Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wERVnVG6R2njKphEYpT2Wd_lcGU.roa
File: wERVnVG6R2njKphEYpT2Wd_lcGU.roa (raw, json)
Hash identifier: i/tPrkSgb5mdcI2HMV7Q/I2VgosOArXLDN1BHVIniMs=
Subject key identifier: C0:44:55:9D:51:BA:47:69:E3:2A:98:44:62:94:F6:59:DF:E5:70:65
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0187C7E7A8847D850014BCC6D8A572CEB4AE
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wERVnVG6R2njKphEYpT2Wd_lcGU.roa
Signing time: Fri 28 Apr 2023 12:47:40 +0000
ROA not before: Fri 28 Apr 2023 12:47:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12325
IP address blocks: 89.39.94.0/23 maxlen: 24
89.39.123.0/24 maxlen: 24
185.18.224.0/23 maxlen: 24
86.106.26.0/24 maxlen: 24
89.45.228.0/24 maxlen: 24
188.215.40.0/22 maxlen: 24
89.40.222.0/23 maxlen: 24
93.115.108.0/24 maxlen: 24
89.35.124.0/23 maxlen: 24
89.46.232.0/21 maxlen: 24
89.46.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:e7:a8:84:7d:85:00:14:bc:c6:d8:a5:72:ce:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 28 12:47:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c044559d51ba4769e32a98446294f659dfe57065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ad:be:6e:cd:1d:98:9e:8e:33:a3:e8:53:7f:
3d:d4:8e:b5:55:b0:19:95:af:4b:d9:38:87:c2:3b:
b7:d8:60:b2:f3:d0:b5:17:65:4c:ab:ee:11:22:6f:
de:36:02:d7:6f:ba:4b:4f:7c:f5:f1:f8:1c:94:7e:
f0:60:a7:35:93:2f:23:f0:bb:86:e0:da:97:59:71:
97:78:51:66:b2:cc:d7:29:80:8f:e5:7f:6d:42:93:
48:00:f4:de:96:cc:a2:14:e0:5f:e8:64:96:96:e8:
a0:43:5d:67:b2:d0:4f:8c:26:9e:08:8b:4e:69:d9:
f2:b4:6f:7f:c9:df:a2:ec:28:4c:f9:95:fa:98:78:
56:38:c6:09:05:8d:22:97:0f:3f:e5:b8:81:11:08:
11:c3:fe:a6:70:a6:b9:16:b0:37:4e:49:b2:fa:dd:
29:d9:49:01:9e:50:37:c7:3f:bc:a5:d3:74:1c:ed:
4b:64:9b:c0:10:76:6e:7e:b3:1d:9d:4b:f9:20:d2:
c8:57:0c:fd:13:b0:6f:c4:78:12:64:24:84:d9:f3:
73:ed:cc:c9:6b:bc:e7:ec:de:f8:d0:9d:12:b1:94:
b8:a6:b3:2e:e6:bd:a7:bb:8a:89:9f:e2:c1:63:83:
ce:45:97:01:de:d3:86:1b:9b:f5:9e:b2:bb:13:3d:
0b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:55:9D:51:BA:47:69:E3:2A:98:44:62:94:F6:59:DF:E5:70:65
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wERVnVG6R2njKphEYpT2Wd_lcGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.26.0/24
89.35.124.0/23
89.39.94.0/23
89.39.123.0/24
89.40.222.0/23
89.45.228.0/24
89.46.128.0/22
89.46.232.0/21
93.115.108.0/24
185.18.224.0/23
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:e3:c0:cd:b2:2e:c5:ed:15:f4:9d:36:07:81:4a:18:1d:b7:
bf:84:ad:93:64:4c:fd:d4:a6:4f:0e:57:1d:9f:99:35:17:13:
b5:15:d0:29:f5:fa:07:d1:94:cc:b4:a0:20:0c:f9:f5:23:44:
2f:f5:ec:81:7a:c7:07:37:5b:2c:b6:09:bb:15:f5:45:40:19:
79:bf:dd:e9:a7:53:90:56:d3:2a:33:f0:4c:ef:31:35:27:3e:
d7:f1:6e:af:fb:9b:c5:ae:c6:a4:3c:e8:23:d7:5a:76:e3:bc:
b5:f6:85:c4:f4:1d:0f:b6:e3:75:ae:84:82:1c:07:45:2a:37:
8d:49:59:f8:f7:33:8e:fe:d1:03:87:b7:8a:25:16:ec:b0:5e:
05:22:88:82:27:af:d3:21:8d:78:7f:f4:4e:bd:21:92:76:4c:
cd:ba:07:55:aa:1b:4e:e6:91:c5:7c:6c:a4:24:86:13:22:50:
08:bb:e7:12:66:53:0f:71:6a:32:d3:31:44:a1:f4:1a:f6:4b:
37:95:d1:ad:d7:32:86:81:1a:0f:2a:11:e0:8a:5a:d3:2d:21:
2b:c8:19:c5:8f:3c:30:e7:af:53:c8:f3:f3:10:b2:28:13:80:
40:f6:ab:8c:10:9f:81:46:4a:2f:a7:c6:99:3e:a7:6d:c9:8d:
c6:ca:ec:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:23 2025 by rpki-client