Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/rWJkgbk6_Ikqw5wAwyClBTtRWB8.roa
File: rWJkgbk6_Ikqw5wAwyClBTtRWB8.roa (raw, json)
Hash identifier: rkLVgDPmrMG/9vMEDb37mR2JrwR9S/SV6dJOijO6oC0=
Subject key identifier: AD:62:64:81:B9:3A:FC:89:2A:C3:9C:00:C3:20:A5:05:3B:51:58:1F
Certificate issuer: /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Certificate serial: 019422202FBE9298F0605F3F6052E546A357
Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/rWJkgbk6_Ikqw5wAwyClBTtRWB8.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 89.145.172.0/22 maxlen: 22
89.145.174.0/23 maxlen: 23
89.145.174.0/24 maxlen: 24
89.145.175.0/24 maxlen: 24
185.177.64.0/22 maxlen: 22
185.177.66.0/23 maxlen: 23
185.177.66.0/24 maxlen: 24
185.177.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2f:be:92:98:f0:60:5f:3f:60:52:e5:46:a3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad626481b93afc892ac39c00c320a5053b51581f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:96:27:fb:de:21:e3:0f:46:c5:65:5d:64:
41:99:e7:8f:97:56:95:01:3f:54:5e:21:fd:fc:84:
43:49:d1:05:c9:45:47:f1:22:69:20:3e:0f:2e:f2:
56:4b:c0:85:7e:d2:b7:6c:85:87:be:6b:71:bd:26:
92:eb:3e:60:2f:c5:fa:ad:c2:04:7f:d8:53:42:d8:
16:33:37:f5:3c:e8:a0:59:fb:b7:3f:00:d9:a7:91:
3d:f6:0a:c8:f3:11:ea:c2:c9:68:a8:e6:6f:19:28:
f2:99:fd:d3:72:fb:19:49:1b:5a:14:3c:88:ff:8d:
e3:fd:99:3e:13:23:dc:f0:20:f6:7c:b9:4a:d8:ae:
3e:9e:08:de:69:d3:d3:9f:45:69:d9:1f:aa:e0:f6:
69:e8:a3:51:b1:a3:5a:e5:30:77:47:8c:df:9c:50:
8a:40:7a:34:52:b6:e2:e9:fa:13:33:a3:dd:b1:0f:
5b:22:5d:f6:8b:e5:d4:74:1c:6a:bc:67:d2:71:a7:
ab:b3:c5:1d:ab:79:b8:a1:04:cf:94:67:aa:29:ca:
39:7d:64:55:e8:19:48:de:a3:67:d2:fb:70:2d:ed:
37:73:a9:d4:1d:3b:f3:42:65:7b:d3:49:ea:2c:42:
83:db:0e:2a:1c:0e:e5:d5:b8:2e:d9:cd:20:e3:4e:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:62:64:81:B9:3A:FC:89:2A:C3:9C:00:C3:20:A5:05:3B:51:58:1F
X509v3 Authority Key Identifier:
keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/rWJkgbk6_Ikqw5wAwyClBTtRWB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.145.172.0/22
185.177.64.0/22
Signature Algorithm: sha256WithRSAEncryption
89:b7:e0:53:e1:7a:fc:0f:0c:36:3a:9c:ec:ff:8c:cd:0e:a2:
e5:b1:57:ac:08:19:ed:c5:fb:0e:5e:1b:5f:aa:8f:cd:01:e1:
98:96:da:c4:6a:b7:80:24:d5:2e:5a:7e:f0:51:d9:fe:25:1d:
ac:54:a9:80:e8:18:cf:d1:88:68:9f:e6:51:00:c7:ee:fc:61:
03:5f:fd:60:68:9f:7e:e8:fb:2a:fd:0f:ab:b3:9a:4e:2c:45:
2f:b7:70:88:d7:a9:fa:79:6a:74:a8:88:a5:ba:32:4a:1d:ba:
11:d1:3f:5e:50:aa:9b:66:52:f3:6f:25:4b:35:d6:01:4b:15:
34:2b:2e:98:c3:bd:00:b0:88:d4:70:c2:aa:f0:05:69:ba:e6:
57:b4:2f:63:25:4c:77:09:90:1d:34:fe:96:10:43:8f:0c:45:
a6:b8:f7:db:5e:5d:45:21:36:32:28:da:27:22:07:3f:48:33:
3f:87:ec:27:b3:6e:38:c9:e8:c9:23:e5:56:4c:2b:aa:90:2b:
2b:32:6d:d0:fb:67:7a:87:13:0e:34:a6:7c:fd:60:d6:b6:a2:
09:b1:59:8c:60:26:03:41:9d:87:0a:e2:07:35:c3:87:47:7b:
91:5d:6c:9f:f5:2a:ff:22:9d:09:05:3b:44:ef:17:54:36:f2:
0a:0b:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:50:11 2025 by rpki-client