Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/WcvcGB5_rIhp6N6ub_yEOU1frVM.roa
File: WcvcGB5_rIhp6N6ub_yEOU1frVM.roa (raw, json)
Hash identifier: SAdoS4J2d6uhrm3KFzHcrPvgGi6wPamf1S8poWnS5sg=
Subject key identifier: 59:CB:DC:18:1E:7F:AC:88:69:E8:DE:AE:6F:FC:84:39:4D:5F:AD:53
Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Certificate serial: 0194274719A4F7D0E933AC7DB1413E535027
Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/WcvcGB5_rIhp6N6ub_yEOU1frVM.roa
Signing time: Thu 02 Jan 2025 13:49:18 +0000
ROA not before: Thu 02 Jan 2025 13:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208689
IP address blocks: 185.92.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:19:a4:f7:d0:e9:33:ac:7d:b1:41:3e:53:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e
Validity
Not Before: Jan 2 13:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59cbdc181e7fac8869e8deae6ffc84394d5fad53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:44:98:8e:7f:dc:ca:d2:26:99:57:1a:e9:
cc:cd:a8:99:3b:3f:ec:15:3c:8f:eb:d3:3f:c1:32:
4d:57:b3:5a:fb:3c:fb:5e:cf:f7:80:c3:7c:35:01:
24:f5:c2:ab:e4:41:88:d7:0f:61:9c:bf:e3:a5:2e:
b0:73:0b:9a:08:ba:86:0c:51:66:08:73:97:c6:4b:
94:1c:61:30:09:71:5d:5a:e0:f3:2b:e2:37:81:cf:
92:e7:34:93:5a:be:b0:6a:31:19:7c:0e:95:cc:fe:
eb:c0:58:15:5b:73:5e:ae:2a:93:44:5a:27:3d:86:
37:91:7f:48:56:fe:83:6b:10:04:2a:47:0c:f5:df:
46:29:3b:12:c6:7b:cd:45:77:c0:22:ee:4f:65:05:
ae:4a:83:83:fc:62:5a:4b:d2:99:3b:e4:ca:b8:63:
b2:07:41:ae:98:80:6e:03:37:c5:98:c1:c3:c4:52:
79:ac:73:d0:e5:97:90:15:b9:9c:5b:78:6a:db:fe:
ba:43:2d:fe:24:67:4c:1f:cf:59:17:bd:b1:78:93:
d3:90:04:a5:e0:02:d6:b4:40:b1:6e:6c:e0:fc:07:
69:42:fc:2c:4e:d7:09:5c:84:99:4f:04:0c:29:d2:
fa:a1:a6:97:5b:9d:f6:c0:73:2f:49:ec:72:a6:61:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:DC:18:1E:7F:AC:88:69:E8:DE:AE:6F:FC:84:39:4D:5F:AD:53
X509v3 Authority Key Identifier:
keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/WcvcGB5_rIhp6N6ub_yEOU1frVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.103.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f8:97:c6:2f:c1:9e:14:91:d9:e4:83:f9:fc:e8:04:77:34:
8a:84:6e:86:4e:ca:24:d2:64:38:07:2b:16:39:9a:50:74:a4:
0d:f4:a2:50:d7:b9:bc:bd:88:15:37:73:1a:46:54:e6:a0:a5:
53:3f:a8:be:21:98:8d:66:d0:22:f0:63:65:cc:a1:0d:5d:27:
77:61:53:45:8c:5d:47:2c:d9:4a:b3:de:12:2d:97:8e:af:41:
49:b5:41:0d:a0:05:84:7c:e6:4e:8f:5b:bb:2e:93:d8:75:b3:
cd:3c:6c:3e:e6:cc:27:a2:aa:d2:90:28:d3:d0:67:ed:be:b5:
1f:f7:51:33:81:cf:01:3c:10:26:4d:cc:c0:7c:73:8b:7f:cb:
80:5d:76:b9:c7:42:ba:40:7b:96:2c:cc:f4:30:67:42:c3:6f:
13:9b:a8:e8:12:18:65:04:63:34:12:83:ec:12:b0:45:ee:e6:
4a:e8:6a:ea:aa:81:71:d2:f7:64:6d:16:1a:20:83:53:6c:ea:
a8:44:2d:48:cd:88:9b:a7:19:a4:6c:e3:f6:6e:45:17:00:3b:
84:da:6d:43:45:6c:22:6c:b7:fa:91:c4:c1:63:56:e0:15:e5:
02:19:af:1d:85:4b:15:2d:f7:a7:e8:15:80:2d:3d:1f:ba:0d:
e1:92:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:48 2025 by rpki-client on console.sobornost.net