Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/wilpaK1V0r35ZNvUw0OLpxxalHM.roa
File: wilpaK1V0r35ZNvUw0OLpxxalHM.roa (raw, json)
Hash identifier: cc48kr9ntP1AGZHGu6VbcBWoFsvg/tsNceyhXPWuzak=
Subject key identifier: C2:29:69:68:AD:55:D2:BD:F9:64:DB:D4:C3:43:8B:A7:1C:5A:94:73
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 01942823F4E0D497C450C091EAD689150419
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/wilpaK1V0r35ZNvUw0OLpxxalHM.roa
Signing time: Thu 02 Jan 2025 17:50:32 +0000
ROA not before: Thu 02 Jan 2025 17:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50785
IP address blocks: 185.77.70.0/24 maxlen: 24
185.77.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:f4:e0:d4:97:c4:50:c0:91:ea:d6:89:15:04:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Jan 2 17:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2296968ad55d2bdf964dbd4c3438ba71c5a9473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:c8:1d:54:b8:ee:16:77:62:a2:45:55:0b:
1c:e6:18:6b:fc:5f:4c:74:6b:78:da:22:c4:33:e8:
0f:fa:ad:18:3a:cb:88:cc:91:ca:b5:2d:3d:9e:70:
90:1f:e0:ec:23:e8:46:90:68:99:cf:94:39:6c:ce:
08:45:23:70:d3:83:39:ad:bf:fb:39:d6:4c:22:d2:
c8:c1:a5:e0:99:7f:60:df:8b:cc:b9:11:e7:db:6e:
4d:5c:43:ff:87:21:9a:c8:f8:ab:45:08:f1:9b:68:
ef:55:9a:ec:7b:9f:b0:89:10:59:bf:c7:18:dd:08:
00:62:a3:7a:6d:ef:0b:f9:71:52:33:e9:9d:27:97:
ea:4d:34:8f:69:56:86:e7:26:7c:67:31:b5:8c:e4:
d2:40:30:e5:be:06:18:5f:6b:22:2e:e2:3c:80:14:
2d:c4:b9:d9:3a:f6:6b:13:bf:3e:ea:57:de:d8:ff:
17:b0:d0:25:30:2c:ca:21:74:56:93:b9:1f:b4:11:
24:42:6f:7d:06:37:1f:6e:22:d2:48:14:43:62:58:
54:d4:1b:fb:62:09:09:d0:c1:6b:64:71:04:9e:9b:
61:52:95:b5:69:7d:48:6b:77:79:3d:eb:e3:15:77:
63:05:6d:e2:8f:4c:19:bb:ae:52:5c:70:dd:da:c4:
8f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:29:69:68:AD:55:D2:BD:F9:64:DB:D4:C3:43:8B:A7:1C:5A:94:73
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/wilpaK1V0r35ZNvUw0OLpxxalHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.70.0/23
Signature Algorithm: sha256WithRSAEncryption
41:7b:ed:f7:69:be:2f:40:21:ac:e1:55:d4:47:b4:24:a3:e6:
eb:87:78:80:1d:c2:4e:9c:52:c9:44:f5:60:2d:55:16:2c:ce:
61:fe:d6:a5:39:af:b6:2a:78:47:55:1c:0a:86:a5:1b:30:3d:
09:6b:db:ec:4e:8f:dd:6d:bb:dd:be:d7:0b:e1:1d:eb:70:04:
1d:9e:03:0a:a0:97:fc:45:2c:3e:73:ac:29:53:09:f4:c0:ff:
bf:8a:5e:3b:d8:6f:f0:34:54:23:da:75:9b:65:53:dd:46:35:
5a:6e:fb:52:e8:47:f1:e4:d2:47:b9:6f:64:9f:ca:aa:e9:82:
be:28:3c:83:06:9f:89:cd:82:83:d1:d5:6e:67:aa:cb:c0:c3:
1a:bb:42:f4:ec:fa:17:1d:16:6c:30:15:48:36:f1:f0:d6:e1:
e2:c6:be:1f:9c:4f:35:ad:a3:92:15:b4:dc:b0:ae:96:df:85:
de:db:85:e8:ab:d2:ac:45:bf:08:e5:9a:21:b7:69:81:9f:6d:
06:2b:55:ea:6a:fd:6b:59:07:ff:8e:58:8b:48:ce:2c:a6:50:
d3:3b:c0:2d:32:bd:d3:df:ad:60:82:7d:c5:48:e4:d4:3b:22:
13:3b:8f:69:21:bd:b7:8a:d3:cf:37:d7:c6:54:51:e4:82:9d:
9b:70:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:04 2025 by rpki-client on console.sobornost.net