Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/8WCHU2MMk4C_AekuVwFAOXBptPE.roa
File: 8WCHU2MMk4C_AekuVwFAOXBptPE.roa (raw, json)
Hash identifier: S6aWO4qFpd4d0OZB2mUrtvNbqaPp4Oi2DzfFldf3Eu8=
Subject key identifier: F1:60:87:53:63:0C:93:80:BF:01:E9:2E:57:01:40:39:70:69:B4:F1
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 0194258FA46868D7A68DE039A00FB73B1216
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/8WCHU2MMk4C_AekuVwFAOXBptPE.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 79.132.204.0/24 maxlen: 24
79.132.209.0/24 maxlen: 24
185.82.166.0/23 maxlen: 23
217.146.219.0/24 maxlen: 24
217.146.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a4:68:68:d7:a6:8d:e0:39:a0:0f:b7:3b:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1608753630c9380bf01e92e570140397069b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:78:69:35:96:5a:e7:cf:1d:fb:5d:ab:8c:
18:54:c9:b6:07:06:f0:7a:89:10:d1:71:bb:a1:9e:
47:c1:86:25:09:90:23:46:c8:19:24:a7:02:4b:bb:
e3:ce:ac:b2:93:34:43:6a:40:ee:d8:91:69:16:32:
03:b2:4e:65:d8:c3:41:aa:fa:47:8e:3a:2d:1d:63:
1c:ef:b5:81:6d:fa:25:f7:74:c9:81:46:63:8c:d9:
a7:cd:ee:6a:d5:8d:2e:52:3e:11:cf:07:da:81:67:
00:78:d4:08:4b:24:cf:b3:c3:73:d2:49:99:ed:06:
b3:3a:c6:04:2b:6e:71:f5:5d:35:44:a1:22:19:91:
9a:81:92:bd:18:98:af:b6:29:6c:8d:6e:44:c3:b8:
94:3d:1f:61:99:41:63:b2:94:7c:47:29:bf:a6:f6:
5a:ed:c1:1e:d2:18:8f:df:0a:ef:38:5a:6f:2d:74:
46:fe:07:5c:40:35:ac:70:a8:9a:2e:ba:6e:1e:87:
32:0d:7a:da:77:fd:3b:35:ca:9a:7f:d4:ad:35:77:
81:78:50:3c:95:95:08:fa:bd:9e:09:32:0d:12:d9:
5f:56:79:d4:1d:6e:bc:fe:d6:88:40:e9:b1:43:d0:
ab:7c:55:3a:88:ff:f2:08:91:68:fe:11:25:66:6f:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:60:87:53:63:0C:93:80:BF:01:E9:2E:57:01:40:39:70:69:B4:F1
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/8WCHU2MMk4C_AekuVwFAOXBptPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.204.0/24
79.132.209.0/24
185.82.166.0/23
217.146.219.0/24
217.146.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b4:5f:ad:4e:eb:57:c3:39:8e:6e:25:0e:8f:f6:a8:88:02:
b8:d3:fa:bd:73:0e:4c:6d:8e:bd:a4:bf:7c:8c:65:e5:d3:6c:
59:1a:40:8c:1f:7e:c5:77:1a:e8:e4:70:9c:18:54:03:dc:13:
bb:b5:9b:38:79:ba:28:51:39:2e:98:77:3d:3f:c9:aa:31:8f:
13:7f:89:2e:4b:ca:f5:87:07:f9:3d:95:63:7c:23:5c:df:74:
c5:dd:51:3b:94:5c:5c:de:a1:3e:5a:03:a7:d4:60:ed:67:66:
b0:ab:17:7f:c7:02:2d:3c:3a:9a:9f:96:d9:83:63:63:eb:cf:
fd:11:a2:97:ba:0b:a9:67:b2:12:8b:b0:71:ca:ad:0b:bd:5c:
8a:cd:07:ce:0d:3b:14:ed:eb:4f:dd:fa:ff:fa:c6:3b:f6:b1:
ff:56:4f:f1:93:e3:e0:88:13:d8:c7:9e:a1:eb:bc:c0:00:61:
e5:a2:23:5c:1a:e5:59:4a:e5:ec:9e:f7:bd:6c:a8:35:36:73:
6e:5a:7b:6b:b4:67:68:6b:3d:e5:af:52:70:e2:b4:17:7d:52:
84:ac:32:cd:ee:62:8f:bb:15:87:45:70:2f:25:90:4a:fd:4d:
0c:46:83:a6:57:95:35:5d:38:c1:b2:2e:7d:bd:96:c4:e0:0a:
eb:df:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:26 2025 by rpki-client