Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/wJc546Vd9TMcAYPMIgqQji2Iy4I.roa
File: wJc546Vd9TMcAYPMIgqQji2Iy4I.roa (raw, json)
Hash identifier: hGmeq5PZRe6Atb7rVMBXn1UFmQB2jejPXD5/XmKxL8Q=
Subject key identifier: C0:97:39:E3:A5:5D:F5:33:1C:01:83:CC:22:0A:90:8E:2D:88:CB:82
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 01954C0745AEAEF33D18F490798BFD92D15E
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/wJc546Vd9TMcAYPMIgqQji2Iy4I.roa
Signing time: Fri 28 Feb 2025 10:08:19 +0000
ROA not before: Fri 28 Feb 2025 10:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 80.254.228.0/24 maxlen: 24
185.92.169.0/24 maxlen: 24
185.92.171.0/24 maxlen: 24
2a13:5241::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:07:45:ae:ae:f3:3d:18:f4:90:79:8b:fd:92:d1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Feb 28 10:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c09739e3a55df5331c0183cc220a908e2d88cb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c7:c3:09:04:2a:a2:12:8e:41:8d:52:73:2e:
bd:f6:f1:6a:af:cd:f8:83:81:1b:5e:53:a3:93:e3:
c5:47:a2:84:d2:e1:51:57:ed:69:33:c5:cb:00:ee:
5f:54:55:db:ee:93:a4:8b:1d:d5:5a:5a:73:1a:33:
e1:89:4b:2b:89:f5:24:74:39:77:58:2f:b5:8f:f1:
a7:b1:97:20:3d:6d:50:4e:ff:c2:e9:62:2b:b8:3c:
c2:6a:bc:08:24:dc:6d:01:4e:56:7a:d4:b2:f6:85:
2f:db:6d:04:28:71:07:fc:b6:94:3e:7a:70:3e:f6:
94:38:bd:8e:00:4c:d9:93:8f:2a:9d:16:6f:42:63:
47:9c:0d:78:6b:9e:4c:0d:d0:4b:06:ec:92:bf:c4:
c3:63:05:ea:42:12:b2:09:34:4f:70:8c:ed:38:86:
3a:67:75:4f:66:d7:75:11:df:82:9d:cf:16:7c:b4:
c5:71:df:9e:fe:d1:7d:54:23:dc:52:c4:1d:c0:c9:
c0:48:0e:c6:6d:13:e0:6f:fc:98:b0:51:ed:6e:2b:
4e:6f:67:85:1d:e6:85:18:ef:57:85:14:65:98:06:
68:02:58:c1:75:03:de:e3:5c:16:40:55:91:1b:30:
0c:16:c2:96:62:12:85:e3:54:18:54:e2:92:39:a0:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:97:39:E3:A5:5D:F5:33:1C:01:83:CC:22:0A:90:8E:2D:88:CB:82
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/wJc546Vd9TMcAYPMIgqQji2Iy4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.228.0/24
185.92.169.0/24
185.92.171.0/24
IPv6:
2a13:5241::/32
Signature Algorithm: sha256WithRSAEncryption
d6:b0:3c:32:5c:f1:48:db:12:8f:54:70:8d:8c:2e:34:ed:95:
1b:11:5a:0d:51:95:d7:68:c7:b7:34:f3:75:52:c5:d4:98:d0:
64:1e:84:ac:a5:d3:c5:e5:f8:bd:d1:16:1a:8e:b2:d9:d6:fc:
1f:f0:17:44:09:20:da:04:e4:9e:e5:ac:99:e2:df:6d:57:b4:
a0:15:3e:99:a6:83:23:b0:0c:b0:2c:1d:69:88:b2:30:ba:76:
44:5a:83:70:52:fc:1e:f0:36:3c:6d:0a:5e:ac:b6:09:63:0a:
4b:29:67:d2:12:90:dd:29:b6:19:fa:b4:a7:9e:b7:59:51:ef:
ce:c7:73:5c:b6:b0:1d:b6:29:ed:f4:dd:af:e3:eb:18:61:b8:
15:fc:57:f3:93:9b:db:27:3e:3c:62:21:fe:31:a0:0d:b1:2a:
3d:6b:f1:23:b9:0d:82:89:99:fb:d6:07:1b:bc:66:60:c6:8d:
2d:89:fc:c4:93:26:ba:f8:a5:8b:56:e6:60:b5:7a:cc:fc:09:
54:1d:c5:0c:d0:ec:07:ed:ab:89:4e:18:9f:19:f2:f7:99:e3:
37:3e:df:62:ab:6c:d6:6c:38:c9:9f:e0:c6:47:ea:d4:10:e9:
d6:78:9d:8a:e3:b1:89:8d:92:6e:62:56:2d:be:2d:5f:e4:6d:
35:b3:bb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:19 2025 by rpki-client