Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/WIThVUQPtnkqQGydyKr4DwKXGUc.roa
File: WIThVUQPtnkqQGydyKr4DwKXGUc.roa (raw, json)
Hash identifier: ZG07WmGePqEgXeU18ulf3ZqT0pP1PSE97ftBth4OPug=
Subject key identifier: 58:84:E1:55:44:0F:B6:79:2A:40:6C:9D:C8:AA:F8:0F:02:97:19:47
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 019427471879FCDA28306F080F3065BFE1AB
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/WIThVUQPtnkqQGydyKr4DwKXGUc.roa
Signing time: Thu 02 Jan 2025 13:49:18 +0000
ROA not before: Thu 02 Jan 2025 13:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21013
IP address blocks: 80.243.160.0/20 maxlen: 20
85.31.0.0/19 maxlen: 19
185.91.80.0/22 maxlen: 22
212.52.192.0/19 maxlen: 19
2a02:940::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:18:79:fc:da:28:30:6f:08:0f:30:65:bf:e1:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jan 2 13:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5884e155440fb6792a406c9dc8aaf80f02971947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:5b:67:3b:04:84:65:bd:c0:6d:9f:49:a6:
42:33:cf:95:b3:51:34:f1:dd:12:4c:9f:0e:e7:a7:
86:86:8b:d5:30:58:37:1a:f0:15:d4:0d:71:24:a2:
26:b9:b1:a8:67:13:2c:f1:02:a3:6c:4c:99:91:92:
4e:90:ce:03:d3:a1:16:bd:da:2e:85:a6:8d:4d:fd:
c5:92:56:90:7d:c5:3f:36:a9:c9:c4:d2:8a:cd:86:
66:f7:8c:9b:ec:9b:6e:38:67:a8:3a:89:52:bb:e5:
7d:55:da:fa:e2:86:76:af:be:97:24:91:8b:7d:25:
f5:9c:ba:7f:80:29:38:0c:4b:3f:7b:dc:03:7f:ba:
de:fa:76:ab:e6:6a:1b:09:57:c3:5e:ab:e6:4a:92:
f6:37:3a:70:bf:a1:b3:16:06:db:3d:4e:a3:94:cd:
72:e7:54:c6:8f:b3:f8:a7:f6:b1:56:a1:98:b6:c1:
50:20:c0:2a:b1:d1:52:b5:f0:9a:e6:78:52:a2:d3:
82:16:47:97:ad:2d:09:18:d7:29:59:07:04:9c:6f:
94:a8:fa:73:5f:8b:cf:f9:ed:09:4b:18:37:ab:60:
2d:74:39:7f:fa:f5:71:88:6b:2d:fd:84:89:a0:cd:
de:63:2e:a5:2a:c3:15:45:cd:90:67:a5:3b:de:c5:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:84:E1:55:44:0F:B6:79:2A:40:6C:9D:C8:AA:F8:0F:02:97:19:47
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/WIThVUQPtnkqQGydyKr4DwKXGUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.160.0/20
85.31.0.0/19
185.91.80.0/22
212.52.192.0/19
IPv6:
2a02:940::/32
Signature Algorithm: sha256WithRSAEncryption
92:de:01:98:92:2d:37:8b:49:c8:18:6b:1a:50:7f:09:b6:7f:
a1:c7:f5:1d:0a:41:17:51:fa:29:07:5d:92:26:75:a6:88:35:
5c:ba:be:eb:12:77:ce:30:7e:ce:95:da:e0:52:ff:f0:7f:ef:
b8:05:01:3a:7a:52:61:62:88:db:28:90:31:98:a8:9a:5a:af:
e2:05:c9:a7:7e:8e:5a:9f:cb:fd:7b:5a:5c:2f:c4:5c:fe:b1:
44:33:e4:8a:59:a6:e6:81:39:af:3e:11:a2:03:18:af:0b:a2:
13:a5:46:93:82:25:e0:c4:ed:a8:68:df:6d:0c:b9:ff:ad:5c:
12:a3:10:fc:a9:38:05:d0:58:18:40:ba:87:28:ca:5d:02:63:
3f:b6:56:d2:25:f9:8f:0f:1d:d4:81:46:55:a2:16:b9:a8:6a:
be:a0:cb:4c:6c:fd:87:35:22:3b:c2:fb:d5:48:d8:23:67:99:
07:d1:95:d3:83:97:22:8e:fb:da:4d:3b:d6:6f:36:17:83:7a:
0f:b3:3e:fd:de:17:e2:31:00:c4:87:c8:22:b1:c7:51:a5:96:
94:14:99:4f:55:1b:e6:98:e2:ff:28:df:24:ae:7d:83:c6:16:
3c:1e:15:4f:70:d9:3c:e1:0b:e1:bf:8e:e3:82:9c:3a:2b:9f:
88:19:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net