Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wcT5FPH3QZEzZfThOOaSjeauR20.roa
File: wcT5FPH3QZEzZfThOOaSjeauR20.roa (raw, json)
Hash identifier: pqzeRgmeKZHbu2vHvSBjLg664xblUkVFlYL0kAsKX5A=
Subject key identifier: C1:C4:F9:14:F1:F7:41:91:33:65:F4:E1:38:E6:92:8D:E6:AE:47:6D
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0194F3741C4F37469CC7821C2ED618185907
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wcT5FPH3QZEzZfThOOaSjeauR20.roa
Signing time: Tue 11 Feb 2025 05:21:00 +0000
ROA not before: Tue 11 Feb 2025 05:21:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.11.189.0/24 maxlen: 24
45.65.114.0/24 maxlen: 24
45.154.156.0/24 maxlen: 24
45.154.158.0/24 maxlen: 24
185.83.200.0/23 maxlen: 23
185.83.202.0/23 maxlen: 23
188.209.131.0/24 maxlen: 24
188.209.132.0/22 maxlen: 24
188.209.133.0/24 maxlen: 24
188.209.134.0/24 maxlen: 24
188.209.135.0/24 maxlen: 24
188.209.139.0/24 maxlen: 24
194.15.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f3:74:1c:4f:37:46:9c:c7:82:1c:2e:d6:18:18:59:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Feb 11 05:21:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c4f914f1f741913365f4e138e6928de6ae476d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:43:78:ea:40:34:09:55:11:5e:b7:64:b3:cd:
95:5d:4e:85:bd:55:9b:a4:07:84:f8:44:72:0c:85:
75:b2:1b:8e:15:3a:13:9d:8c:10:80:12:a4:ff:ac:
9c:70:45:46:e5:fd:a5:16:dd:30:c8:4e:71:5e:02:
37:f2:6b:c1:8e:9f:28:a7:d9:da:d6:4e:06:9e:6a:
5a:25:3f:ac:f5:b5:c2:a2:f4:4e:f1:7c:65:e0:3e:
a3:31:be:df:8b:01:cc:32:c8:57:73:bb:67:d8:4d:
6b:04:83:80:e2:09:56:ed:26:89:b1:be:70:b5:3f:
29:6c:e1:62:1a:c4:d8:5a:23:96:da:48:1b:8b:72:
0d:11:8e:9f:70:51:39:c0:cc:22:e6:56:eb:69:fb:
a2:11:77:ad:f9:ca:f5:d7:3b:3a:fa:e3:04:89:d4:
8c:51:97:53:42:f9:4c:b4:07:3b:21:37:1f:2f:72:
c5:33:c1:a6:56:31:94:4a:47:0c:51:a1:fd:03:71:
3b:0e:51:7d:42:08:65:ea:b3:3e:71:0c:98:61:2b:
21:f7:59:c7:05:4b:96:f7:96:e7:cf:39:d1:6d:07:
a6:27:cc:9e:fd:41:4e:48:72:62:69:8c:e4:64:5e:
11:1f:8f:0b:ee:f2:93:1f:4c:df:20:65:1f:22:70:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:F9:14:F1:F7:41:91:33:65:F4:E1:38:E6:92:8D:E6:AE:47:6D
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wcT5FPH3QZEzZfThOOaSjeauR20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.189.0/24
45.65.114.0/24
45.154.156.0/24
45.154.158.0/24
185.83.200.0/22
188.209.131.0-188.209.135.255
188.209.139.0/24
194.15.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b5:78:f9:15:2c:8e:fc:0e:f0:d6:f7:cb:75:28:33:01:ad:
7f:01:62:34:64:15:61:53:60:3b:68:a9:3f:b8:1d:2b:f2:00:
8c:1a:60:92:f6:f5:ec:5d:7d:d5:d6:5a:28:1e:a5:9b:b5:a0:
8c:8e:3c:a3:16:d0:86:b9:ec:91:87:9d:03:94:66:a0:5c:9d:
e9:87:be:5e:5a:25:f4:1b:f9:eb:84:82:2d:fd:83:89:6a:d4:
b5:eb:47:a4:41:9e:67:10:8a:a9:34:38:7a:b4:74:74:5e:7a:
e2:9a:e5:7c:ed:8c:c0:1a:ca:b4:32:bc:52:8c:b6:0d:e3:bc:
22:63:c7:c6:66:00:18:09:b4:01:f3:1b:81:12:13:0a:67:e1:
a2:b8:ba:dc:bb:84:c5:4e:e7:bf:4a:55:9b:64:38:e0:7e:33:
85:7d:1a:8d:af:20:c3:9d:3b:f0:d1:1b:98:ac:30:0a:6a:f2:
bc:27:3b:b3:27:65:fd:c4:73:d5:f0:9d:6e:85:2e:c4:66:ea:
cf:4e:96:d5:80:cc:b4:52:e2:5e:05:75:9e:cb:5e:92:de:c9:
6c:d8:e7:60:e8:a5:b6:92:f8:43:90:82:c1:c7:44:3a:ef:6d:
52:5f:75:f2:82:3d:bc:a2:bf:0f:3e:0e:b6:95:a1:0e:e6:f4:
88:31:63:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:38:01 2025 by rpki-client