Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/PwkIDrTu9HgLosG76IOZYOcSweo.roa
File: PwkIDrTu9HgLosG76IOZYOcSweo.roa (raw, json)
Hash identifier: qhbcsDgY0t+M03SoOmIIDlW93XaU9bpyy0aXfB4XmBw=
Subject key identifier: 3F:09:08:0E:B4:EE:F4:78:0B:A2:C1:BB:E8:83:99:60:E7:12:C1:EA
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0194D00528D36946723757DC1EAE24CC7DB1
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/PwkIDrTu9HgLosG76IOZYOcSweo.roa
Signing time: Tue 04 Feb 2025 08:13:06 +0000
ROA not before: Tue 04 Feb 2025 08:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 84.19.10.0/24 maxlen: 24
84.19.13.0/24 maxlen: 24
84.19.16.0/24 maxlen: 24
84.19.22.0/24 maxlen: 24
84.19.25.0/24 maxlen: 24
84.19.27.0/24 maxlen: 24
84.19.31.0/24 maxlen: 24
91.190.145.0/24 maxlen: 24
91.190.149.0/24 maxlen: 24
91.228.105.0/24 maxlen: 24
91.230.27.0/24 maxlen: 24
195.225.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:05:28:d3:69:46:72:37:57:dc:1e:ae:24:cc:7d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Feb 4 08:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f09080eb4eef4780ba2c1bbe8839960e712c1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:dc:d5:9d:a7:2f:6b:8e:e6:93:98:d5:3f:
81:e3:d2:73:30:ef:ef:b0:38:42:67:83:7a:75:5b:
d2:33:7d:1f:dc:bc:1a:a8:cb:86:01:67:e8:2b:4f:
21:e3:8b:1c:73:3f:85:b0:8a:c0:50:a5:56:f5:13:
61:07:05:82:83:32:ac:d8:f3:2b:d5:b2:9a:68:99:
fc:e0:55:ab:e2:40:7c:29:8c:02:f5:23:8c:4b:79:
49:2d:79:97:86:1b:ee:ed:7d:d7:9c:5f:dc:bc:cd:
91:31:21:66:c8:39:b9:de:3f:81:6d:6c:a3:8d:01:
83:7e:d5:dd:02:72:86:ee:16:2d:77:b4:29:16:3b:
a6:24:b0:42:04:77:0c:0c:80:cc:c6:97:a0:24:80:
a4:20:17:2f:a8:2d:71:41:84:67:f2:25:b7:db:43:
47:13:e2:40:4d:0c:95:8e:28:06:e3:77:31:95:33:
35:1a:15:76:00:14:c0:dc:db:4e:0c:e8:33:a3:c3:
1a:b2:93:bc:5c:95:af:d4:e5:3b:c2:f7:b2:35:94:
d0:17:af:e6:69:49:47:52:09:00:c2:4b:c2:6e:a0:
75:d0:b4:fc:96:34:ad:f7:b0:b9:b1:a4:c2:09:9d:
bc:d0:17:52:b1:c2:ee:aa:21:84:90:e3:58:2f:59:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:09:08:0E:B4:EE:F4:78:0B:A2:C1:BB:E8:83:99:60:E7:12:C1:EA
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/PwkIDrTu9HgLosG76IOZYOcSweo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.10.0/24
84.19.13.0/24
84.19.16.0/24
84.19.22.0/24
84.19.25.0/24
84.19.27.0/24
84.19.31.0/24
91.190.145.0/24
91.190.149.0/24
91.228.105.0/24
91.230.27.0/24
195.225.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:17:46:b2:f5:d3:da:08:26:36:6b:59:e5:34:c7:8b:01:a3:
41:19:08:f4:36:fb:3e:e9:88:58:90:18:54:6a:be:f9:0f:2b:
c1:53:6b:78:eb:b5:f6:2b:66:bf:0b:7f:9d:2b:e1:21:a6:3f:
0e:52:f4:e2:64:6b:95:61:2a:90:d8:be:24:66:05:f8:91:13:
c3:bf:65:fe:ba:7c:fa:bd:14:8f:63:25:fb:76:d7:52:f9:e0:
ec:0b:ed:b5:8c:d8:98:f8:c8:7a:3d:1c:67:2d:a4:9f:f7:d0:
7f:70:85:58:db:ac:8b:68:7b:7d:ed:07:50:4f:72:d1:0b:bd:
5f:45:12:26:03:1d:85:a3:85:b7:90:9d:68:5d:90:8d:fd:85:
55:6d:b5:d3:d6:dc:17:8a:3a:2f:c8:07:49:95:a7:17:00:27:
08:a1:ed:3e:90:cc:dc:f2:f4:59:5e:83:83:a6:13:cd:a0:85:
c6:db:21:d7:9c:cf:99:56:98:42:c0:66:77:e5:54:f9:09:6e:
21:56:46:5d:67:8f:4c:d6:de:a8:34:ca:01:45:2f:30:e7:b9:
95:58:0b:71:78:56:79:fe:bc:44:ea:24:4c:e7:96:f8:7b:9b:
03:56:78:09:93:63:14:11:79:0f:d7:5c:3e:39:0d:ab:b0:1a:
d2:7e:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:29:54 2025 by rpki-client