Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/W05zAb8wOA1YsTjbjqP0Nha2lxY.roa
File: W05zAb8wOA1YsTjbjqP0Nha2lxY.roa (raw, json)
Hash identifier: qAPj1qQpXhMBI96W21aN7Gc9a56JuxlFUEyTLU/fBEQ=
Subject key identifier: 5B:4E:73:01:BF:30:38:0D:58:B1:38:DB:8E:A3:F4:36:16:B6:97:16
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 019457848BA843A1C73B8C4C1BA92EB0C08A
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/W05zAb8wOA1YsTjbjqP0Nha2lxY.roa
Signing time: Sat 11 Jan 2025 22:38:11 +0000
ROA not before: Sat 11 Jan 2025 22:38:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56884
IP address blocks: 84.246.111.0/24 maxlen: 24
91.247.178.0/24 maxlen: 24
176.97.213.0/24 maxlen: 24
178.23.188.0/24 maxlen: 24
194.26.223.0/24 maxlen: 24
213.232.252.0/24 maxlen: 24
2a11:a100::/29 maxlen: 29
2a13:8e00::/29 maxlen: 29
2a13:9200::/29 maxlen: 29
2a13:b100::/29 maxlen: 29
2a13:b500::/29 maxlen: 29
2a13:b700::/29 maxlen: 29
2a13:b900::/29 maxlen: 29
2a13:da00::/29 maxlen: 29
2a13:e200::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:57:84:8b:a8:43:a1:c7:3b:8c:4c:1b:a9:2e:b0:c0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Jan 11 22:38:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b4e7301bf30380d58b138db8ea3f43616b69716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ae:c6:30:a5:c8:6b:00:02:e2:51:f9:9a:b8:
9f:c5:10:9d:70:33:9d:1d:0a:fe:4d:de:9b:a8:d0:
6d:d9:6e:cb:a2:36:c7:24:0b:23:d3:6b:eb:a1:9f:
06:e3:fe:78:8a:a6:81:fe:af:18:31:d8:fc:a5:e1:
5b:b2:26:4e:82:6c:99:9a:f4:33:25:66:46:0b:30:
8f:72:b0:e9:59:2a:05:88:3d:bb:97:6c:04:ea:64:
fd:d9:35:cb:b2:40:8d:9b:c6:29:ba:df:9d:4f:13:
b2:ff:58:8a:24:05:1c:f7:8e:47:4b:ad:4f:cd:56:
3c:cc:87:3d:cf:8d:be:b2:d6:1e:4c:30:3c:e0:9f:
60:bd:cd:c2:80:46:65:62:d9:f4:ac:8f:0e:29:3e:
76:9e:4a:3c:3b:be:ed:f2:7d:8d:0c:72:c6:71:4f:
0f:ca:16:aa:a0:68:fc:fa:65:a0:05:76:96:8e:26:
0c:24:f7:4e:f5:f6:c9:e8:d8:6c:8d:ef:90:24:f0:
f3:8d:c6:fa:57:43:5c:42:36:2f:f1:c8:e3:99:9e:
c9:e0:5a:2a:38:d4:17:20:93:b5:ce:0b:b3:8b:0d:
08:8f:5b:33:16:9a:cc:05:91:e6:19:63:6d:62:6d:
10:e5:4c:79:e8:3d:76:dc:29:72:6d:d6:44:9a:40:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4E:73:01:BF:30:38:0D:58:B1:38:DB:8E:A3:F4:36:16:B6:97:16
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/W05zAb8wOA1YsTjbjqP0Nha2lxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
91.247.178.0/24
176.97.213.0/24
178.23.188.0/24
194.26.223.0/24
213.232.252.0/24
IPv6:
2a11:a100::/29
2a13:8e00::/29
2a13:9200::/29
2a13:b100::/29
2a13:b500::/29
2a13:b700::/29
2a13:b900::/29
2a13:da00::/29
2a13:e200::/29
Signature Algorithm: sha256WithRSAEncryption
64:a0:3b:aa:ac:ae:bd:0e:6c:73:f0:3f:ed:13:f2:9c:bf:41:
d9:d8:9c:ed:8a:54:44:37:71:e5:99:1d:42:5e:07:ba:88:92:
c1:63:01:d4:de:63:7e:c8:d8:2d:7d:c2:c6:39:13:ef:7b:34:
f0:e7:b8:26:f9:2b:b5:23:8e:07:56:6c:50:04:d1:d7:bc:eb:
fe:bd:40:78:ab:1e:83:ce:32:70:4a:a5:9a:09:48:2e:f1:9c:
06:0f:8e:d1:aa:19:21:e5:a9:a2:66:fc:93:5c:7b:3f:cd:04:
96:51:73:ac:09:4f:11:79:85:96:8b:5e:c5:6a:02:f8:66:2d:
73:d8:e7:60:0e:ed:ff:f7:77:41:cf:47:56:75:04:2d:36:6d:
34:6e:41:9a:a8:ab:57:8f:fc:8c:c9:a3:9d:48:0a:68:9c:a0:
86:ee:2c:f4:85:19:a1:c0:c7:5e:7b:71:7b:22:72:7c:19:45:
f6:d5:72:98:2c:23:86:15:77:6f:7b:9a:13:e3:ae:55:5e:45:
7c:9e:38:28:b7:02:39:a7:0e:71:0c:32:82:35:39:fd:18:54:
11:bb:12:4e:49:0a:6c:9d:e6:8c:4d:92:b0:c0:c7:42:d9:b7:
e5:d0:8d:4f:2d:13:8f:c4:12:54:07:b1:b4:c0:1f:3b:00:ad:
0c:8d:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:22 2025 by rpki-client