Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/w2ES6z0-GxFao1z0WtdU6tUNKgg.roa
File: w2ES6z0-GxFao1z0WtdU6tUNKgg.roa (raw, json)
Hash identifier: ApG5l3115Mb/ANUYseH9YxN6xphBBO3IlWJ0HpkQRL8=
Subject key identifier: C3:61:12:EB:3D:3E:1B:11:5A:A3:5C:F4:5A:D7:54:EA:D5:0D:2A:08
Certificate issuer: /CN=81891b261c62dabf777e552eb5ec27d77e484139
Certificate serial: 0182439EE56B92C6E89436CC8829A2E0209D
Authority key identifier: 81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/w2ES6z0-GxFao1z0WtdU6tUNKgg.roa
Signing time: Thu 28 Jul 2022 07:04:23 +0000
ROA not before: Thu 28 Jul 2022 07:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 86.105.29.0/24 maxlen: 24
86.105.28.0/24 maxlen: 24
89.47.4.0/24 maxlen: 24
86.105.31.0/24 maxlen: 24
86.105.30.0/24 maxlen: 24
89.47.7.0/24 maxlen: 24
89.47.6.0/24 maxlen: 24
89.47.5.0/24 maxlen: 24
188.240.205.0/24 maxlen: 24
195.82.123.0/24 maxlen: 24
188.240.204.0/24 maxlen: 24
195.82.122.0/24 maxlen: 24
195.82.121.0/24 maxlen: 24
195.82.120.0/24 maxlen: 24
188.240.206.0/24 maxlen: 24
188.240.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:43:9e:e5:6b:92:c6:e8:94:36:cc:88:29:a2:e0:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81891b261c62dabf777e552eb5ec27d77e484139
Validity
Not Before: Jul 28 07:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c36112eb3d3e1b115aa35cf45ad754ead50d2a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:fa:b8:24:90:1c:45:88:b3:dc:19:2d:6c:
2c:62:32:62:58:bd:54:73:9a:e1:c6:91:bb:63:ce:
61:13:55:d2:1a:aa:65:d2:a9:d7:f4:74:22:4b:7c:
7c:f6:f1:ec:ce:81:63:b9:62:a7:dc:d9:3f:08:72:
f3:d3:12:15:37:3e:a5:6c:a6:e8:2d:83:f8:ed:70:
97:8d:9f:a9:e0:dd:36:42:71:59:46:59:ff:76:1c:
dc:66:88:64:0c:cc:e4:76:b9:79:c6:69:11:b3:36:
01:36:45:62:ac:a0:16:4d:33:54:90:98:a0:24:ff:
a9:43:72:08:ab:68:35:36:4d:c0:b2:1a:21:01:8e:
39:b8:fa:f0:2a:49:87:48:69:c3:e4:14:8b:a3:ad:
9e:49:c4:5a:c5:41:fb:98:b3:f9:09:07:24:0d:ad:
53:92:ef:b9:ee:12:28:40:87:89:b6:c5:b0:51:b7:
5e:32:a7:43:57:fa:38:8a:d7:29:b4:56:a5:04:4f:
4a:50:e6:01:9e:e0:66:03:39:46:e8:5c:93:05:7d:
cf:67:09:95:a0:3e:d1:40:c0:8e:e7:92:e6:8d:36:
f8:43:48:57:80:50:f6:de:3b:01:86:e9:d3:df:d1:
35:aa:bb:f0:83:38:52:9d:4a:db:89:75:0d:b5:8e:
e3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:12:EB:3D:3E:1B:11:5A:A3:5C:F4:5A:D7:54:EA:D5:0D:2A:08
X509v3 Authority Key Identifier:
keyid:81:89:1B:26:1C:62:DA:BF:77:7E:55:2E:B5:EC:27:D7:7E:48:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gYkbJhxi2r93flUutewn135IQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/w2ES6z0-GxFao1z0WtdU6tUNKgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/cfbacd-d09c-4a2f-abf9-3bef3f7e4deb/1/gYkbJhxi2r93flUutewn135IQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.28.0/22
89.47.4.0/22
188.240.204.0/22
195.82.120.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:79:b4:09:18:a1:06:93:10:ab:03:91:60:ea:0b:d1:02:8e:
b8:79:44:98:32:12:1d:df:16:89:4a:69:19:ca:93:4e:a9:0d:
e8:e1:13:0f:c7:2d:fd:47:6f:30:cc:68:c9:a4:7b:6f:ab:06:
2f:5f:1b:59:75:98:f0:1c:b6:28:f4:68:17:c7:05:fa:6c:6e:
2a:33:53:a6:2b:a8:5d:3a:f8:dc:0e:3a:41:bf:61:27:10:33:
0d:c4:d3:3d:86:83:62:64:53:f6:38:77:17:a2:7e:ca:38:e2:
5f:d7:26:63:90:f9:c7:b9:2f:60:fe:fc:06:05:ba:d7:14:49:
c7:90:90:9d:51:5e:45:0f:d9:e3:f2:42:93:b1:ba:bc:2c:ed:
88:26:8c:f2:7c:c8:fa:b1:1a:41:db:bd:78:3e:4b:36:f8:53:
f8:85:68:40:b9:4e:73:1f:8b:4d:62:20:a8:e0:d9:66:46:93:
d1:f0:d7:c3:8c:1e:5e:e7:26:eb:60:4a:76:e9:d7:37:8a:64:
ea:89:98:9e:1f:85:05:45:53:7f:31:b4:5b:09:07:50:14:6f:
bc:b9:3a:06:bd:f8:90:2c:a4:48:0a:c5:62:19:a9:93:91:a3:
ff:ee:6e:f6:08:ec:b0:7e:c3:98:eb:4b:41:fa:d8:b6:48:d6:
df:9d:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:26 2025 by rpki-client