Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa
File: NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa (raw, json)
Hash identifier: F9PS4+2YWZWixXX0triEKsctJpMJlaT/3wjK6G1EJGE=
Subject key identifier: 35:65:42:A7:C6:38:62:BC:2D:DA:5E:4E:43:63:76:F2:D0:2F:E5:5B
Certificate issuer: /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial: 019425222142F485F295BA364138EEF32DA5
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa
Signing time: Thu 02 Jan 2025 03:49:41 +0000
ROA not before: Thu 02 Jan 2025 03:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52148
IP address blocks: 37.26.104.0/21 maxlen: 21
91.204.208.0/22 maxlen: 22
91.238.160.0/22 maxlen: 22
91.238.164.0/23 maxlen: 23
185.73.8.0/24 maxlen: 24
185.73.9.0/24 maxlen: 24
185.73.10.0/24 maxlen: 24
185.73.11.0/24 maxlen: 24
193.33.186.0/23 maxlen: 23
193.105.61.0/24 maxlen: 24
213.5.176.0/22 maxlen: 22
213.5.180.0/22 maxlen: 22
2a00:c980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:21:42:f4:85:f2:95:ba:36:41:38:ee:f3:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=356542a7c63862bc2dda5e4e436376f2d02fe55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:61:3a:56:f9:da:7d:b6:73:ee:81:91:40:
c4:19:a9:e6:ef:8c:a2:6f:cd:0c:70:f7:8d:d5:57:
31:a8:dd:1b:ca:cc:c0:f1:bd:92:a2:90:96:12:56:
36:b0:fb:34:fc:2a:64:fa:ad:3a:a8:2b:2b:9c:fe:
fd:4e:03:15:b3:9c:d3:2d:81:64:5c:d2:30:37:ee:
da:f0:55:a5:d7:7b:ad:e3:59:85:ed:19:86:30:12:
e7:43:17:84:34:44:33:05:05:a8:f3:dc:32:32:f2:
6d:5e:56:6b:27:20:34:a9:c9:9b:90:79:a1:a7:cd:
29:74:d6:c6:2c:cb:16:4c:62:f9:ee:59:14:32:25:
21:7a:18:c7:4a:7f:4e:36:55:4f:c5:3e:5e:8a:45:
8b:76:3a:16:8e:f9:76:ad:54:ed:d4:18:c7:28:53:
55:b5:da:78:ef:3f:d7:0e:0b:ad:b4:45:2a:9c:5a:
5a:72:5e:51:dc:7a:22:a3:af:65:9c:93:b3:7b:7f:
9a:52:a2:0d:f7:6d:53:f0:7c:e5:f1:4d:ee:f4:2d:
62:5d:c3:b8:9d:df:ee:b9:37:cd:3f:b5:14:9a:12:
b3:6b:9f:4f:a0:00:75:fc:40:2e:3a:c0:40:f6:37:
32:ad:a9:73:2f:86:0b:7e:19:7c:31:13:07:52:00:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:42:A7:C6:38:62:BC:2D:DA:5E:4E:43:63:76:F2:D0:2F:E5:5B
X509v3 Authority Key Identifier:
keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/NWVCp8Y4Yrwt2l5OQ2N28tAv5Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.104.0/21
91.204.208.0/22
91.238.160.0-91.238.165.255
185.73.8.0/22
193.33.186.0/23
193.105.61.0/24
213.5.176.0/21
IPv6:
2a00:c980::/29
Signature Algorithm: sha256WithRSAEncryption
0a:68:5e:4e:f4:1b:81:4c:4d:9a:c5:7d:f6:bf:9f:02:7c:4d:
1e:d2:80:c6:09:ef:7a:b9:f3:a9:87:34:eb:8f:35:8f:23:5a:
0a:00:2a:12:d7:c9:03:7c:8c:64:1b:aa:a4:2a:5e:d0:62:bc:
30:92:08:3c:92:ea:86:1c:0e:2f:38:f4:4a:7f:3c:a7:95:91:
d7:8e:bc:a6:e0:38:e1:69:c6:f3:46:eb:91:a6:61:e1:9a:60:
e4:df:51:87:12:d7:74:c7:7d:89:93:c8:a0:7a:4c:6d:a7:8e:
6d:e2:ea:c1:f7:2c:48:64:5d:b5:6a:ab:77:42:d2:53:2a:35:
24:fb:32:48:f9:62:13:0f:3a:61:d1:88:33:5a:61:15:7e:e1:
81:5a:5e:b2:e1:ac:17:d0:25:b1:38:11:4a:cf:83:65:92:63:
c9:d2:a9:be:b3:b8:35:94:17:73:e6:f7:a0:9e:15:a3:d4:0c:
7e:ae:c9:3e:ff:c4:14:09:6f:fe:64:03:af:99:29:ca:58:e5:
06:6c:45:d6:c9:cc:31:92:4c:59:ac:98:f6:3d:f4:f6:2f:22:
2b:55:c9:c4:6a:68:68:3e:e9:56:e9:76:93:9e:9c:97:74:41:
fd:d1:e5:c8:df:1d:5b:78:f8:e8:8e:2f:25:89:05:42:70:0d:
bb:a5:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:48 2025 by rpki-client