Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wdQu71DwsSZCWEGjtF-c6H8Remk.roa
File: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (raw, json)
Hash identifier: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=
Subject key identifier: C1:D4:2E:EF:50:F0:B1:26:42:58:41:A3:B4:5F:9C:E8:7F:11:7A:69
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 019425FD99D9D996E2411CB88A457BA36A5D
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wdQu71DwsSZCWEGjtF-c6H8Remk.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15719
IP address blocks: 194.152.232.0/23 maxlen: 23
194.152.232.0/24 maxlen: 24
194.152.233.0/24 maxlen: 24
195.29.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:99:d9:d9:96:e2:41:1c:b8:8a:45:7b:a3:6a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1d42eef50f0b126425841a3b45f9ce87f117a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:03:01:3f:8d:d5:0c:b4:5f:fe:1e:a5:07:
ed:54:37:9f:1a:3f:1b:69:1f:20:5d:8f:7b:0f:1c:
67:94:eb:82:1e:b2:a1:8d:8b:85:e7:0e:6f:53:12:
9d:49:c6:84:db:0f:ac:9f:1d:79:83:1f:01:eb:6d:
83:d4:16:40:39:34:54:6f:3a:8a:e8:d2:7e:df:11:
8d:7d:b3:2d:59:9d:87:13:76:72:aa:b6:f4:3a:de:
d8:b2:e7:8d:1f:81:82:55:21:81:e2:f0:f1:0b:d8:
c6:ae:80:25:ed:01:9b:e5:1f:d5:e0:ec:5b:ef:25:
1e:f7:d9:a5:28:2f:69:2c:d6:ab:8c:96:88:80:05:
51:40:f4:b4:87:69:eb:ef:3a:b4:58:a5:0d:b4:69:
04:4e:ec:11:54:5f:79:61:45:b9:ea:25:50:6a:26:
83:3e:28:54:8b:d5:f7:75:97:b3:e6:b7:04:17:c7:
c4:89:b7:d2:9d:bd:64:1a:bd:21:d3:ea:b4:b5:2d:
53:54:f2:2a:a7:ea:c8:77:95:c2:3b:48:d0:c1:af:
bf:4d:f1:84:0f:4e:42:0b:48:1d:cb:9c:41:12:aa:
06:72:5c:1c:ee:f8:62:21:44:06:02:aa:2c:e1:46:
42:89:b1:3d:e7:40:e5:2f:a9:7c:9d:c3:b7:0a:f1:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D4:2E:EF:50:F0:B1:26:42:58:41:A3:B4:5F:9C:E8:7F:11:7A:69
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wdQu71DwsSZCWEGjtF-c6H8Remk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.232.0/23
195.29.139.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:38:94:98:bd:22:f1:dc:33:62:96:89:bf:69:22:e1:e1:83:
34:bb:f5:f7:42:87:86:23:ee:b4:50:f8:40:5b:0f:0c:53:67:
61:c3:ef:d2:92:91:6f:4c:1a:60:02:80:82:ee:20:b0:58:65:
e1:f5:20:ed:f3:d0:6d:be:00:e7:17:0b:7e:2b:21:b1:ed:64:
ff:f9:b8:e8:0f:7c:88:9a:5e:20:c5:54:9c:04:7f:b7:06:c1:
59:75:ec:d9:d1:4c:4e:c8:ae:02:f6:93:b8:d2:09:91:1e:06:
b5:1c:ab:22:5a:ca:43:15:84:56:92:7d:7d:06:37:f5:d0:b1:
d6:fc:44:9f:92:09:86:16:82:ae:f3:e2:44:f8:a5:3e:8f:3e:
b7:d2:1e:3f:8b:5b:24:1a:e1:a3:44:09:9a:ef:c5:61:31:9e:
da:07:e7:4c:3d:2f:8c:47:65:aa:92:49:32:3b:e3:b7:fb:7a:
e9:94:4d:83:7c:eb:a3:f7:87:2a:2a:b9:f2:a3:14:fe:80:03:
60:42:48:42:d8:d3:d4:a9:d6:b7:99:5b:3d:69:12:0a:1c:40:
cc:6d:30:18:19:24:32:61:f3:b9:55:e8:99:32:0d:b8:5e:cd:
a5:4f:34:ae:01:51:d9:fe:da:22:97:1a:fb:80:78:9b:a9:40:
ac:1d:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net