Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa
File: wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa (raw, json)
Hash identifier: A1fNf8pB5tQL1RUFisCU1kyqkrX8SMY0lp/3rcsduXg=
Subject key identifier: C2:73:AE:CE:5F:88:47:BB:E5:5E:BF:D3:9E:48:66:24:70:B4:29:C4
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 01960FD923092BDEF65C8E101EB6607328E3
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa
Signing time: Mon 07 Apr 2025 10:43:30 +0000
ROA not before: Mon 07 Apr 2025 10:43:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25446
IP address blocks: 93.183.104.0/24 maxlen: 24
93.183.105.0/24 maxlen: 24
93.183.106.0/24 maxlen: 24
185.71.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:d9:23:09:2b:de:f6:5c:8e:10:1e:b6:60:73:28:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Apr 7 10:43:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c273aece5f8847bbe55ebfd39e48662470b429c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f1:89:11:a0:fb:44:40:2e:16:38:c3:e9:6a:
50:4b:bd:48:0a:2a:89:83:9c:b9:cf:1e:62:b3:a2:
64:a6:37:f8:c8:a5:bb:02:5f:ad:9d:b1:ad:9a:2f:
8e:34:ed:34:9b:d0:38:c1:37:a7:5f:db:b0:cf:4e:
4b:06:76:0b:57:f1:05:94:76:a3:67:49:9c:cd:f6:
d2:a6:7f:ba:55:14:3b:85:f7:6f:22:06:33:92:6f:
8b:6f:10:42:fe:51:af:64:7c:c4:0b:97:4f:7d:b1:
ef:56:6a:5c:74:5e:9e:2e:ff:ad:b0:6a:3c:02:b6:
b5:6b:f0:c0:59:fa:2b:d3:d0:80:de:3d:97:c5:45:
33:ac:f2:c5:72:7d:b1:3e:b7:ee:34:c0:0b:e5:4e:
b8:5f:10:1e:29:5f:27:7c:9b:ad:2e:c5:28:22:92:
59:49:3a:a7:4b:60:7c:fe:6d:14:03:71:a7:04:62:
23:e4:de:ca:75:b8:56:7a:53:ef:1d:61:e7:e3:71:
28:f5:4e:91:32:b3:f1:38:0d:85:a5:74:c7:3f:1b:
22:f9:f2:af:18:07:22:f7:f4:e3:20:b2:dc:a5:2e:
fc:9f:35:8b:45:de:4b:68:c2:b4:18:16:ff:f7:ca:
d0:6b:3e:0f:dd:5a:72:ac:e7:58:3a:b4:32:c9:0e:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:AE:CE:5F:88:47:BB:E5:5E:BF:D3:9E:48:66:24:70:B4:29:C4
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/wnOuzl-IR7vlXr_TnkhmJHC0KcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.104.0-93.183.106.255
185.71.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7d:0f:87:09:d9:de:85:f4:c5:7c:76:bc:fe:fb:b5:83:72:
65:a7:e7:12:50:c3:3b:ea:70:b1:cc:8d:75:9b:99:31:2b:43:
6e:a2:d9:73:0d:63:ab:c8:7d:52:8f:61:cc:fd:06:8a:ca:e0:
b5:28:1e:f7:11:f5:ac:b1:99:68:57:21:11:f4:ef:cf:17:b0:
f4:43:70:3a:63:c9:e5:10:ec:79:24:b6:08:6f:86:5a:58:9e:
e3:77:f1:56:b4:9d:5e:34:ec:1d:84:ab:9e:fd:39:d5:bd:27:
b3:a0:76:7d:89:c7:44:ce:ea:52:f9:cd:ab:82:26:e8:c8:44:
51:9a:6e:fe:c7:f4:9c:1c:6d:61:57:1d:15:df:cf:6b:cf:5b:
3a:a0:e1:22:44:0d:16:6a:58:0b:b6:f5:44:27:db:1a:1b:76:
ff:4c:40:ef:99:45:6e:e5:35:23:ff:8d:ba:33:8c:ed:f7:64:
8e:40:6f:50:d6:9b:0a:e4:97:a8:ca:f5:76:d8:6d:e8:f0:a6:
79:e8:7c:9f:8a:83:af:b6:74:bb:19:81:d1:f4:53:3b:c0:88:
3a:e2:30:6f:82:c7:4b:45:87:17:88:9e:39:3c:dd:e0:2d:4f:
ec:4e:45:d1:d2:b2:2e:4f:fb:63:e3:0a:38:54:94:db:2d:1a:
c4:0b:ae:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net