 5.8.36.0/22 maxlen: 32
91.223.28.0/24 maxlen: 32
91.223.70.0/24 maxlen: 32
91.223.75.0/24 maxlen: 32
91.223.89.0/24 maxlen: 32
185.97.200.0/22 maxlen: 32
194.37.1.0/24 maxlen: 32
194.37.254.0/24 maxlen: 32
194.39.99.0/24 maxlen: 32
194.39.101.0/24 maxlen: 32
217.78.230.0/24 maxlen: 32
2a00:1b78::/29 maxlen: 64
2a0f:a3c0::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:23:9c:df:3f:c2:73:0e:e5:84:29:36:50:b5:0d:60:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Feb 20 13:47:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c28db3745af7eb9822303e469898dbc90fea5416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:e1:b4:65:83:fa:3b:29:26:be:8a:b4:d2:
f6:52:66:bd:b4:ac:68:53:c0:d1:d8:70:5a:cb:11:
2f:3e:29:5a:97:db:8b:2d:51:02:a4:f0:bd:08:04:
e8:b9:de:0e:ba:da:1d:1a:25:b4:71:3d:2d:61:56:
a1:2e:61:7b:8f:de:c8:ea:50:da:5d:17:f4:75:56:
96:b5:9e:38:7b:28:22:de:cc:c8:10:e3:41:73:ad:
97:d6:a7:42:26:07:76:2e:a7:18:a8:cc:90:03:7b:
1e:5f:aa:fa:59:5e:e4:f4:a9:56:b1:4c:9b:c6:52:
2f:50:5f:3e:ec:a0:e8:36:b7:00:e4:86:6d:ac:a0:
05:ea:b5:47:4e:e7:34:0d:ec:00:19:9b:5d:df:06:
e7:99:34:d0:8e:3a:e0:9f:2d:be:0a:31:0b:76:f2:
15:e4:aa:bc:2b:61:bd:3d:09:f0:a2:6b:03:4d:f7:
25:41:93:47:71:f5:94:fa:86:94:bd:c8:56:78:cb:
80:6e:ce:40:9c:60:1e:28:4f:7d:91:4d:3b:e1:12:
db:5d:ec:37:9f:08:91:71:bc:d6:fa:51:e1:98:16:
c0:61:f9:ce:dd:25:92:85:f4:d0:6c:b7:54:83:a0:
22:eb:6e:b2:24:7c:75:33:00:81:9c:dd:5e:ea:55:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8D:B3:74:5A:F7:EB:98:22:30:3E:46:98:98:DB:C9:0F:EA:54:16
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/wo2zdFr365giMD5GmJjbyQ_qVBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.36.0/22
91.223.28.0/24
91.223.70.0/24
91.223.75.0/24
91.223.89.0/24
185.97.200.0/22
194.37.1.0/24
194.37.254.0/24
194.39.99.0/24
194.39.101.0/24
217.78.230.0/24
IPv6:
2a00:1b78::/29
2a0f:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
35:45:eb:e2:36:17:88:f7:fc:45:cc:b0:7a:48:ec:9d:67:b4:
ca:fb:0b:91:d0:d0:26:6c:01:c2:c1:73:2b:10:61:43:d5:05:
44:f0:a1:89:ee:4c:de:c7:1f:00:73:14:48:b5:85:8b:d9:43:
68:d3:ea:21:9c:b9:9b:25:e9:0f:aa:bd:3c:2f:1b:2c:4c:9e:
70:bd:9c:43:bf:28:fc:41:18:95:61:9a:57:23:01:46:63:dc:
cf:0e:f1:de:4a:af:a5:65:ef:ed:eb:da:7b:3d:dd:51:8c:b9:
b3:82:d4:29:cb:47:51:62:90:ae:ae:5a:72:1d:cb:55:2f:c3:
6e:3a:96:ef:7a:7d:8e:5e:91:78:28:4a:b2:3a:63:24:74:f3:
46:d7:7a:74:a7:82:c2:04:58:56:5d:cc:91:1c:63:61:f9:5d:
25:3a:87:f1:14:1b:94:13:59:a0:23:f2:8f:6b:25:5e:5e:e2:
5c:f5:ca:5d:0b:dd:dd:ba:9e:bc:f8:e6:b8:96:5c:19:3e:21:
28:35:d0:1f:0c:5d:4f:ca:dc:fa:ee:dd:e6:7a:bb:1a:83:90:
76:7c:8e:e0:fd:f4:d2:12:6d:37:b8:32:38:bd:de:16:b2:18:
70:c9:0d:c6:32:14:4a:28:2f:6d:45:3e:2b:4b:f6:ca:24:62:
68:f7:d9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:40 2025 by rpki-client on console.sobornost.net