Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wgOqnnsWlsLcY-e3U904w3g_rl0.roa
File: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (raw, json)
Hash identifier: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=
Subject key identifier: C2:03:AA:9E:7B:16:96:C2:DC:63:E7:B7:53:DD:38:C3:78:3F:AE:5D
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 0194258F7D0019B5968C215415AB0E2EF697
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wgOqnnsWlsLcY-e3U904w3g_rl0.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41310
IP address blocks: 89.249.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7d:00:19:b5:96:8c:21:54:15:ab:0e:2e:f6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c203aa9e7b1696c2dc63e7b753dd38c3783fae5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0e:8d:21:10:2c:fd:96:30:34:51:27:f3:1c:
84:a3:70:33:3a:49:a7:71:d7:d4:8f:dc:3b:9b:23:
3e:d3:c7:e3:d8:52:c7:b6:b8:41:13:57:82:ad:71:
0b:b5:ea:47:bf:13:7d:4d:ab:44:5d:01:9b:c4:23:
07:93:a4:a7:07:78:bd:a5:b6:ec:b8:25:2d:56:88:
04:4a:16:3f:53:17:ed:dd:70:94:db:6d:5d:1d:f4:
e9:ea:dc:4d:bf:53:59:d2:bb:0e:cc:33:c7:0c:d3:
51:60:9b:8d:98:e1:6e:ef:c0:bf:68:c9:2f:1b:4b:
34:6c:ec:ae:ed:14:ea:0c:73:5e:1e:f0:90:e0:97:
a1:1a:12:17:56:c2:00:ac:a9:d8:ee:7c:5b:eb:71:
f8:19:9f:1f:51:78:f1:2b:be:74:cb:1e:ca:91:56:
49:1f:8c:fa:f7:fd:d8:29:d6:2e:9c:94:51:fa:f7:
13:69:1c:44:03:f5:d4:9c:0c:21:ef:c0:7a:f0:82:
87:e4:19:a7:43:90:87:62:d2:4b:6b:cb:9a:18:2e:
6e:92:aa:a4:1c:a3:f1:5d:f1:8c:3e:c9:83:6a:3e:
6a:cd:af:94:a9:c7:a9:fa:35:30:41:dd:72:fa:29:
76:b2:0a:26:26:fa:32:3c:ad:af:55:7e:d6:93:75:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:03:AA:9E:7B:16:96:C2:DC:63:E7:B7:53:DD:38:C3:78:3F:AE:5D
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/wgOqnnsWlsLcY-e3U904w3g_rl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.249.48.0/24
Signature Algorithm: sha256WithRSAEncryption
12:bf:54:8c:83:7c:d7:6b:b6:64:dc:c5:33:6b:3b:03:62:6f:
eb:e5:0a:12:53:a3:b4:8e:73:47:0e:87:3e:f4:e3:74:42:1c:
f5:3a:87:d7:e0:33:74:2a:1b:3c:2b:fa:9c:2b:dc:93:88:76:
bf:fe:8a:84:2c:eb:25:48:4e:6d:95:fe:78:bf:57:f5:04:13:
4f:62:44:a7:60:e4:2b:9f:f5:8d:3d:59:30:b5:1e:0a:df:53:
fa:d2:6d:49:dc:f3:4e:a0:d6:7d:da:f0:27:0c:b1:c9:b2:12:
ed:57:03:69:dd:8e:b9:7d:9f:89:a3:52:e8:4f:25:a5:a4:58:
f5:bb:33:d6:b2:83:66:a8:ec:45:64:84:dd:92:e0:3d:1d:4b:
97:4e:9e:2d:05:d4:59:e0:35:8b:6a:80:ef:ae:b4:37:13:a2:
06:50:a1:2e:9a:aa:64:d5:b6:16:6c:45:53:a0:2b:eb:45:8d:
27:38:a4:d0:ca:79:83:2b:85:93:68:9d:e5:08:32:f0:85:77:
f2:de:26:cf:05:b6:37:3e:71:79:47:27:76:06:54:df:7b:89:
a9:a3:9e:2b:4a:73:aa:5f:49:7a:3f:34:8c:40:7c:f2:22:5c:
bc:16:27:53:7a:65:47:c5:41:9c:86:f4:b2:01:d9:3f:34:97:
93:34:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:14 2025 by rpki-client on console.sobornost.net