Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/wM-Q4PYw-g7L6gGW4qe1neIC43c.roa
File: wM-Q4PYw-g7L6gGW4qe1neIC43c.roa (raw, json)
Hash identifier: hm2k81ASEePQ7E1Ry4WD3zVSD28SUrbakN2SZMVNLMg=
Subject key identifier: C0:CF:90:E0:F6:30:FA:0E:CB:EA:01:96:E2:A7:B5:9D:E2:02:E3:77
Certificate issuer: /CN=82e472a2b87ff1682d362f0dde418e9311ac0464
Certificate serial: 019422FC39E434EF62B9D6B8C8CF685C9ED7
Authority key identifier: 82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/wM-Q4PYw-g7L6gGW4qe1neIC43c.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35588
IP address blocks: 193.169.146.0/23 maxlen: 23
194.213.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:39:e4:34:ef:62:b9:d6:b8:c8:cf:68:5c:9e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e472a2b87ff1682d362f0dde418e9311ac0464
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0cf90e0f630fa0ecbea0196e2a7b59de202e377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:35:57:ff:d4:1c:df:ca:3b:79:81:b5:dd:
6b:78:54:ce:4f:30:7e:f5:3b:4b:41:91:ad:bc:63:
d0:9d:88:3a:d8:ca:36:1d:9b:df:8d:da:e8:0f:a6:
cd:2f:97:f7:ec:4d:38:60:46:1a:2d:a2:f6:5c:46:
c4:b1:59:29:c6:85:71:68:39:a4:8e:d0:e7:d8:f0:
5a:dd:85:87:7c:10:e3:1b:7f:0b:bf:cf:e9:05:39:
ee:c4:bb:55:6a:87:87:d3:dd:10:49:42:c3:58:0d:
f1:ee:66:44:cb:ac:0a:fd:cc:8c:b0:60:35:13:38:
d2:61:ff:25:fb:2f:fc:4f:a7:6b:8a:3c:30:0a:f3:
6c:4e:58:c8:b9:17:61:ff:8b:50:01:fd:a8:c7:f2:
9d:b8:de:54:70:c0:1b:9a:d9:6e:98:94:e7:8f:9a:
b7:2e:79:26:14:71:27:5f:07:bc:f2:76:22:0d:b3:
80:57:c7:c3:e8:97:7d:d5:26:67:43:cc:dd:ff:a5:
f0:23:18:86:7a:b6:1b:8b:78:6c:26:56:26:04:fa:
d6:ca:1b:3f:79:12:57:8d:bb:b6:71:90:2e:a1:e6:
06:a6:ab:d9:6e:27:9b:0b:b6:24:7b:89:b2:d5:ea:
2d:ad:bb:cd:58:9f:b4:ef:85:09:83:c0:1f:49:86:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:90:E0:F6:30:FA:0E:CB:EA:01:96:E2:A7:B5:9D:E2:02:E3:77
X509v3 Authority Key Identifier:
keyid:82:E4:72:A2:B8:7F:F1:68:2D:36:2F:0D:DE:41:8E:93:11:AC:04:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guRyorh_8WgtNi8N3kGOkxGsBGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/wM-Q4PYw-g7L6gGW4qe1neIC43c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/92b4d6-b924-4b31-94d7-23616c79ae02/1/guRyorh_8WgtNi8N3kGOkxGsBGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.146.0/23
194.213.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:70:3b:e5:be:58:fb:b1:be:ef:98:24:8c:48:ec:4c:7e:63:
8a:2a:91:2f:22:09:65:7f:e1:02:33:04:c1:e9:a1:66:a3:59:
af:5e:79:2c:98:3d:e0:c4:a3:96:bd:d7:42:57:66:b7:d9:78:
5b:b7:9c:7e:ed:14:e5:8e:5b:73:19:d1:ce:47:57:b4:e3:2a:
f2:22:1e:33:5e:62:db:d5:dc:0a:8e:32:81:36:67:ab:a8:bc:
2c:43:ca:57:0d:84:ce:a2:49:f8:7b:d0:8c:f4:c6:6f:21:37:
45:a5:3b:f1:e6:08:1b:38:68:b9:45:18:0b:c9:7b:65:83:f8:
3e:61:62:39:d7:6c:ce:c5:20:11:74:23:fb:08:e5:cd:bb:83:
63:11:08:0f:e7:5d:02:b5:34:b4:93:7a:07:ed:03:08:24:cd:
c7:9a:33:8e:fe:ac:fa:83:44:64:05:22:f8:93:e6:a8:fd:42:
6d:20:9d:37:e2:08:d7:55:f5:56:dd:e2:35:3a:c7:42:7d:3f:
26:41:65:57:c5:95:0e:66:99:38:2e:22:4d:c1:5f:71:f2:3b:
8d:99:63:23:62:46:45:18:cb:ff:2e:61:cc:c7:1b:82:d1:56:
6f:7d:89:0d:2e:3e:11:b5:63:26:75:85:1d:84:da:37:04:9a:
03:b5:8c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:43 2025 by rpki-client on console.sobornost.net