Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/C_WFK57ORMYmTPM8C6MEKdkZzcw.roa
File: C_WFK57ORMYmTPM8C6MEKdkZzcw.roa (raw, json)
Hash identifier: UGi0NlFvaky9A83aLUwpBw47ySnkhX86em/MvBBhL6E=
Subject key identifier: 0B:F5:85:2B:9E:CE:44:C6:26:4C:F3:3C:0B:A3:04:29:D9:19:CD:CC
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 019420D66136AE306D70255B2D947B2D0850
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/C_WFK57ORMYmTPM8C6MEKdkZzcw.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 77.243.88.0/22 maxlen: 24
178.20.213.0/24 maxlen: 24
178.20.214.0/24 maxlen: 24
178.20.215.0/24 maxlen: 24
185.101.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:61:36:ae:30:6d:70:25:5b:2d:94:7b:2d:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bf5852b9ece44c6264cf33c0ba30429d919cdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:c0:06:1d:44:8f:1b:08:7e:fb:15:c0:6e:
52:7c:d6:a1:18:26:2c:d0:0f:59:78:62:25:9c:e5:
11:92:62:28:0a:8f:cc:98:f1:a9:7b:60:78:e0:e1:
12:1e:1e:8b:c3:e0:f1:78:fe:46:3e:ff:ff:eb:6b:
e3:68:81:9a:7b:c9:84:94:c9:d0:0c:8a:e5:e2:97:
2f:88:18:da:1c:23:a8:5e:3f:82:f4:be:6d:99:b9:
91:78:d7:c7:e3:6a:1f:12:8f:3c:4e:7f:6f:be:ed:
e9:b8:d0:fb:3a:7c:e5:c5:f5:19:e3:ad:a7:d1:06:
4c:9a:c6:b9:97:4d:a9:77:9a:14:3e:06:85:da:64:
e5:7c:90:95:ae:14:38:f5:db:a1:ce:e4:dc:de:67:
4a:8a:f4:07:1e:7e:f9:c6:77:2d:47:94:b2:fb:da:
29:e3:f8:1a:81:fc:85:96:d4:71:a6:92:da:fa:66:
01:6c:7e:c7:25:08:73:73:75:21:17:69:19:5f:10:
e1:2c:df:04:4a:18:5f:83:9e:bf:15:d1:f7:48:ff:
bb:29:2f:5a:8c:99:f4:ee:18:06:ca:49:a4:a8:ed:
51:f9:f3:7c:0e:c8:dc:11:cd:c8:06:e2:1d:21:60:
d6:5b:a1:34:d5:a1:74:35:6f:df:21:28:b0:be:83:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F5:85:2B:9E:CE:44:C6:26:4C:F3:3C:0B:A3:04:29:D9:19:CD:CC
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/C_WFK57ORMYmTPM8C6MEKdkZzcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.88.0/22
178.20.213.0-178.20.215.255
185.101.20.0/23
Signature Algorithm: sha256WithRSAEncryption
16:72:f7:e8:0d:35:2b:8b:15:fb:10:89:c4:d3:27:5c:5c:96:
b9:33:25:6f:45:25:14:c2:1e:03:58:75:18:a1:a8:80:25:6c:
8d:2d:5d:e4:b7:b3:bd:ae:18:91:62:b6:fd:cb:76:61:96:da:
c2:ec:75:43:ac:62:13:97:c3:35:7c:3a:76:5a:e7:09:e2:a5:
a8:96:ef:75:02:af:69:01:2a:e8:97:ab:b0:a6:fa:73:65:d9:
f9:5f:01:9c:37:95:bb:8b:65:e8:94:70:46:44:17:6e:f0:25:
09:48:4b:c5:e0:89:a9:85:fe:10:53:ed:bc:3a:0b:b0:6e:b8:
9c:b4:10:f0:50:fb:7c:6c:da:b5:8d:08:24:f8:36:41:4a:33:
4e:ee:b8:41:08:56:89:b6:26:0e:22:70:87:f0:b9:91:92:ec:
0f:49:ba:3e:d2:08:a5:e2:80:a2:1e:10:c6:6c:2f:04:5f:bc:
aa:17:93:4f:63:1d:eb:cf:fb:f1:d5:fa:17:74:87:b0:37:af:
53:31:ef:2d:af:c3:28:7c:d6:c1:5b:c0:af:bf:24:ba:66:53:
50:d2:f1:d8:14:75:b0:87:d9:7f:bf:f6:b7:b1:3a:83:5d:37:
e7:5d:c8:96:48:60:00:43:1d:f7:50:5c:93:b2:5b:59:25:24:
c6:3c:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:08 2025 by rpki-client