Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/WtT0iRRNWOEnnJNbpojOaIceMDQ.roa
File: WtT0iRRNWOEnnJNbpojOaIceMDQ.roa (raw, json)
Hash identifier: GuNBmImvmC1qMkMAYPrdjYcM0SGHFORb2IyKWp/uvJM=
Subject key identifier: 5A:D4:F4:89:14:4D:58:E1:27:9C:93:5B:A6:88:CE:68:87:1E:30:34
Certificate issuer: /CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Certificate serial: 01941F8C47382F357D1C8F2B72122EA08E0A
Authority key identifier: 6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/WtT0iRRNWOEnnJNbpojOaIceMDQ.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212003
IP address blocks: 176.126.158.0/23 maxlen: 23
176.126.158.0/24 maxlen: 24
176.126.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:38:2f:35:7d:1c:8f:2b:72:12:2e:a0:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f98d1f99e3833ef401d46348eec8b752088c55d
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ad4f489144d58e1279c935ba688ce68871e3034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:5d:a6:90:3a:fa:76:86:3d:c9:52:54:07:
7d:d9:d9:82:85:57:2a:ca:54:ab:e5:16:7a:1a:52:
15:35:c8:eb:a3:e6:92:16:1e:85:d8:97:21:c2:13:
20:5d:f6:34:9e:05:9b:cb:0e:ce:c6:7a:cb:eb:f6:
c8:64:43:6a:89:3f:26:2c:18:fb:b1:4c:bd:01:fe:
47:94:a6:24:70:57:05:74:84:d9:e6:15:00:f8:96:
e5:68:77:d9:2c:bd:4d:0b:8d:d1:60:97:3d:36:8c:
9b:7d:e0:f9:07:2f:b4:ff:85:ae:4b:54:0f:ce:a3:
2e:86:9a:f0:9b:bb:cb:be:3c:a3:de:6d:9a:ed:fe:
ce:78:e9:c1:fe:bb:da:96:e3:20:4f:d4:ef:bf:df:
fe:9e:b6:ba:a3:4a:db:f8:ac:67:b7:c8:d5:49:39:
6e:57:fb:30:60:0b:4d:ec:bc:68:4d:c7:a2:01:58:
6f:80:bc:75:3f:41:01:56:db:7b:83:d0:ff:9f:81:
34:de:d7:3f:13:7a:99:b2:da:77:ae:ba:d3:bc:b5:
a7:9d:7b:e5:ce:69:b2:8d:2a:ff:2e:0d:e6:81:2b:
8c:9c:7c:c8:1e:81:d0:1d:c1:82:21:1a:17:e6:68:
78:1f:e7:21:32:e1:f7:06:1b:da:a5:04:2c:9b:bb:
2e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:F4:89:14:4D:58:E1:27:9C:93:5B:A6:88:CE:68:87:1E:30:34
X509v3 Authority Key Identifier:
keyid:6F:98:D1:F9:9E:38:33:EF:40:1D:46:34:8E:EC:8B:75:20:88:C5:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5jR-Z44M-9AHUY0juyLdSCIxV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/WtT0iRRNWOEnnJNbpojOaIceMDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c08f1-96e0-4c54-a466-07d4b115cc82/1/b5jR-Z44M-9AHUY0juyLdSCIxV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.158.0/23
Signature Algorithm: sha256WithRSAEncryption
72:d7:e2:eb:fe:c7:08:fe:c0:04:f2:61:f4:d0:83:16:5a:90:
fd:02:27:36:b4:39:2a:7b:f8:45:a0:69:3d:51:96:ac:04:bd:
e6:1d:7a:00:e5:3e:83:33:ff:97:04:d1:ec:c3:69:ba:50:44:
59:53:1d:55:e5:0f:5f:42:70:28:ae:20:65:1b:2d:2b:fc:35:
b4:d3:b8:b6:ac:23:65:08:91:c2:59:41:a9:5b:29:30:1a:65:
ca:23:82:2d:99:f2:29:0a:2e:d9:b1:aa:64:07:8d:d3:19:d2:
9a:18:a7:59:b9:be:ad:8d:53:b5:54:a5:07:b8:68:33:32:76:
e1:b9:4d:ba:c0:a8:ea:3b:9e:11:4c:52:58:44:ea:7b:91:98:
23:63:45:6b:17:9c:af:7a:e8:fb:08:f3:64:c3:81:f5:89:57:
07:5d:0a:eb:fe:67:65:00:82:54:d1:2b:32:c2:ab:0d:ca:5a:
dd:3b:c2:3f:10:ae:c9:ff:e0:2f:4e:01:97:d3:3d:81:92:eb:
d9:7c:81:25:21:46:6a:7f:2c:98:58:61:25:f4:2f:0e:2f:48:
6f:23:4e:48:1f:e0:5b:fe:33:e3:fc:46:23:d1:1a:50:23:18:
80:49:ef:6b:83:d4:22:4f:a7:14:85:f7:bc:05:cf:76:e1:04:
91:cc:c0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net