Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/WCtnggcVcunep2QNxvqelplIAyg.roa
File: WCtnggcVcunep2QNxvqelplIAyg.roa (raw, json)
Hash identifier: SenDb5wr+o9Hl1MG36yNLGz3jB1BZHwalB8nyyGbh8Y=
Subject key identifier: 58:2B:67:82:07:15:72:E9:DE:A7:64:0D:C6:FA:9E:96:99:48:03:28
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 018CC6B92B2340AA869984D1F7EA26E9E066
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/WCtnggcVcunep2QNxvqelplIAyg.roa
Signing time: Mon 01 Jan 2024 20:31:13 +0000
ROA not before: Mon 01 Jan 2024 20:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207375
IP address blocks: 80.64.232.0/21 maxlen: 25
93.88.24.0/22 maxlen: 25
45.145.108.0/22 maxlen: 25
2a0e:fdc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2b:23:40:aa:86:99:84:d1:f7:ea:26:e9:e0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=582b6782071572e9dea7640dc6fa9e9699480328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:b4:52:29:4e:86:7b:8e:14:37:49:23:c1:
02:9c:5f:f5:48:73:d1:ca:e0:3d:f9:84:91:85:9d:
1b:d7:21:8e:ba:5f:63:54:53:a9:c7:d9:7e:07:a4:
bc:95:11:d9:10:97:30:87:26:c3:f5:3f:a4:ce:a3:
61:b3:39:1b:98:5e:3c:35:c2:32:10:53:50:3c:2c:
55:4e:ed:71:f9:9a:91:65:88:e5:01:55:22:c6:04:
a5:51:4c:0b:dd:71:e8:66:94:1e:c0:35:4e:cf:28:
60:ac:1d:1f:4b:b9:02:fa:f8:eb:6e:b0:91:f4:79:
d3:96:12:ef:50:af:dc:89:70:b7:ed:15:a1:21:3d:
fa:97:49:36:ca:a9:f4:1a:04:17:4b:50:27:ef:77:
3b:c3:b4:0b:41:34:5e:cf:d1:3e:ff:4e:0e:d8:37:
0d:f2:7e:97:a3:ea:39:0f:c3:9f:ec:d8:9d:fb:38:
21:6d:0a:b4:bf:bc:21:a4:99:46:5f:2c:8d:32:57:
44:69:68:3c:df:21:9d:f1:9d:cf:60:b3:77:be:5b:
9e:6b:3f:a4:78:fc:92:fb:78:50:23:f0:50:f1:58:
4d:c7:09:25:c3:33:e7:87:5a:6e:87:66:72:3a:f0:
74:16:7e:b8:99:33:34:56:61:d9:8f:50:f8:07:7a:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:67:82:07:15:72:E9:DE:A7:64:0D:C6:FA:9E:96:99:48:03:28
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/WCtnggcVcunep2QNxvqelplIAyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.108.0/22
80.64.232.0/21
93.88.24.0/22
IPv6:
2a0e:fdc0::/29
Signature Algorithm: sha256WithRSAEncryption
0f:80:36:90:50:e2:39:84:fd:cc:df:30:32:c8:63:8b:f9:1c:
84:71:2e:d3:41:7c:dc:56:da:d2:ae:ca:c9:5c:90:d3:71:2f:
8a:5e:3e:6f:33:55:c9:f4:7c:41:7b:c9:9d:65:a5:3e:9f:75:
a0:8f:f7:25:5d:a4:ff:49:98:c6:2f:33:3e:93:d2:a1:9b:72:
15:f0:bb:e6:5f:0e:d7:14:ce:47:fb:95:b6:50:34:a0:9e:0a:
75:65:29:01:c8:ba:2b:12:10:33:46:68:83:a6:75:0d:78:70:
fa:5c:11:82:b0:f5:c2:3c:4b:29:1a:95:c5:e8:ae:8b:66:73:
62:be:8a:34:84:db:02:92:51:6d:23:e0:25:fc:78:45:b4:59:
5e:77:67:8c:1a:84:52:66:33:70:1f:43:0a:9c:f3:30:ed:c5:
fd:83:17:69:51:a8:f0:b3:8c:06:b5:a8:db:52:e5:4e:9d:97:
2e:fe:d5:19:33:62:b0:5a:19:5a:20:ef:17:61:5e:67:2c:c0:
58:b6:07:e8:f0:d9:b5:e3:ed:d5:d8:e2:56:33:c6:df:c4:22:
bb:df:d9:a1:3d:51:d4:74:2a:8c:f0:ca:b6:04:1a:d1:95:9e:
c8:81:79:d4:54:50:74:7e:11:25:8e:73:76:05:e6:eb:7c:67:
13:fd:3b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:15:45 2025 by rpki-client