Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wLp8Sdnrjl7execk_KVhdHNHzkg.roa
File: wLp8Sdnrjl7execk_KVhdHNHzkg.roa (raw, json)
Hash identifier: K2vnyIXVzHXF/U3pvVew59nQciz/GdITXUar1PNzrik=
Subject key identifier: C0:BA:7C:49:D9:EB:8E:5E:DE:C5:E7:24:FC:A5:61:74:73:47:CE:48
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D205BC461670E600B7171192362DE
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wLp8Sdnrjl7execk_KVhdHNHzkg.roa
Signing time: Wed 01 Jan 2025 15:47:41 +0000
ROA not before: Wed 01 Jan 2025 15:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12396
IP address blocks: 91.219.124.0/22 maxlen: 22
194.247.168.0/23 maxlen: 23
195.8.34.0/23 maxlen: 23
195.49.192.0/21 maxlen: 21
195.191.18.0/23 maxlen: 24
212.109.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:20:5b:c4:61:67:0e:60:0b:71:71:19:23:62:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0ba7c49d9eb8e5edec5e724fca561747347ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:a6:d0:99:66:87:77:c4:c4:c6:d3:d3:99:
1e:bb:cd:05:70:f8:07:e1:43:db:3f:5f:9e:ae:41:
a9:21:99:47:81:ed:07:53:7f:c7:31:bf:54:0f:a6:
e8:b1:00:d4:d8:80:fd:a9:21:c2:dd:2d:13:aa:b0:
c4:c2:b2:23:45:b3:ff:f5:99:52:0b:fc:f8:e7:b3:
f8:c9:14:94:7d:57:a8:fc:be:df:d1:04:48:79:0c:
c0:70:2d:2a:39:54:ba:8d:53:41:7f:2d:0e:d4:77:
94:f1:96:9a:93:eb:4f:e4:d7:0c:af:63:26:bf:ab:
d9:00:55:50:f0:89:88:c4:3d:01:53:c1:ac:ee:0c:
26:91:a9:7b:2c:27:6f:d1:7b:76:17:3d:1f:20:ba:
91:f5:28:e5:a2:73:fb:74:9e:28:fe:e2:80:28:9e:
8d:5b:c7:3d:ab:9d:c8:e4:55:85:44:48:2c:20:34:
f6:1c:f8:ec:c4:1c:4c:37:fe:aa:0a:6c:05:77:71:
29:98:13:e7:b8:13:8b:61:56:60:16:a1:72:f9:b1:
88:38:62:e0:2e:0d:99:19:02:38:d1:fc:f4:a9:e6:
90:02:e9:61:b9:cd:f2:9d:73:19:7b:85:c2:1f:6e:
a0:1e:f0:59:2a:86:a3:7c:7f:10:de:ab:b6:5e:92:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BA:7C:49:D9:EB:8E:5E:DE:C5:E7:24:FC:A5:61:74:73:47:CE:48
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/wLp8Sdnrjl7execk_KVhdHNHzkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.124.0/22
194.247.168.0/23
195.8.34.0/23
195.49.192.0/21
195.191.18.0/23
212.109.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2a:e3:d5:e5:f3:9b:d4:08:42:12:e5:46:c4:7e:71:af:87:
d8:51:42:0e:5f:7a:bc:a1:dc:8c:fd:f5:a9:12:37:b1:95:e8:
0b:dd:15:ee:03:e3:80:39:b8:5a:8e:0a:0f:78:fd:d8:61:4d:
45:79:68:fb:7a:c7:d2:c3:a1:55:59:49:ab:04:3c:ab:a1:fe:
78:13:d3:08:dd:a2:f2:18:81:3c:f9:54:17:e8:0d:c2:cc:58:
2f:b7:b2:17:91:90:d9:a5:20:d0:7c:55:4c:54:2c:86:3d:39:
b0:be:b3:27:d3:85:20:4c:82:72:0b:3e:d3:c2:0e:ec:8e:a0:
a4:a8:f9:b3:4d:c7:41:b3:ec:5e:b1:73:a4:9c:01:75:ea:47:
30:9b:92:a8:66:31:90:f1:b0:bb:31:bf:aa:35:54:5f:f2:01:
85:8a:04:11:b8:de:c5:0c:5a:4d:86:d1:0b:05:ae:7b:96:29:
13:6a:7d:32:0b:a1:94:03:61:7b:ca:1f:66:a9:46:c7:b3:5a:
2d:4f:07:9b:ec:58:dc:a3:2a:05:f9:ea:a2:de:61:f1:67:5e:
79:c2:29:f3:38:89:10:d0:9a:ba:51:ec:cc:2e:79:6b:98:3f:
a3:d7:5b:7a:f5:87:07:8e:05:e2:c7:0a:1a:d0:d9:cd:64:ec:
63:9a:bf:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net