Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/feuWbN684NC0tpApVi7tWaRcPd4.roa
File: feuWbN684NC0tpApVi7tWaRcPd4.roa (raw, json)
Hash identifier: xnbqWg5wH1NxKTKlEYNAP3nAQw3zSSpqXFNEvSxFsxE=
Subject key identifier: 7D:EB:96:6C:DE:BC:E0:D0:B4:B6:90:29:56:2E:ED:59:A4:5C:3D:DE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 01942143A4663E6D743BE6B3F0797E7E54D3
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/feuWbN684NC0tpApVi7tWaRcPd4.roa
Signing time: Wed 01 Jan 2025 09:47:48 +0000
ROA not before: Wed 01 Jan 2025 09:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 77.95.120.0/21 maxlen: 21
185.63.148.0/22 maxlen: 22
194.187.88.0/22 maxlen: 24
194.187.88.0/24 maxlen: 24
212.103.64.0/19 maxlen: 19
212.103.64.0/24 maxlen: 24
212.103.65.0/24 maxlen: 24
217.11.208.0/20 maxlen: 20
217.146.160.0/20 maxlen: 20
217.146.165.0/24 maxlen: 24
2a00:c38::/32 maxlen: 32
2a00:c38:1a5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a4:66:3e:6d:74:3b:e6:b3:f0:79:7e:7e:54:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jan 1 09:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7deb966cdebce0d0b4b69029562eed59a45c3dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:ac:41:25:01:1e:60:c0:53:5b:0b:13:7b:
e1:3b:1b:c8:8b:72:59:b0:7e:25:d3:71:36:86:6f:
d6:34:d2:04:c2:33:1b:42:dd:e7:e9:bd:db:a7:3d:
79:8f:9f:d5:e1:71:24:05:30:63:0d:f0:12:44:cc:
76:6f:3a:c5:9d:7b:11:e6:d6:24:3f:f3:5a:55:d7:
11:aa:02:b9:47:bd:9c:07:73:9c:c0:a3:b9:b5:0a:
73:7a:ae:e3:a4:04:36:ea:97:17:5c:64:8a:18:85:
fb:64:df:9e:37:3e:1b:6e:71:37:fe:64:04:ab:03:
e7:91:12:68:c8:e9:1c:0b:80:10:92:4e:4d:62:e8:
20:37:42:00:5b:42:46:00:79:4d:20:14:a9:3d:95:
24:08:5c:3e:c4:fb:48:1d:16:52:b0:30:19:16:57:
0b:cd:6b:28:cb:fd:d4:a7:99:95:37:6e:a5:df:37:
79:cc:58:53:69:c6:a0:ea:c3:d6:e6:c6:88:85:21:
f8:e8:e9:74:65:87:6f:3b:8c:fa:5b:ed:b3:21:13:
df:2f:79:be:93:a4:6b:e7:46:92:c4:03:70:6b:ca:
e0:76:87:58:cf:b3:f7:c5:4c:93:ad:f3:3a:9b:81:
89:17:63:10:55:6d:2e:3d:95:0c:58:46:31:3e:77:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EB:96:6C:DE:BC:E0:D0:B4:B6:90:29:56:2E:ED:59:A4:5C:3D:DE
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/feuWbN684NC0tpApVi7tWaRcPd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.120.0/21
185.63.148.0/22
194.187.88.0/22
212.103.64.0/19
217.11.208.0/20
217.146.160.0/20
IPv6:
2a00:c38::/32
Signature Algorithm: sha256WithRSAEncryption
a1:c9:62:57:41:aa:eb:b9:35:62:51:bc:42:79:3a:01:78:ba:
c9:af:70:08:ec:0f:73:54:ff:8f:90:f3:79:ff:4d:98:1a:25:
32:a4:17:48:50:d9:e0:08:f6:bb:28:ec:b3:0a:f6:59:fc:fe:
b0:fb:93:89:1f:07:58:ee:cc:7a:8e:33:ef:0e:01:b5:bf:ee:
6f:31:8e:6f:15:8b:a0:81:61:0d:b9:88:54:b6:34:67:42:3a:
e0:b5:34:ff:20:e9:d4:dd:8a:e2:b4:0b:4a:f0:8b:cf:63:9c:
08:e2:3f:25:13:f6:b5:88:5c:3d:38:9e:c2:fc:4a:d1:50:7b:
90:df:66:82:46:99:4f:56:17:d8:38:5a:c9:aa:dd:d9:72:af:
c8:f2:6d:a4:35:be:b6:8f:65:05:80:f7:5d:d2:19:15:91:e5:
e2:46:ff:a8:7c:96:9d:63:b5:9a:1e:4c:7f:c7:41:7b:7e:d3:
b4:c3:b3:f1:36:cb:a5:f3:49:29:12:53:6f:54:b2:26:c0:3c:
b1:2e:66:09:bc:0d:1a:b4:db:29:5d:f7:4c:e9:51:bd:90:f7:
07:63:2c:b8:48:db:57:b5:8f:50:06:a1:80:2f:55:f5:09:c5:
3d:8d:c4:4b:4e:da:dd:ae:1d:a6:0b:59:e6:23:9f:2d:6c:ac:
fa:80:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:02 2025 by rpki-client on console.sobornost.net