Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa
File: wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa (raw, json)
Hash identifier: 2d2qxPNtY9fysBuRUtCzO2NCNWMGcOf5j1D1Gmd73dM=
Subject key identifier: C0:C8:ED:4F:D7:BC:43:93:1B:A4:D7:69:2B:22:5A:F2:B4:80:50:6A
Certificate issuer: /CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Certificate serial: 019421B1E361BE4FAD508FB5CEC1E3D63EDF
Authority key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213098
IP address blocks: 185.222.20.0/24 maxlen: 24
188.72.42.0/24 maxlen: 24
188.72.43.0/24 maxlen: 24
194.34.11.0/24 maxlen: 24
195.62.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e3:61:be:4f:ad:50:8f:b5:ce:c1:e3:d6:3e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0c8ed4fd7bc43931ba4d7692b225af2b480506a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1e:1c:70:64:1a:99:5c:e7:18:cc:36:a6:4e:
77:37:1c:82:68:3c:77:8b:2d:db:c1:ae:f7:d9:2c:
10:3e:18:f2:11:53:75:a6:00:72:d7:73:5d:d3:16:
13:f2:27:99:48:b1:93:69:82:b1:79:f2:da:5b:a3:
72:6f:03:b7:d4:be:bc:3f:4b:29:6b:d5:f2:37:9f:
b2:fe:6c:8d:d8:63:40:f6:42:7f:4b:3c:7e:16:c1:
e4:93:8a:9c:d1:6b:42:26:c9:62:c4:6e:b9:32:c8:
90:ab:2b:b6:46:cc:5c:32:0b:62:71:4a:31:c9:ab:
bf:f0:d2:9b:6c:b8:85:b6:52:d9:15:86:ca:d7:3c:
18:b6:12:85:83:37:34:c5:8d:34:43:7f:b3:53:80:
ed:ab:99:68:63:70:83:1d:a5:c0:a5:98:ab:4c:b4:
cf:b9:73:7e:92:02:76:e0:c6:6b:e1:ff:9d:23:c0:
63:6e:ca:cb:de:41:53:28:2d:e8:de:50:a3:eb:0f:
4a:d1:36:7a:e2:be:69:49:f8:28:65:ec:9e:85:6d:
a6:d6:38:d5:4c:02:09:50:7e:80:8b:36:fe:67:5e:
90:48:55:65:b3:c1:10:c3:80:34:64:27:bc:ff:03:
5e:3d:0e:8d:c0:63:2c:76:ab:14:73:74:ee:2f:1e:
86:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C8:ED:4F:D7:BC:43:93:1B:A4:D7:69:2B:22:5A:F2:B4:80:50:6A
X509v3 Authority Key Identifier:
keyid:D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/wMjtT9e8Q5MbpNdpKyJa8rSAUGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.20.0/24
188.72.42.0/23
194.34.11.0/24
195.62.88.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d9:ce:44:51:73:8d:02:ce:a7:ba:39:3a:55:76:29:f7:28:
e3:1a:73:5c:f4:52:22:29:ef:a9:66:cd:f1:c3:5f:17:2e:d4:
de:1e:be:66:2f:fa:31:e0:34:d8:88:e3:e1:e9:7f:58:d7:fa:
bb:af:ac:dc:09:e1:e8:03:5a:39:32:b5:cc:65:31:1c:2f:08:
5f:ca:a1:6e:53:00:0a:70:73:a7:b3:a2:1a:d7:6e:df:d3:ae:
c6:15:f9:f0:88:66:00:1c:64:39:e0:04:b4:72:93:c5:03:7b:
a7:35:c9:dc:4c:80:c9:e9:61:82:3a:7e:c7:fc:b9:47:41:8d:
54:3b:9e:4a:3c:26:2b:55:3b:de:75:e3:ff:59:ae:9c:ac:5e:
6f:7d:c8:22:95:e6:f0:41:e3:2b:6a:c7:75:ec:1d:39:3a:69:
db:81:d4:98:42:36:9b:1c:5f:b9:9d:db:6a:19:a8:32:59:f2:
44:fc:47:6e:56:dd:b3:26:e3:ee:fb:48:e4:8c:30:f2:ee:ab:
eb:c4:82:da:e4:b5:de:68:e8:07:17:2f:e4:67:2c:c6:8b:90:
66:11:eb:33:fb:c0:4c:6f:e6:45:4d:97:7b:14:ca:02:39:fd:
f8:3a:b3:37:ba:55:15:c9:7d:ce:29:db:a5:46:c8:ca:bf:f2:
4e:48:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:23 2025 by rpki-client