Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/1w9xeb7Tmh73XapimCaCXsL-Vp0.roa
File: 1w9xeb7Tmh73XapimCaCXsL-Vp0.roa (raw, json)
Hash identifier: 2EqAR+8YBpQQu2uKmUgFjI4lELoY1VnhSQ6SlSb3k2c=
Subject key identifier: D7:0F:71:79:BE:D3:9A:1E:F7:5D:AA:62:98:26:82:5E:C2:FE:56:9D
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 01856D13C818C9C15F54522B0E763629A791
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/1w9xeb7Tmh73XapimCaCXsL-Vp0.roa
Signing time: Sun 01 Jan 2023 11:24:50 +0000
ROA not before: Sun 01 Jan 2023 11:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55933
IP address blocks: 185.242.232.0/22 maxlen: 24
185.242.232.0/23 maxlen: 23
185.242.234.0/23 maxlen: 23
185.245.40.0/22 maxlen: 24
185.239.84.0/23 maxlen: 23
185.239.84.0/22 maxlen: 24
185.239.86.0/23 maxlen: 23
109.206.244.0/22 maxlen: 24
91.132.48.0/22 maxlen: 24
93.177.76.0/22 maxlen: 24
185.243.240.0/22 maxlen: 24
84.252.102.0/23 maxlen: 24
2a0c:f480::/29 maxlen: 29
2a0d:2480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:c8:18:c9:c1:5f:54:52:2b:0e:76:36:29:a7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Jan 1 11:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d70f7179bed39a1ef75daa629826825ec2fe569d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:52:bb:13:29:e0:6d:51:6c:35:76:90:0a:
cb:83:46:e4:7a:31:c2:95:20:c7:9f:65:33:55:f2:
4f:a9:79:02:4a:fa:0d:c1:8f:bb:26:57:16:39:3f:
5c:8d:03:4c:99:59:6f:89:ed:69:4b:01:4b:04:c7:
7d:3a:a8:02:a7:61:43:35:bd:d4:38:93:05:b3:b9:
3b:3a:5d:8d:c1:d8:0d:6e:be:05:3a:72:2a:16:10:
25:7e:9e:88:3a:3b:21:08:12:15:3d:ac:63:db:80:
bb:82:eb:b1:41:42:02:18:56:a8:95:3e:11:52:9b:
77:57:aa:c0:f0:9d:0a:ff:38:22:9b:8c:d4:ad:f3:
57:8f:52:f0:2d:08:a0:72:88:7f:f1:4a:c3:bd:8d:
47:26:63:4b:0f:82:d9:06:d5:60:12:f8:9b:dd:a6:
55:14:c9:9a:d0:82:ba:78:0a:1a:36:02:7e:13:94:
5c:9a:ba:c2:2a:2e:5f:ee:d9:a7:f1:50:ce:a4:51:
bd:f6:9a:e9:84:69:34:27:a8:b1:4f:0a:14:42:e2:
39:5b:c3:3a:52:84:70:bf:a0:91:5d:0f:f5:17:7c:
01:30:4d:10:d7:ac:d8:a1:36:c8:94:b1:96:04:7e:
d2:68:d3:68:db:40:3f:8b:0f:3a:77:bc:75:63:a0:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0F:71:79:BE:D3:9A:1E:F7:5D:AA:62:98:26:82:5E:C2:FE:56:9D
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/1w9xeb7Tmh73XapimCaCXsL-Vp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.102.0/23
91.132.48.0/22
93.177.76.0/22
109.206.244.0/22
185.239.84.0/22
185.242.232.0/22
185.243.240.0/22
185.245.40.0/22
IPv6:
2a0c:f480::/29
2a0d:2480::/29
Signature Algorithm: sha256WithRSAEncryption
5a:70:1d:c8:8b:24:5c:93:f5:be:28:20:4d:b8:23:44:76:6a:
6d:ab:e7:73:15:61:01:a4:56:dc:80:8e:a0:fe:c7:be:ce:60:
c3:88:b5:67:2e:5c:34:90:4e:cc:98:0a:84:7a:6c:14:eb:89:
1b:c9:65:a9:79:4b:c5:60:7e:77:b2:54:6c:1f:e0:c6:c3:a7:
ca:21:c0:8d:7f:e1:78:57:61:01:dd:5f:47:6f:9b:87:03:38:
ab:f7:ae:04:de:3c:1c:2d:40:98:d2:90:c5:ac:b2:56:bb:73:
ef:d5:14:a3:3b:0a:ae:c5:7c:52:82:cc:d5:98:37:f4:ff:ad:
4f:43:ff:08:33:db:8f:42:fb:22:d6:5b:0f:81:d2:fd:64:a9:
8c:60:9e:ac:88:68:86:e3:55:e4:26:d1:5f:bd:e3:cd:78:0e:
c7:c9:c1:8f:16:23:d7:73:30:f9:63:0d:c1:c8:3e:c6:ea:69:
84:26:7e:96:5e:68:3f:c9:c2:d6:cd:92:9e:df:cb:6b:c0:bb:
ca:4d:f8:f1:6e:94:75:be:5f:50:17:6d:24:b0:c2:e5:ab:f3:
42:6a:37:c9:ef:75:29:4d:be:e3:c0:27:33:a6:40:4f:d8:e1:
33:57:92:f9:17:d3:99:27:f7:c0:53:80:32:0e:26:c7:85:27:
0b:9c:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:53 2025 by rpki-client