Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rw16NWOUKgXDf9D_WTECflF_8VM.roa
File: rw16NWOUKgXDf9D_WTECflF_8VM.roa (raw, json)
Hash identifier: JF9DqccRUYCR1DTp+yaNH0SZxQOwwYULWHR7UuHOBy0=
Subject key identifier: AF:0D:7A:35:63:94:2A:05:C3:7F:D0:FF:59:31:02:7E:51:7F:F1:53
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 01826F98390B1D70FF5058F4109BC16B878D
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rw16NWOUKgXDf9D_WTECflF_8VM.roa
Signing time: Fri 05 Aug 2022 20:00:23 +0000
ROA not before: Fri 05 Aug 2022 20:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.25.0/24 maxlen: 24
82.118.26.0/23 maxlen: 24
82.118.28.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
45.80.4.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6f:98:39:0b:1d:70:ff:50:58:f4:10:9b:c1:6b:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Aug 5 20:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af0d7a3563942a05c37fd0ff5931027e517ff153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:ae:72:19:9a:88:9e:58:6c:43:23:59:f9:
3f:51:92:f4:1e:04:a9:68:e6:b5:b4:72:b9:c7:9c:
a7:b0:06:4f:19:78:81:df:96:0b:b3:9f:14:e6:56:
c4:38:9c:53:a2:4d:66:0f:5e:81:38:2f:de:ca:6c:
ee:51:62:62:2c:1f:a5:98:d2:ba:2c:71:18:73:5c:
55:6d:2b:32:67:e0:0a:d7:82:51:23:36:e8:d7:55:
d0:a7:71:6b:b8:e8:3a:47:7a:6d:d8:18:81:98:35:
a5:e3:06:39:eb:a5:c3:4e:5a:ea:34:28:9d:8b:52:
9c:49:4c:1b:89:8f:36:58:0f:c3:90:46:98:d2:8d:
29:a3:cd:07:4e:ff:60:2b:41:4b:42:ca:0d:57:8e:
b8:70:2f:d4:c6:56:09:a7:1f:0b:f4:8a:dd:52:3c:
c6:08:b6:4b:fa:9b:4b:44:1f:f4:70:58:9e:47:49:
ba:c4:cd:1e:5b:7c:6e:ef:1f:a1:90:f9:cd:37:59:
6a:ea:c1:8e:a0:9e:2f:f1:54:76:2e:84:13:b4:e2:
c9:8f:58:34:23:ad:c7:25:c9:0b:7d:46:92:88:2d:
f6:e2:ed:76:81:e9:0f:db:b4:58:32:06:3b:18:6c:
3c:db:1f:94:b4:63:df:0b:5b:ad:43:58:7f:c0:ac:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:7A:35:63:94:2A:05:C3:7F:D0:FF:59:31:02:7E:51:7F:F1:53
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/rw16NWOUKgXDf9D_WTECflF_8VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.146.104.0/24
45.146.106.0/24
82.118.25.0-82.118.31.255
141.98.72.0/24
141.98.74.0/23
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b6:a9:76:ef:04:25:8e:0e:6b:fb:64:88:c8:73:a5:1a:33:
42:60:03:e6:db:3e:1e:e5:2f:94:4b:0f:78:74:35:79:9c:f1:
0e:5b:12:3a:64:11:14:ef:df:72:16:b9:c1:9c:7c:ff:c0:54:
0f:72:81:e0:02:b7:02:c2:34:fc:2b:69:e4:52:99:ee:38:8b:
66:0e:00:43:4b:5d:21:97:3b:17:31:f1:c4:e4:63:ae:f8:78:
5a:82:f4:60:28:98:33:eb:1b:58:54:ab:d1:4d:f9:18:dc:82:
8e:2e:33:a1:9a:c0:4f:e5:3d:dd:cc:eb:6c:b3:e4:dc:8c:0b:
fa:5d:b9:63:2a:86:10:3a:c9:47:e3:cf:15:0d:fa:75:35:1a:
cb:13:7b:b0:86:26:af:cf:b8:19:bf:c1:7b:87:ae:a9:9b:2c:
64:1f:2b:89:e0:e2:6d:cf:04:3f:d2:24:07:d5:c9:1b:fb:b1:
e2:40:7d:7a:24:e7:18:e1:6a:b8:75:b3:e7:92:97:2f:29:31:
e6:bb:02:d3:6e:3c:25:d5:f0:07:49:d0:90:5a:e4:ae:37:81:
6e:26:7e:70:8d:71:ac:90:e8:08:a8:4a:5b:b6:8a:91:74:34:
67:41:bb:80:5b:17:15:a1:c9:62:f4:13:10:cc:33:9e:dc:c5:
de:e5:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:46:10 2025 by rpki-client