Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/weaV1kTM_LdbYKVIuDl90OeHHWs.roa
File: weaV1kTM_LdbYKVIuDl90OeHHWs.roa (raw, json)
Hash identifier: liQ8Z1AC3xEVDcpFmAWiUNtGwkOjp74Rwr4myytQ8AQ=
Subject key identifier: C1:E6:95:D6:44:CC:FC:B7:5B:60:A5:48:B8:39:7D:D0:E7:87:1D:6B
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747F3F68C661278DBBAB55A061F406C
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/weaV1kTM_LdbYKVIuDl90OeHHWs.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213250
IP address blocks: 78.108.216.0/24 maxlen: 24
185.234.72.0/24 maxlen: 24
193.31.28.0/24 maxlen: 24
193.34.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f3:f6:8c:66:12:78:db:ba:b5:5a:06:1f:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1e695d644ccfcb75b60a548b8397dd0e7871d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:6b:0a:25:2a:3c:d1:26:f8:bd:2d:9d:46:
a6:df:3a:f9:49:9e:06:2b:d3:44:4d:ee:96:c8:fd:
02:4f:86:66:69:65:2e:8c:27:20:ff:4e:1a:a8:d3:
51:d4:51:81:24:2c:a7:e5:52:c1:93:56:7a:98:44:
64:d4:81:2b:ff:f4:13:e0:47:16:74:05:ea:de:07:
aa:6f:3f:3c:9d:8e:2e:0e:85:b7:c9:32:93:fe:5f:
c5:40:6a:3a:cf:66:c7:de:26:82:2b:1c:07:2a:88:
33:e5:6c:a3:d9:33:a3:6e:4e:a7:e3:34:50:9d:21:
98:6e:d6:3f:54:ea:e6:15:56:54:5b:e3:eb:ae:2b:
e1:16:59:e7:0f:d8:de:da:8f:2d:39:a3:93:0d:42:
a9:3c:29:67:ce:11:dc:80:ab:ba:c2:33:5b:fe:75:
99:97:a3:63:68:d7:e0:5b:6a:b8:cb:5b:96:2e:d4:
e0:c1:cd:f5:ad:cc:65:e3:18:e3:b4:be:1d:e3:0e:
19:2a:1d:6b:82:9e:d7:c0:74:54:ae:ae:b7:d7:56:
30:03:38:86:40:fd:39:03:ec:dd:32:80:9e:2c:29:
26:fd:b9:b1:be:98:65:1c:b5:56:9e:57:c6:ef:83:
fc:ee:d9:e5:46:7e:18:8e:f5:04:5b:7f:3a:4d:7d:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:95:D6:44:CC:FC:B7:5B:60:A5:48:B8:39:7D:D0:E7:87:1D:6B
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/weaV1kTM_LdbYKVIuDl90OeHHWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.216.0/24
185.234.72.0/24
193.31.28.0/24
193.34.77.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f7:4f:66:36:02:da:ed:32:ae:3c:c9:f6:34:35:be:66:52:
0c:51:d2:5f:41:bf:64:45:8b:c1:fe:86:81:e6:9e:10:c0:f4:
e9:d3:fc:c6:60:1d:a5:ca:9d:dd:54:89:65:d8:65:38:b3:16:
0d:60:7b:a8:7a:75:66:97:67:72:4c:38:fc:be:13:95:ea:8e:
b2:18:88:6c:e3:58:86:2f:2a:0e:41:ab:1b:76:d9:f1:38:78:
b1:e6:d8:3a:38:4e:e9:b3:c9:8d:04:d9:cd:da:ef:ae:08:7d:
91:11:49:61:7a:27:b6:c6:58:4e:dd:bf:ea:92:67:41:70:92:
a0:c2:c2:c1:63:4f:66:04:ec:38:6b:1d:bf:53:cc:18:fc:90:
7f:cb:50:54:d2:fd:2d:d5:c0:25:ca:5e:13:56:2f:ee:d6:8c:
65:68:a3:40:61:df:65:8d:45:db:fa:50:0c:26:43:e4:eb:18:
83:72:0f:73:14:78:2d:15:88:29:4c:42:5e:ce:db:53:4f:87:
c1:5e:80:b2:58:87:61:43:53:4e:4b:7c:2f:19:a2:60:8e:fb:
cd:f8:c9:50:56:dd:90:98:da:33:2b:f6:77:4f:73:4d:9d:5a:
f2:3b:9a:d7:8c:fa:ef:c7:5c:8e:0f:a9:8e:b7:5d:16:7b:f9:
0b:61:06:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:57:34 2025 by rpki-client