Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wwlt2hK8l53pvlwYMtoaW4Ty7wo.roa
File: wwlt2hK8l53pvlwYMtoaW4Ty7wo.roa (raw, json)
Hash identifier: OS5MPuFmrI+TPRKuwjrDIui0RjzgE9QrGAKYQntJtcY=
Subject key identifier: C3:09:6D:DA:12:BC:97:9D:E9:BE:5C:18:32:DA:1A:5B:84:F2:EF:0A
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0195FD69E2D587EEF80F90364182E7C01B60
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wwlt2hK8l53pvlwYMtoaW4Ty7wo.roa
Signing time: Thu 03 Apr 2025 20:48:49 +0000
ROA not before: Thu 03 Apr 2025 20:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
45.147.44.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
194.116.228.0/24 maxlen: 24
194.116.236.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
194.146.26.0/24 maxlen: 24
194.146.36.0/24 maxlen: 24
194.146.47.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb05::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a441::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fd:69:e2:d5:87:ee:f8:0f:90:36:41:82:e7:c0:1b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 3 20:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3096dda12bc979de9be5c1832da1a5b84f2ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:ca:bb:40:90:c2:50:2e:1d:30:aa:ad:55:
17:34:b5:25:b9:fa:7b:23:4d:85:23:79:52:81:b0:
d7:af:fd:ae:34:2e:b0:3c:b1:b6:49:73:1f:b7:3d:
4e:d7:5a:c9:07:2a:27:bc:17:24:8a:2b:7b:0a:93:
cb:3a:7d:0a:17:17:e0:30:a4:cc:1d:96:26:0a:9c:
c9:fa:53:e6:43:a6:43:7e:c5:7c:26:9e:e0:25:da:
51:2a:21:81:12:07:f9:9a:2f:4d:51:0f:d8:c6:1f:
94:74:58:ee:8a:ab:a3:21:23:b8:73:79:94:bd:01:
c4:a1:0c:d3:61:a2:87:4e:a1:09:8c:22:76:b0:d5:
f8:95:33:7d:4b:6f:04:0f:31:68:0e:df:e5:8b:2f:
4c:51:f1:f0:7c:5a:39:dd:8b:ae:f9:c8:bc:40:41:
24:3e:9f:7b:eb:9c:1e:c7:03:74:2c:51:a3:ed:5b:
0a:3b:ae:a7:74:bb:72:02:5f:ec:a9:11:12:7a:b4:
f3:54:20:8f:55:25:51:37:97:09:12:1e:2e:11:14:
c2:2c:59:61:82:99:16:79:d8:e5:dd:1f:dd:7c:89:
81:45:0b:d3:08:14:9b:dc:b1:dc:18:6a:3c:73:2e:
c4:d8:38:26:65:28:8d:b1:3a:4e:a9:8c:25:2d:d1:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:6D:DA:12:BC:97:9D:E9:BE:5C:18:32:DA:1A:5B:84:F2:EF:0A
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/wwlt2hK8l53pvlwYMtoaW4Ty7wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.131.0.0/22
45.136.4.0/24
45.141.148.0/23
45.147.44.0/24
77.83.200.0-77.83.202.255
194.116.228.0/24
194.116.236.0/23
194.146.26.0/24
194.146.36.0/24
194.146.47.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a441::/32
2a13:a445::/32
2a13:a447::/32
Signature Algorithm: sha256WithRSAEncryption
42:eb:0e:ba:d9:11:03:b8:3a:ce:de:3d:26:82:5c:d4:8a:b4:
3c:e8:42:93:3b:7f:d4:15:85:84:5b:71:6a:82:81:be:d3:24:
de:cf:d7:1f:6a:3a:d8:d2:ed:7f:98:bb:60:f4:4c:67:06:14:
10:24:63:a6:0a:22:07:83:4a:92:69:13:26:60:0b:00:4e:75:
1f:52:06:53:bc:5d:a7:d4:54:90:ab:45:7f:7e:3a:f0:e0:69:
70:42:71:69:bb:43:be:fb:af:4a:9a:3f:91:17:e9:14:4d:70:
40:21:8b:4a:85:1b:24:59:1d:83:ec:6f:fa:9a:1a:27:e5:ff:
da:b4:6d:2b:6d:69:e2:4f:8f:b3:10:81:a4:42:cd:bf:d0:00:
df:fa:49:4d:3a:07:08:9b:80:6e:9b:03:4f:d0:9f:4d:0c:6a:
8d:bf:97:ab:7d:3f:c0:87:ad:12:87:01:91:9d:a3:7d:c3:00:
d6:c5:a7:6f:76:87:51:53:7c:17:50:39:f3:ad:b0:70:1f:37:
ba:a5:c5:54:ac:c4:d0:50:56:b7:7c:13:5f:f8:dc:7b:3e:49:
4f:8b:d8:78:f1:a7:af:d1:73:48:37:09:39:18:a3:37:bc:87:
d4:f3:d9:1e:e9:f6:5b:89:70:af:ad:18:39:50:00:30:b1:0f:
fb:6f:b5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net