Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cw_EUf9bkf8Y438oiIgHpZrNnFQ.roa
File: cw_EUf9bkf8Y438oiIgHpZrNnFQ.roa (raw, json)
Hash identifier: Xus5cneCQpCHI2OmbuXHHjea/IvbMnwG54y09E6Abns=
Subject key identifier: 73:0F:C4:51:FF:5B:91:FF:18:E3:7F:28:88:88:07:A5:9A:CD:9C:54
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01940DF64114BE5DD2010B7C5C7C3FDD81C1
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cw_EUf9bkf8Y438oiIgHpZrNnFQ.roa
Signing time: Sat 28 Dec 2024 15:50:29 +0000
ROA not before: Sat 28 Dec 2024 15:50:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 2.59.162.0/24 maxlen: 24
2.59.163.0/24 maxlen: 24
62.133.60.0/24 maxlen: 24
62.133.61.0/24 maxlen: 24
62.133.62.0/24 maxlen: 24
62.133.63.0/24 maxlen: 24
81.177.214.0/24 maxlen: 24
81.177.215.0/24 maxlen: 24
194.156.102.0/24 maxlen: 24
194.156.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0d:f6:41:14:be:5d:d2:01:0b:7c:5c:7c:3f:dd:81:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Dec 28 15:50:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=730fc451ff5b91ff18e37f28888807a59acd9c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:8d:c3:d0:80:7b:3c:c3:5b:f1:29:1c:ed:
91:45:c4:13:11:83:9b:99:4e:e0:0d:e9:0e:bd:5e:
4c:d7:67:e2:13:fe:21:f1:2f:73:fb:4b:2d:29:bb:
6b:78:ff:15:a0:17:bf:f2:e4:58:a0:98:60:03:fe:
f1:3c:8b:70:b9:00:c0:34:7d:df:36:7a:c2:9f:75:
0a:40:34:36:24:1d:b1:04:e5:a3:49:05:17:e1:7a:
cd:1f:27:54:51:a3:52:30:8e:f8:ce:2d:78:80:60:
02:3c:b4:c2:10:28:f4:fe:a9:37:75:7c:37:84:28:
03:da:c0:3e:11:bd:bf:90:b6:0c:ec:49:9b:9c:7e:
c8:5f:65:06:64:ec:bc:e4:66:18:24:30:30:f5:76:
62:3c:39:e0:dc:b4:54:72:55:d0:95:b5:f6:d5:d8:
39:52:fd:73:fd:44:1c:c7:5e:09:c6:61:2b:02:bb:
00:9f:b1:4b:2c:73:d7:e0:6c:65:94:54:be:7e:73:
cd:3e:74:34:9c:7f:e9:c3:e7:6e:13:36:e9:5f:6d:
ed:c8:84:49:d8:9f:35:b0:cc:d6:6e:91:b8:ae:9b:
00:89:22:87:55:4c:d4:3b:08:79:c8:01:6f:6a:25:
cf:ad:b7:0a:ab:93:e1:25:c3:11:e1:9e:fe:67:eb:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0F:C4:51:FF:5B:91:FF:18:E3:7F:28:88:88:07:A5:9A:CD:9C:54
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/cw_EUf9bkf8Y438oiIgHpZrNnFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.162.0/23
62.133.60.0/22
81.177.214.0/23
194.156.102.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:7e:9f:85:83:59:45:28:3e:2a:ea:03:ea:a2:b5:c1:e7:8f:
51:dc:f7:1c:02:de:21:eb:79:06:9a:88:16:18:d3:ba:3a:39:
31:31:03:e6:98:a5:5e:9d:28:ae:ab:46:13:14:97:b0:e6:7a:
fb:d6:a3:6f:3d:9b:c8:74:40:35:dc:57:37:88:02:8b:d4:d1:
ec:12:d3:6e:95:be:41:b8:a0:08:97:33:97:db:e4:32:ff:f6:
7d:96:ab:b3:e8:c2:79:4a:b5:d9:58:9a:17:55:c0:45:9e:8c:
e3:b4:3e:c5:6c:55:68:11:9f:d9:42:c1:df:80:b1:80:76:41:
70:9e:54:ff:6f:4f:d3:06:85:a4:6b:86:23:b9:a8:90:9d:46:
5e:bc:28:88:52:f9:96:70:8a:9c:3e:84:58:6e:43:4c:72:33:
63:50:ee:06:ac:ce:a0:b3:93:4f:c8:57:a5:ca:77:59:28:71:
e3:82:7c:e1:55:e6:aa:07:13:8d:44:dd:e2:9f:68:28:80:28:
fd:ee:96:00:ba:b5:55:44:17:bf:79:5b:67:53:ed:76:fa:26:
44:34:b2:06:77:b9:92:c0:5c:fc:96:e3:c4:f7:ac:f1:cc:17:
8b:5a:69:26:ae:d3:8b:0e:a0:e6:58:41:62:c6:b8:24:2f:a8:
1f:b3:d6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:23:25 2025 by rpki-client