Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/wmH-oNwHurnp2OaK2UAzkQskT08.roa
File: wmH-oNwHurnp2OaK2UAzkQskT08.roa (raw, json)
Hash identifier: N3y3C0nEG+u7rfKoqA3F9O7ItROzjJypdPXX7fTnUDQ=
Subject key identifier: C2:61:FE:A0:DC:07:BA:B9:E9:D8:E6:8A:D9:40:33:91:0B:24:4F:4F
Certificate issuer: /CN=e992a035bffc5a41412c497c1285d1838234ffb0
Certificate serial: 01942368DC0B2C8253C7BE2ADAD97C4F68C0
Authority key identifier: E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/wmH-oNwHurnp2OaK2UAzkQskT08.roa
Signing time: Wed 01 Jan 2025 19:47:42 +0000
ROA not before: Wed 01 Jan 2025 19:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47886
IP address blocks: 77.222.64.0/19 maxlen: 24
87.249.96.0/19 maxlen: 24
185.76.16.0/22 maxlen: 24
217.114.96.0/20 maxlen: 24
2001:1540::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:dc:0b:2c:82:53:c7:be:2a:da:d9:7c:4f:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e992a035bffc5a41412c497c1285d1838234ffb0
Validity
Not Before: Jan 1 19:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c261fea0dc07bab9e9d8e68ad94033910b244f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:b0:f9:12:06:4e:2e:28:7d:9d:9e:9e:6a:
44:d3:7a:8e:31:a1:eb:3b:d8:8a:cd:8f:a7:f1:25:
d1:fc:f1:62:0e:5c:c4:36:aa:2d:0a:e8:f8:8e:16:
21:d8:83:63:e8:a1:f0:c1:32:c3:a6:23:d3:4f:1b:
77:d7:57:80:1b:e0:aa:97:3e:02:7e:35:a5:5d:17:
48:32:b4:15:a8:5c:37:24:b8:bb:d1:c2:1d:da:b3:
a0:4e:d4:39:f6:9c:5f:de:78:7c:eb:e3:71:ec:0d:
61:a5:dd:12:d5:5f:2f:41:e4:2c:3f:32:dd:f4:f8:
4f:60:73:9d:98:2f:09:3b:48:38:af:49:3a:cc:12:
57:a1:46:86:7f:24:e7:b1:4f:da:90:a9:b6:30:7e:
34:5b:00:6d:2d:41:58:19:0d:24:ed:1d:fc:fa:5f:
de:a7:48:d1:9e:80:45:1d:55:be:f1:ba:f9:df:f8:
0d:6e:e8:5d:54:d5:5c:fd:9f:82:78:e6:d4:a1:87:
17:4f:b9:21:46:1b:58:1b:62:74:bd:c2:7c:c3:02:
0d:2c:24:4d:79:20:ff:96:1f:4f:40:38:89:df:9e:
fa:89:b3:03:75:27:7a:39:34:57:8c:49:15:3e:b8:
1c:74:37:28:58:e5:50:2b:3f:95:9a:83:b4:c4:2a:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:61:FE:A0:DC:07:BA:B9:E9:D8:E6:8A:D9:40:33:91:0B:24:4F:4F
X509v3 Authority Key Identifier:
keyid:E9:92:A0:35:BF:FC:5A:41:41:2C:49:7C:12:85:D1:83:82:34:FF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/wmH-oNwHurnp2OaK2UAzkQskT08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f5f6b-35e4-4391-9519-b97d336ea2f5/1/6ZKgNb_8WkFBLEl8EoXRg4I0_7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.222.64.0/19
87.249.96.0/19
185.76.16.0/22
217.114.96.0/20
IPv6:
2001:1540::/32
Signature Algorithm: sha256WithRSAEncryption
7d:c6:31:c4:ec:5d:eb:37:05:d4:30:f8:ea:b6:1f:eb:23:07:
3a:72:3d:33:2e:18:7d:ec:9c:d2:8d:22:fe:89:f9:27:a7:10:
00:3e:3d:af:86:fa:9c:b0:90:70:61:28:f0:ff:ce:d0:cb:05:
7f:65:59:6f:90:03:49:5c:33:04:72:09:98:63:dc:a8:aa:4f:
16:ac:4a:2c:39:f7:65:be:c2:0b:8a:87:b4:be:42:19:10:75:
76:1d:59:b8:bc:e7:d1:86:ea:49:0c:cd:2e:51:00:c6:9e:a1:
f8:b6:c6:7e:c7:09:8d:79:0e:a2:c8:35:5e:c3:6b:a5:b0:bc:
fa:6f:49:6d:32:6b:7f:0d:b5:04:d0:cc:57:ee:95:c5:2b:ab:
c5:a3:11:24:9a:f2:7c:9a:fb:40:3b:56:e3:fa:f7:24:d2:cd:
05:65:9d:ca:87:f1:41:79:6c:2e:ae:d3:65:74:74:07:52:6e:
25:0e:fe:c9:9d:e3:74:8c:1d:78:f7:f3:2a:f6:cd:a3:65:44:
06:f5:5e:bc:9a:1d:b3:8c:4f:b0:8d:b6:0d:d4:f6:2d:d2:93:
79:6d:e6:8c:f5:7a:fa:c0:63:9b:4e:49:3a:03:60:88:69:3d:
0e:18:3e:ee:f5:a4:88:53:f8:f3:06:62:74:2a:0f:8c:d5:3c:
9c:2e:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:16 2025 by rpki-client on console.sobornost.net