Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/WXsaS3xTf7hLB8CxTIMRCQOM6zs.roa
File: WXsaS3xTf7hLB8CxTIMRCQOM6zs.roa (raw, json)
Hash identifier: NHGMTMLwxqe5hODE2FcWJTHmy2s2QH+dw3XQhqhfzAA=
Subject key identifier: 59:7B:1A:4B:7C:53:7F:B8:4B:07:C0:B1:4C:83:11:09:03:8C:EB:3B
Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Certificate serial: 019469F403753029E0A6E1DD277E1E1794A4
Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/WXsaS3xTf7hLB8CxTIMRCQOM6zs.roa
Signing time: Wed 15 Jan 2025 12:33:06 +0000
ROA not before: Wed 15 Jan 2025 12:33:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207605
IP address blocks: 62.164.170.0/24 maxlen: 24
176.119.205.0/24 maxlen: 24
195.189.140.0/24 maxlen: 24
195.189.141.0/24 maxlen: 24
2a05:4500::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:f4:03:75:30:29:e0:a6:e1:dd:27:7e:1e:17:94:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02
Validity
Not Before: Jan 15 12:33:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=597b1a4b7c537fb84b07c0b14c831109038ceb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:49:30:1b:10:ba:2d:82:96:12:1c:77:6b:32:
23:1c:10:30:0d:cf:3f:dd:49:a6:23:4c:c8:7d:61:
98:8a:d2:36:2a:e7:98:a3:4d:dc:a2:ad:8b:71:8d:
bd:21:d4:ac:4f:ec:f3:89:0a:67:52:60:7d:d4:d0:
60:8a:07:31:e8:94:f9:b9:6a:e1:c3:ff:70:db:99:
a7:85:1d:c5:2b:90:ca:8a:2c:ca:42:50:53:d9:a8:
d1:1c:03:07:5e:ef:a1:07:4c:c7:47:4c:e2:06:2b:
12:0d:ae:63:bc:d0:53:64:96:a4:33:de:d8:3e:0d:
7c:8e:5c:ff:63:47:2f:49:4e:cb:a9:e2:fd:e2:2b:
c8:e4:a9:0f:02:3c:6a:9f:af:51:60:03:7e:da:45:
bb:0c:75:6f:56:d5:a5:56:cb:8d:5a:4b:79:93:0d:
5d:80:ba:d1:49:c7:4d:8f:39:e3:36:ca:07:31:2d:
82:a8:7f:84:aa:7c:52:90:aa:09:45:4f:77:91:a1:
43:8a:65:be:74:6f:7d:3d:64:25:90:ab:a5:1e:0f:
11:ea:2f:40:f2:de:a2:52:7c:fd:6c:50:28:39:64:
9a:7b:0b:3d:32:17:52:b5:d3:25:08:ad:e6:4d:a4:
ec:f3:d6:9d:83:63:0e:41:ea:41:b2:e2:01:17:6d:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:1A:4B:7C:53:7F:B8:4B:07:C0:B1:4C:83:11:09:03:8C:EB:3B
X509v3 Authority Key Identifier:
keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/WXsaS3xTf7hLB8CxTIMRCQOM6zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.170.0/24
176.119.205.0/24
195.189.140.0/23
IPv6:
2a05:4500::/29
Signature Algorithm: sha256WithRSAEncryption
25:a2:3b:6e:e2:19:ab:d9:cd:91:54:4d:cc:53:bf:97:61:6c:
f6:7c:b7:40:89:6f:2a:f2:1b:5d:ec:79:f4:a1:07:64:00:0d:
cd:bc:4f:96:09:d8:d2:e8:ef:12:82:cb:7d:16:db:e2:be:93:
b6:0e:bd:9c:ac:e1:f8:ff:00:22:b1:ef:ad:e4:f3:58:44:3e:
6f:a0:41:fc:d2:39:0f:b4:0f:ad:72:65:7b:10:63:16:e8:5b:
6c:81:90:69:77:d1:c8:6e:72:1f:bc:88:10:1c:df:b2:a8:c6:
d9:03:46:f8:19:f8:e4:ff:e3:68:df:6f:6e:d4:72:7d:12:cf:
40:57:6e:66:14:6b:8a:dc:93:d6:64:d8:4f:e6:6c:12:6a:0b:
51:75:cc:42:ea:bb:eb:f7:40:d8:86:5a:84:d3:df:31:60:9e:
2b:77:cb:04:35:99:fa:e7:3e:86:08:fc:7b:70:85:a0:06:f4:
96:e0:95:70:5f:3b:fb:be:dd:f9:f6:9a:25:09:b8:8d:f7:84:
a7:45:c5:6c:f4:51:4e:94:93:19:62:6c:9d:1a:42:5f:a8:ae:
fc:d6:32:71:0b:c2:5d:43:c5:46:b0:e3:d7:6c:0c:46:60:ac:
11:7b:96:7a:0c:19:27:34:bc:79:9e:88:74:5a:94:1f:84:ea:
5c:87:c6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:25 2025 by rpki-client on console.sobornost.net