Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wvA_rgSWpqIskOtMIUp5J7HfJEw.roa
File: wvA_rgSWpqIskOtMIUp5J7HfJEw.roa (raw, json)
Hash identifier: nLMPmGUnRTMDfeYYAIq++PDX48x5w4MGHin0teKpyWY=
Subject key identifier: C2:F0:3F:AE:04:96:A6:A2:2C:90:EB:4C:21:4A:79:27:B1:DF:24:4C
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019409F687E2596C330CB5C83247A92FAC0D
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wvA_rgSWpqIskOtMIUp5J7HfJEw.roa
Signing time: Fri 27 Dec 2024 21:12:19 +0000
ROA not before: Fri 27 Dec 2024 21:12:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 5.133.101.0/24 maxlen: 24
5.133.102.0/24 maxlen: 24
5.133.103.0/24 maxlen: 24
37.221.76.0/24 maxlen: 24
37.221.78.0/24 maxlen: 24
37.221.79.0/24 maxlen: 24
85.235.72.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
93.190.8.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
176.96.130.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
193.111.78.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
217.18.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:09:f6:87:e2:59:6c:33:0c:b5:c8:32:47:a9:2f:ac:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Dec 27 21:12:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2f03fae0496a6a22c90eb4c214a7927b1df244c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e8:c2:54:67:94:ea:df:3a:44:34:b1:b0:67:
e8:ed:85:94:9a:9f:92:60:23:05:9a:44:5b:1d:e4:
2a:37:d5:88:49:d1:b7:77:d9:f0:1a:40:74:81:e1:
c9:01:73:5b:23:c8:c4:fd:0e:1a:24:a0:72:16:52:
aa:4c:83:cf:1e:4c:79:9d:48:b9:27:0f:0a:4d:15:
cc:ce:2f:a3:3d:4a:0f:82:6a:0d:c9:83:41:25:4d:
11:d4:45:10:85:94:07:a4:91:d6:5f:97:20:bf:88:
28:14:ff:86:09:e0:12:d0:9b:05:93:65:7f:56:c6:
21:94:e0:28:18:e3:14:92:e2:b1:7d:ae:0d:32:b0:
fb:a7:94:39:e8:02:df:17:1b:27:b7:61:eb:49:d7:
68:83:db:6a:46:92:36:e9:99:88:f8:73:9b:6e:3d:
14:84:19:b0:97:26:9b:b1:34:8a:4d:78:28:d0:f8:
ad:84:7c:f9:b3:48:f7:70:69:5f:1a:12:17:e1:c4:
ca:ac:b7:20:9d:33:6c:90:fb:c1:67:64:34:5f:79:
62:70:2f:25:1a:19:7b:ca:1e:4a:b9:99:e4:77:7f:
7f:2e:cd:01:74:21:d2:b0:b5:a7:d0:ea:27:14:0d:
7b:a5:08:37:de:87:7c:48:95:c2:60:d8:f0:58:4d:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:3F:AE:04:96:A6:A2:2C:90:EB:4C:21:4A:79:27:B1:DF:24:4C
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wvA_rgSWpqIskOtMIUp5J7HfJEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.101.0-5.133.103.255
37.221.76.0/24
37.221.78.0/23
85.235.72.0-85.235.74.255
93.190.8.0/24
176.96.128.0/24
176.96.130.0/24
193.17.5.0/24
193.111.76.0/24
193.111.78.0/24
217.18.208.0/24
217.18.211.0/24
Signature Algorithm: sha256WithRSAEncryption
38:00:3f:41:e5:45:a1:1c:77:19:4a:99:72:f2:64:9d:4d:6e:
5e:5f:06:af:e8:82:6c:ac:b9:bb:82:91:78:f7:60:ed:69:76:
fa:91:ff:16:17:ba:8c:7b:76:de:d5:87:84:d0:06:33:3b:c2:
6b:83:7c:70:09:2f:b5:cd:2a:8a:39:89:e2:8a:b3:18:86:a3:
aa:88:53:5c:a2:e4:b1:51:95:c5:d7:48:bd:72:10:77:99:96:
2f:d0:0a:16:6e:46:4a:d8:9a:cf:8b:3d:fc:4b:e7:0d:6c:25:
c8:05:3a:f0:23:da:23:a9:fd:ce:3d:63:63:91:cb:aa:01:c4:
76:49:d6:1a:4d:8e:51:1c:84:ab:35:5d:7f:58:b9:1f:55:4e:
54:45:4d:38:85:ed:f7:ea:c8:43:fa:13:07:06:e3:31:67:da:
53:4f:f9:7a:89:03:f8:77:a4:6a:60:6d:ec:f9:d1:40:12:6c:
22:53:56:49:e5:cd:c3:5e:0d:42:6a:d0:b9:a4:04:b5:0b:5d:
13:09:e0:37:9b:b1:fc:94:15:23:1c:32:11:73:3d:57:f8:9f:
46:2a:e8:96:28:59:6a:b2:75:f0:70:6b:cf:e4:1d:10:37:b3:
df:15:ad:77:d9:dc:23:7b:9d:10:cf:1f:bb:d7:5d:6c:ee:bf:
52:a2:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:27:37 2025 by rpki-client