Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WFDQeOHjR2aJsciDLIKF1SP1NVY.roa
File: WFDQeOHjR2aJsciDLIKF1SP1NVY.roa (raw, json)
Hash identifier: L3TySPZRmJMlkyVyLpqNiASHdmfjFtldyvLVDSDq/So=
Subject key identifier: 58:50:D0:78:E1:E3:47:66:89:B1:C8:83:2C:82:85:D5:23:F5:35:56
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C7C3A84632315E69715283C57D773
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WFDQeOHjR2aJsciDLIKF1SP1NVY.roa
Signing time: Thu 02 Jan 2025 09:50:31 +0000
ROA not before: Thu 02 Jan 2025 09:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44467
IP address blocks: 83.239.44.0/22 maxlen: 22
83.239.44.0/24 maxlen: 24
83.239.45.0/24 maxlen: 24
83.239.46.0/23 maxlen: 23
83.239.46.0/24 maxlen: 24
85.173.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:7c:3a:84:63:23:15:e6:97:15:28:3c:57:d7:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5850d078e1e3476689b1c8832c8285d523f53556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:d0:20:f6:aa:82:be:65:c0:81:67:37:bd:
25:ab:eb:dd:37:86:2b:d7:ed:6f:e8:d3:b1:26:75:
6a:74:49:7b:96:48:10:03:bc:13:b0:c5:55:91:12:
0f:19:fc:fa:82:e8:e4:c9:e4:6f:cb:6c:60:d3:e7:
da:16:62:6c:df:47:6c:9f:eb:d0:9d:08:07:d8:a7:
97:6c:b0:ba:42:d2:ac:57:1c:59:39:40:07:00:54:
fb:fa:5b:6e:89:e5:33:f7:0d:b5:5b:55:71:ab:48:
5d:e8:69:1d:8a:c1:ba:e3:1c:d7:48:17:94:24:c7:
ae:44:2f:cd:4e:62:66:b6:90:2e:43:bd:92:5d:c3:
dc:6f:47:d7:3e:2c:75:1e:52:ef:7c:ae:31:af:8f:
7a:c2:f8:6f:7d:bd:35:93:42:45:29:00:cf:9c:a5:
95:21:d2:63:11:82:23:74:53:fd:32:2a:63:3a:fd:
d0:e7:05:1a:2a:f3:ee:07:5d:1a:03:3b:2d:47:44:
44:80:e3:fb:0b:c2:2b:66:d4:2b:13:73:e1:86:cc:
8d:71:a0:3b:23:c0:31:dd:fe:a0:1d:50:bd:b0:73:
ce:d4:8c:c0:d5:ba:7c:a6:f1:68:68:17:bc:52:53:
c6:18:a3:74:c9:51:6f:d6:97:86:2c:4f:29:30:3c:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:D0:78:E1:E3:47:66:89:B1:C8:83:2C:82:85:D5:23:F5:35:56
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/WFDQeOHjR2aJsciDLIKF1SP1NVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.239.44.0/22
85.173.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ed:ef:65:0a:1d:98:68:d9:ce:2f:be:aa:a4:6b:3c:66:f8:
5a:3d:33:d7:e8:e5:2e:26:67:e1:39:ed:b4:c0:92:bd:66:3a:
2c:00:a5:15:94:39:54:39:d9:d2:d0:f1:48:59:4e:3b:cb:85:
f0:a4:3c:ce:32:81:72:95:eb:42:6a:73:cb:db:ef:4d:fb:26:
0f:d6:a5:88:ae:e5:1a:82:cb:c5:d6:bb:a7:6a:60:75:a4:14:
3c:6e:96:e0:d1:5c:de:f3:89:13:db:6d:fd:65:c6:74:1e:51:
61:31:eb:df:66:d9:4b:f0:56:4b:0b:fd:92:ff:24:30:ca:ba:
2d:8c:52:bb:11:58:3f:0c:d9:f4:b7:14:b7:fe:5f:64:6e:6a:
7b:0a:d0:c2:5f:67:6c:ef:b3:d6:e6:4f:00:f2:f9:a0:d7:71:
3c:e9:b9:3a:d8:95:ba:ac:ca:19:51:9d:20:54:87:b7:6e:39:
31:d1:77:86:e5:fa:f3:a8:94:fb:aa:79:f7:41:72:2d:8e:c9:
e1:cc:e9:1b:58:db:18:9e:fe:0e:ff:60:7e:03:d0:58:d3:54:
05:30:d7:a4:1b:5c:ae:ee:4d:06:ef:1d:9a:3a:9e:d8:d4:27:
18:21:90:c0:ac:1c:4c:8d:a4:8d:e2:d3:6e:6b:da:e9:2c:0f:
73:9a:fc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:07 2025 by rpki-client on console.sobornost.net