Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/W7Ufxlg1hBtTDHrWlikdDqSjg1c.roa
File: W7Ufxlg1hBtTDHrWlikdDqSjg1c.roa (raw, json)
Hash identifier: HlphOvczRizq9eThHuxyzrCvO8uHOJX43xU2Df9CB1s=
Subject key identifier: 5B:B5:1F:C6:58:35:84:1B:53:0C:7A:D6:96:29:1D:0E:A4:A3:83:57
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01874760BB64B722694411A33FA43F5F96B4
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/W7Ufxlg1hBtTDHrWlikdDqSjg1c.roa
Signing time: Mon 03 Apr 2023 13:48:54 +0000
ROA not before: Mon 03 Apr 2023 13:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 194.113.239.0/24 maxlen: 24
185.221.196.0/23 maxlen: 24
185.238.88.0/22 maxlen: 24
45.80.228.0/22 maxlen: 24
185.232.19.0/24 maxlen: 24
185.246.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:60:bb:64:b7:22:69:44:11:a3:3f:a4:3f:5f:96:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Apr 3 13:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bb51fc65835841b530c7ad696291d0ea4a38357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:73:17:a9:96:2a:03:b6:37:4c:2d:cc:55:83:
4e:d6:2a:94:6f:ec:2e:d2:e8:d9:29:78:f6:28:06:
f6:17:75:ad:40:ec:6a:12:98:f1:3f:7c:7c:27:97:
bc:1f:9a:cd:8b:87:53:0c:51:f5:d0:31:24:6d:43:
a9:4d:ef:cb:c3:5e:92:fd:bf:e4:44:8a:02:2f:b8:
ac:ec:69:5b:42:75:19:e4:72:49:f5:e5:04:2e:d2:
fd:5e:f8:e8:b0:be:39:ab:9e:47:09:65:e4:dc:92:
d5:90:9c:ad:31:b8:7d:ef:10:4a:bb:44:82:89:2a:
99:a8:85:02:92:0f:ac:56:19:1b:c5:7d:82:27:37:
92:f2:fa:11:d2:ea:30:a0:3f:b1:cf:7e:48:ae:74:
57:d2:ca:29:8a:e1:d2:fc:52:85:e3:70:bc:b6:14:
51:f8:e8:47:dd:87:05:14:f3:2e:0f:13:59:6b:e3:
82:2a:9f:cc:2a:63:ca:a0:cf:f5:cb:b2:66:52:45:
72:de:5f:6d:6c:68:ec:f7:90:b2:ae:75:43:20:3d:
c3:a3:70:71:9e:f2:c7:4f:d7:97:0e:20:55:05:ea:
a5:88:01:eb:aa:23:73:50:89:9b:54:ff:83:5d:cb:
83:35:6a:73:a4:03:d7:40:a5:58:43:86:7d:5e:73:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B5:1F:C6:58:35:84:1B:53:0C:7A:D6:96:29:1D:0E:A4:A3:83:57
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/W7Ufxlg1hBtTDHrWlikdDqSjg1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.228.0/22
185.221.196.0/23
185.232.19.0/24
185.238.88.0/22
185.246.216.0/24
194.113.239.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c3:2a:4b:4d:6d:9f:ab:14:49:2a:16:cd:80:f0:fa:92:80:
6f:f0:b5:38:fb:9e:c0:ff:c2:39:f3:1e:d5:c6:a3:79:49:44:
32:24:7a:f5:6b:97:d3:c3:3a:30:1b:24:13:75:fa:9e:cc:7a:
90:18:db:d4:d1:2d:b9:ee:72:f9:da:ef:78:e1:c5:17:eb:e2:
07:58:23:98:eb:77:0f:41:ca:d6:ef:68:35:70:21:ad:db:fc:
9d:4d:af:af:45:aa:32:40:c0:f0:20:92:b5:74:a2:a3:8a:98:
fe:81:9b:a2:bb:96:63:71:8e:b9:a8:04:50:36:d5:c9:e0:89:
5c:80:bb:72:9e:1c:07:a9:e2:ac:bb:06:46:0c:74:1e:cf:87:
5e:ef:6c:7e:8d:1a:2f:ab:40:8b:16:aa:d6:47:c3:0a:d4:03:
0a:56:ed:53:59:31:80:49:af:6c:17:a8:38:11:8d:52:c5:d4:
dd:3c:0f:af:42:d3:91:33:0e:99:16:df:5c:3f:18:1d:d9:17:
22:87:ba:c6:9d:56:5b:43:5c:f2:3e:2a:05:b2:5c:5d:9f:f8:
c0:04:e0:c6:a8:83:02:0b:cd:d1:cb:f4:33:e6:4c:a5:53:2d:
4b:e9:57:85:6a:04:f2:56:28:6c:d5:27:55:c5:a0:04:8f:a3:
77:be:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:55 2025 by rpki-client