Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/w7GBFFW-fOGU9AymO9FYwt-abI0.roa
File: w7GBFFW-fOGU9AymO9FYwt-abI0.roa (raw, json)
Hash identifier: hEWFJH6MzSsYg+SOu0owoWWjOMGAE6GO6uzEJvBdjVs=
Subject key identifier: C3:B1:81:14:55:BE:7C:E1:94:F4:0C:A6:3B:D1:58:C2:DF:9A:6C:8D
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 019421B223D51C27DBFA274F653F4F97A433
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/w7GBFFW-fOGU9AymO9FYwt-abI0.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8581
IP address blocks: 83.212.184.0/21 maxlen: 21
83.212.192.0/21 maxlen: 21
194.177.199.0/24 maxlen: 24
195.130.72.0/23 maxlen: 23
195.130.74.0/24 maxlen: 24
195.130.112.0/21 maxlen: 21
195.130.120.0/23 maxlen: 23
195.251.192.0/21 maxlen: 21
195.251.200.0/23 maxlen: 23
2001:648:2e01::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:23:d5:1c:27:db:fa:27:4f:65:3f:4f:97:a4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3b1811455be7ce194f40ca63bd158c2df9a6c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:0e:66:f4:ea:eb:9a:e4:64:ce:02:60:60:
f9:23:b3:5b:d8:c0:38:0e:61:d7:53:bb:f7:54:96:
59:cf:02:9a:eb:db:d2:90:df:f8:1a:8d:d3:53:bd:
db:77:fc:be:bf:5d:1f:51:29:fa:c4:cf:76:34:1a:
72:b9:88:e3:6b:66:ee:6a:76:2c:83:28:83:b2:f4:
98:12:7f:a0:95:e8:41:b0:20:93:0d:d1:fd:eb:9b:
a6:36:5b:ad:d3:27:b5:b8:9a:28:db:e2:eb:52:c4:
45:8f:61:fe:8d:b2:99:d5:43:43:f9:29:b3:d4:a9:
95:42:b9:f1:08:1e:2e:22:2b:1e:43:3c:a3:e9:ef:
11:d0:23:c0:f8:9f:b3:bd:51:9c:cb:96:75:71:5e:
bb:84:8b:1f:96:5e:2c:06:f7:27:77:38:9b:1b:84:
48:43:d2:25:88:fe:19:0e:24:1b:07:61:87:63:96:
b5:08:4e:55:49:30:1e:38:f4:db:2f:15:aa:80:a4:
44:04:68:17:d5:3f:36:89:ab:fd:21:2b:9f:05:76:
41:13:4b:1b:e7:43:81:66:5b:2b:9b:4b:40:c2:f2:
25:81:e2:73:f4:91:c5:38:92:7c:6f:8b:b8:32:0b:
d5:9f:02:ec:cb:03:aa:fc:b3:b9:0a:75:07:de:a1:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B1:81:14:55:BE:7C:E1:94:F4:0C:A6:3B:D1:58:C2:DF:9A:6C:8D
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/w7GBFFW-fOGU9AymO9FYwt-abI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.212.184.0-83.212.199.255
194.177.199.0/24
195.130.72.0-195.130.74.255
195.130.112.0-195.130.121.255
195.251.192.0-195.251.201.255
IPv6:
2001:648:2e01::/48
Signature Algorithm: sha256WithRSAEncryption
56:77:19:aa:d2:12:2d:11:84:f1:f9:8b:98:f1:44:87:a4:d4:
a7:03:2a:b7:43:f2:39:81:ca:c0:a1:62:26:ed:6d:d8:ff:b4:
1a:6d:f0:01:dc:5f:f9:f8:25:96:0a:7d:29:90:dd:47:28:00:
88:23:49:c8:cd:53:21:50:bc:23:88:08:e4:c1:27:c7:32:6a:
da:22:13:0d:69:d8:1f:f1:04:db:ba:b6:d9:1f:62:59:05:10:
bd:93:97:8c:a1:02:60:9b:de:e1:a2:e4:f0:ce:1a:93:97:ff:
d3:22:a1:43:45:5c:3f:aa:af:40:16:63:97:3c:cb:8a:c2:f3:
90:ec:19:8b:d3:55:a3:14:0c:a1:1f:bc:3b:7a:fd:48:f4:c5:
b6:3f:90:20:9a:6e:03:4b:c8:19:eb:b4:e8:b0:7a:96:00:35:
f5:1a:97:2e:72:42:e9:aa:45:a1:7b:ae:ff:70:cd:a8:24:bc:
88:8f:46:56:a0:58:46:df:4a:f2:fa:37:f0:cf:98:81:63:9c:
66:e6:92:73:cc:2c:67:8c:51:ac:91:ec:60:66:0a:a9:b7:e3:
bb:7a:95:80:ce:5c:c8:11:71:b1:44:71:33:2e:67:b2:a1:bb:
4f:24:e7:96:fa:99:e3:6d:69:14:c5:cd:e2:89:f9:90:77:fd:
ac:9d:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:02 2025 by rpki-client on console.sobornost.net