Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/3WOQMHHA_gyX03awABhKzOim3Bs.roa
File: 3WOQMHHA_gyX03awABhKzOim3Bs.roa (raw, json)
Hash identifier: ZA+s/EckArtDe+QZpgBb9d1KuxQcRDkEk6RSEwu6Y0k=
Subject key identifier: DD:63:90:30:71:C0:FE:0C:97:D3:76:B0:00:18:4A:CC:E8:A6:DC:1B
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019427472E33FF95501D9E78AE384A561E3B
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/3WOQMHHA_gyX03awABhKzOim3Bs.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43803
IP address blocks: 213.155.176.0/24 maxlen: 24
213.155.182.0/23 maxlen: 23
213.155.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2e:33:ff:95:50:1d:9e:78:ae:38:4a:56:1e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd63903071c0fe0c97d376b000184acce8a6dc1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:53:d2:82:18:e5:18:51:cf:f7:94:44:b2:d2:
8a:b8:9e:c6:33:9d:f5:16:b2:2a:32:9f:ae:1c:fd:
36:8a:a8:c5:4e:28:e2:e9:6e:24:ce:c7:6e:5d:6f:
f9:3d:11:ee:7b:74:a1:85:30:14:a7:03:51:d7:34:
de:9f:db:e5:b1:b0:c4:bc:c4:30:e8:1c:55:4f:87:
39:8e:28:a7:8c:22:b8:38:7a:ea:ac:8e:22:b2:b2:
a7:41:76:21:42:c4:1c:e3:8d:af:4a:cf:2d:a3:94:
7d:ee:e2:db:9d:7c:c7:8d:8d:5e:6e:f1:80:e5:d7:
4e:9a:dc:ab:9d:4f:45:41:6f:c3:7d:38:bf:a0:ee:
2f:ae:3a:32:d8:6e:b0:39:dd:71:69:bd:f3:54:61:
02:75:f0:f5:2a:88:ff:0e:0d:ea:f1:f4:cc:ac:5f:
61:d0:7c:81:37:71:6e:f3:6b:94:d4:4f:19:12:4d:
8d:cb:e6:91:97:3c:ae:af:cb:24:e5:ba:52:dc:1c:
8f:77:3d:bc:24:69:62:0d:6f:fe:ad:29:4f:09:51:
48:52:2b:ba:87:18:a2:db:58:97:9a:cc:8d:31:7a:
b3:01:12:17:93:3d:98:87:d8:a9:b8:34:8c:23:15:
4e:8f:36:21:4c:eb:9a:13:c8:c1:73:d9:5f:9e:67:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:63:90:30:71:C0:FE:0C:97:D3:76:B0:00:18:4A:CC:E8:A6:DC:1B
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/3WOQMHHA_gyX03awABhKzOim3Bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.155.176.0/24
213.155.182.0/23
213.155.188.0/23
Signature Algorithm: sha256WithRSAEncryption
68:ad:e4:28:7b:16:4a:0d:79:14:dc:4a:82:ae:9f:c3:81:0a:
45:28:bd:c7:78:66:5a:02:89:ca:6a:08:d0:43:e5:72:17:21:
b2:22:ae:05:94:8f:c0:46:c0:44:71:a3:11:94:94:38:4b:f5:
dd:9c:3b:f0:05:5e:e5:b6:d6:a2:b0:20:6b:df:85:62:3d:5b:
6d:4a:3a:4b:0a:b0:78:05:a8:40:5a:0b:89:d6:9c:e6:d7:f3:
a5:59:c6:2a:37:73:be:02:45:17:78:af:b4:7d:81:ea:ee:f4:
55:87:bc:05:bd:b7:4b:a4:1e:3e:9b:78:a4:12:56:9c:0a:6d:
40:c6:a0:2c:d5:5f:68:a6:4d:d5:e4:d9:44:46:bb:e3:81:5a:
bd:ae:90:56:ff:b4:cf:31:dd:69:56:2c:fa:2e:0a:d5:8d:c1:
d9:07:c8:17:df:3c:8f:e7:61:6c:d6:53:40:23:44:60:00:34:
e0:a8:12:7a:36:ab:84:89:78:9a:ef:6c:fb:20:e8:f6:c3:34:
4f:80:94:2a:59:0b:09:39:3c:62:0c:66:92:ae:4f:52:f6:bc:
5f:e0:60:47:e7:f4:10:0d:73:dd:71:cf:cf:9f:ce:36:43:7c:
f5:52:28:76:2c:a0:b7:7c:86:da:57:e0:df:4d:33:03:f6:07:
2c:26:1a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:39 2025 by rpki-client on console.sobornost.net