Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/CwqvWSmBdm9lt3PehiaP0H6J-oY.roa
File: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (raw, json)
Hash identifier: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=
Subject key identifier: 0B:0A:AF:59:29:81:76:6F:65:B7:73:DE:86:26:8F:D0:7E:89:FA:86
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019426D90DC8D445877C3CD11784753C62C6
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/CwqvWSmBdm9lt3PehiaP0H6J-oY.roa
Signing time: Thu 02 Jan 2025 11:49:06 +0000
ROA not before: Thu 02 Jan 2025 11:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 93.184.144.0/24 maxlen: 24
93.184.145.0/24 maxlen: 24
93.184.146.0/24 maxlen: 24
93.184.147.0/24 maxlen: 24
93.184.148.0/24 maxlen: 24
93.184.149.0/24 maxlen: 24
93.184.150.0/24 maxlen: 24
93.184.151.0/24 maxlen: 24
93.184.152.0/24 maxlen: 24
93.184.153.0/24 maxlen: 24
93.184.155.0/24 maxlen: 24
93.184.156.0/24 maxlen: 24
93.184.157.0/24 maxlen: 24
93.184.158.0/24 maxlen: 24
93.184.159.0/24 maxlen: 24
185.168.152.0/24 maxlen: 24
185.168.153.0/24 maxlen: 24
185.168.154.0/23 maxlen: 23
185.168.154.0/24 maxlen: 24
185.168.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:0d:c8:d4:45:87:7c:3c:d1:17:84:75:3c:62:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jan 2 11:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b0aaf592981766f65b773de86268fd07e89fa86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:27:43:f2:45:9c:1a:3d:54:2c:7e:66:2a:
79:13:00:62:9e:dd:67:1a:d2:55:6e:dc:ab:d8:1d:
78:e0:99:07:6c:d9:56:c4:c7:94:cc:dd:b4:7c:3e:
4a:4d:6d:6d:df:35:35:00:79:47:97:5d:6d:e9:60:
1e:27:cf:c4:19:f2:5d:2c:1e:35:62:40:4a:b3:86:
24:3f:0f:74:d1:d1:c7:9a:66:42:9b:af:79:c4:81:
52:b2:c3:d5:2b:1f:9d:8a:80:5f:2c:e1:e4:d6:e0:
d4:18:82:9b:ea:11:1f:67:1c:1d:82:26:c4:47:7f:
d6:23:48:26:5e:00:99:79:d7:eb:cc:67:f2:a6:00:
9e:74:b5:41:53:06:34:55:b5:db:64:b4:71:5e:24:
da:0f:ed:b3:71:8c:37:93:ae:01:07:06:a2:3b:22:
15:dd:68:54:93:bc:04:bc:b4:04:59:0b:d2:c5:72:
90:a7:bd:02:6f:c0:bd:4a:5d:0e:59:d6:76:70:63:
06:49:63:41:b7:d0:6b:68:1a:21:95:40:95:25:c0:
c4:04:d4:56:a3:91:74:a3:4f:92:ae:d3:e9:64:01:
5e:74:02:2c:83:53:d9:ce:bf:c5:5e:3e:51:7c:39:
bf:89:da:f5:1d:b1:cd:e9:f1:55:a8:ea:33:ce:c4:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0A:AF:59:29:81:76:6F:65:B7:73:DE:86:26:8F:D0:7E:89:FA:86
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/CwqvWSmBdm9lt3PehiaP0H6J-oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.184.144.0-93.184.153.255
93.184.155.0-93.184.159.255
185.168.152.0/22
Signature Algorithm: sha256WithRSAEncryption
91:d9:df:60:86:fb:8c:6e:32:27:aa:1d:53:5d:0f:d4:8e:ac:
5f:7b:36:d7:1d:95:05:0b:91:39:07:71:58:ce:b3:2d:55:ed:
66:01:d1:ff:13:60:c7:12:0b:b8:d1:85:b5:15:05:31:a6:62:
d8:b4:78:d3:1d:af:33:59:27:e2:81:08:2c:0b:ff:06:16:5d:
25:6e:35:a7:87:7e:f9:4e:ee:6b:4a:b5:3e:0c:98:d6:ae:03:
ce:20:9c:03:3b:91:28:78:60:cd:60:b5:04:cb:cd:78:54:f7:
f2:de:58:d0:96:fc:f8:0c:77:53:37:0b:fe:f5:d6:b9:90:bc:
9a:cc:6a:71:96:0e:4d:53:bc:18:04:cf:fe:c4:ab:e6:a4:9a:
b4:67:21:c5:65:d8:3b:c6:c0:84:9b:34:37:a0:e3:6b:a7:a4:
14:f7:68:e5:fb:41:75:e6:3b:7a:ad:70:a7:4f:ad:b0:d7:27:
be:d3:dd:c4:c7:3a:14:c9:fc:1d:ad:1f:1e:a3:d7:9d:f1:95:
db:19:c6:76:dd:8b:84:0f:45:d6:57:52:e7:a0:28:99:9d:18:
91:e4:39:06:b3:42:41:df:5a:1b:f5:01:44:22:99:f3:e6:24:
69:17:5a:12:75:8d:91:b2:20:1f:49:33:61:df:c2:8e:29:52:
f9:d4:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:00 2025 by rpki-client