Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/W8dz6fPF5nAeCA_zzzrcyNUu9y4.roa
File: W8dz6fPF5nAeCA_zzzrcyNUu9y4.roa (raw, json)
Hash identifier: Ohz1+HKhl4RDK0eZJVAwjJyz1nCmEQHXPSdTNpk6mo4=
Subject key identifier: 5B:C7:73:E9:F3:C5:E6:70:1E:08:0F:F3:CF:3A:DC:C8:D5:2E:F7:2E
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01954764C04C8B9DAD48F6E0A7EDB554C7B8
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/W8dz6fPF5nAeCA_zzzrcyNUu9y4.roa
Signing time: Thu 27 Feb 2025 12:32:19 +0000
ROA not before: Thu 27 Feb 2025 12:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8311
IP address blocks: 194.143.210.0/23 maxlen: 23
194.143.211.0/24 maxlen: 24
194.143.212.0/23 maxlen: 23
194.143.215.0/24 maxlen: 24
213.220.10.0/23 maxlen: 23
213.220.12.0/22 maxlen: 22
213.220.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:64:c0:4c:8b:9d:ad:48:f6:e0:a7:ed:b5:54:c7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Feb 27 12:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bc773e9f3c5e6701e080ff3cf3adcc8d52ef72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:4f:ce:4a:05:b3:d8:48:d1:16:f0:71:81:
a2:42:ed:b4:5f:c1:56:d2:08:63:37:cb:2e:23:2a:
e2:20:30:83:39:52:09:8d:87:6c:5c:1e:7e:ce:01:
c1:54:0d:9b:15:25:bf:4b:ab:35:2a:ae:7d:3d:10:
be:d1:08:e9:77:28:bc:f9:9c:d5:67:d9:64:32:20:
7c:1f:ca:49:27:a5:39:58:6e:af:fa:4c:5d:56:8b:
24:5b:41:ee:97:a6:4b:10:57:af:a5:29:35:c0:61:
91:32:02:59:07:e0:5e:0c:98:73:4e:c8:ea:b6:08:
d6:4e:58:69:0c:1b:88:ee:88:1f:72:58:41:2b:f1:
ad:39:50:f2:43:a8:fa:f9:71:d0:8e:18:c6:98:0e:
cf:e5:8b:64:fa:26:03:68:00:7a:29:6c:f9:63:17:
2a:b8:94:e8:08:af:1a:ef:c3:a8:58:0b:c3:b6:55:
1a:61:5f:35:09:8a:ce:51:44:0b:e8:f9:bd:1d:8a:
73:24:54:35:08:e4:6a:50:af:63:c3:4b:b6:bc:d8:
35:5b:6c:b4:52:fe:ec:68:cf:7e:3c:ab:c8:73:1b:
95:ac:9e:33:bc:ae:32:1d:cf:c0:2c:ae:16:65:81:
b0:5a:bb:91:e1:04:22:98:a5:55:a8:f9:a8:6a:64:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:73:E9:F3:C5:E6:70:1E:08:0F:F3:CF:3A:DC:C8:D5:2E:F7:2E
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/W8dz6fPF5nAeCA_zzzrcyNUu9y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.210.0-194.143.213.255
194.143.215.0/24
213.220.10.0-213.220.15.255
213.220.32.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:a9:f0:55:4c:4d:38:1f:ca:a7:42:26:94:a8:0c:4d:70:1a:
bd:6c:d7:d7:3e:17:51:4f:32:02:c0:d8:02:80:07:fa:26:d5:
a7:f1:dc:79:90:07:22:e1:5a:a8:74:48:5a:63:71:40:3f:ef:
8b:6b:98:f2:f1:75:79:43:84:17:b3:9a:dc:4d:8b:ce:10:96:
6b:46:93:ce:dc:22:35:e3:49:28:b1:a1:9c:a3:63:13:5d:84:
e0:88:b1:1c:35:28:39:e1:6e:05:f3:0f:d2:b3:89:d9:47:32:
46:74:ca:71:5a:28:53:45:41:c7:9b:22:c4:7d:5b:5e:51:f6:
b4:f0:2a:e4:e9:a6:00:ac:b7:92:0f:de:90:19:2a:6f:59:2b:
cb:40:c4:cb:25:0d:53:af:cc:b9:eb:7d:30:0c:ac:a1:a0:51:
62:9f:5e:ae:60:70:61:b9:06:64:ed:b6:53:c0:be:18:90:48:
d8:97:2b:a1:0a:c4:0d:44:af:b6:c3:b7:2c:fd:9d:73:58:46:
80:e9:db:eb:fd:12:c1:c3:bd:6f:25:ff:76:fb:5c:9f:f4:3a:
3d:94:04:37:8d:84:11:d3:56:cc:97:94:0e:0b:0f:0e:28:68:
b9:0a:35:78:3d:4d:c8:b9:47:71:2a:c7:83:2d:c3:e1:48:ca:
8a:02:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:06 2025 by rpki-client on console.sobornost.net