Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/wXM31OjkciEAlpEMjaTgfWzjXFg.roa
File: wXM31OjkciEAlpEMjaTgfWzjXFg.roa (raw, json)
Hash identifier: 8xtREta2zMiUqhNWY7P3R7XpgYZpRP5WhwRQaDvmQ1I=
Subject key identifier: C1:73:37:D4:E8:E4:72:21:00:96:91:0C:8D:A4:E0:7D:6C:E3:5C:58
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019529E363559178147A0227DE2F07F6FFCD
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/wXM31OjkciEAlpEMjaTgfWzjXFg.roa
Signing time: Fri 21 Feb 2025 19:02:02 +0000
ROA not before: Fri 21 Feb 2025 19:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 194.154.24.0/22 maxlen: 22
213.18.208.0/22 maxlen: 24
217.177.8.0/22 maxlen: 24
217.177.40.0/22 maxlen: 24
217.177.44.0/22 maxlen: 24
217.177.48.0/22 maxlen: 24
217.177.52.0/22 maxlen: 24
217.177.80.0/22 maxlen: 24
217.177.84.0/22 maxlen: 24
217.180.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:29:e3:63:55:91:78:14:7a:02:27:de:2f:07:f6:ff:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Feb 21 19:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c17337d4e8e472210096910c8da4e07d6ce35c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:54:c0:7a:77:1d:0d:7c:9e:3a:47:26:5d:
44:47:95:f0:60:5d:f1:68:30:c4:90:04:5d:79:81:
57:dc:da:30:9e:4a:61:6d:2b:cb:27:a9:7b:5c:60:
dc:be:cd:1f:21:a7:08:c2:68:81:8a:18:37:7d:4c:
a8:05:bf:1e:72:37:83:c0:60:c7:f6:1e:de:b2:5c:
b6:3f:f8:0d:02:4c:c6:45:01:02:be:c8:30:73:d2:
c0:88:3e:ce:88:d8:cb:53:e7:89:fd:c1:28:0c:0e:
8f:bc:09:13:f5:1b:ea:dc:84:a6:10:88:dd:bf:06:
4b:f8:21:d3:62:fa:15:80:5c:21:fd:1b:5e:29:1d:
c8:2c:ba:6a:c5:5d:22:13:e9:42:e6:95:fa:f3:13:
f1:de:d3:64:10:5d:e9:90:ec:47:b5:5f:ca:6d:51:
fc:43:3e:01:04:b3:1f:2c:95:b8:75:e1:cd:26:04:
1a:10:dd:30:d8:a1:a5:e7:c0:e8:03:6c:ba:dc:3f:
44:d0:90:0f:7f:20:4b:88:91:28:99:92:31:7a:89:
99:e7:2a:d1:fd:fa:f0:b7:ae:f5:f1:dd:87:50:f6:
ed:18:92:9f:b6:40:f6:bb:d2:2b:9b:65:88:41:c4:
12:2d:dd:d5:23:ad:a5:79:08:62:0e:03:bc:e7:86:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:37:D4:E8:E4:72:21:00:96:91:0C:8D:A4:E0:7D:6C:E3:5C:58
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/wXM31OjkciEAlpEMjaTgfWzjXFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.154.24.0/22
213.18.208.0/22
217.177.8.0/22
217.177.40.0-217.177.55.255
217.177.80.0/21
217.180.40.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:16:e8:96:ab:f7:d9:44:24:d7:62:05:cd:ba:9c:46:e7:6e:
f5:00:16:cf:8d:e4:66:57:ae:c0:87:74:52:07:aa:97:b1:ce:
2e:ea:a3:12:ae:2d:e5:38:22:eb:c9:ef:56:a0:ef:6d:0a:cf:
6c:fc:d6:40:56:73:9f:cf:2a:63:53:42:f8:30:75:2e:55:08:
12:ec:ce:03:dc:58:6c:43:c1:27:53:b8:bf:b0:be:3b:a0:3a:
3b:f6:8f:1c:b3:15:81:54:89:74:e2:06:16:7c:82:60:d9:db:
0f:41:00:c4:07:9e:2c:00:fd:1c:fb:b6:f1:4d:e3:b8:f3:c3:
8c:b7:36:23:7b:c0:48:a7:f1:4e:8d:34:69:91:9d:2b:38:86:
3a:0d:f3:31:fb:13:00:69:d0:78:4d:3e:23:f5:7a:07:5a:ac:
79:23:8d:31:10:e0:a1:b9:e7:ef:eb:47:98:2c:d9:86:cc:a4:
0c:ae:0a:a7:10:52:a6:8c:d9:cf:6b:6f:1c:23:27:74:0d:d1:
7a:29:28:43:07:bc:8e:77:06:73:14:6d:c0:4e:88:08:ee:67:
da:be:cc:b7:ab:fd:1a:40:dd:d7:54:cd:3b:dc:15:d1:5b:3f:
02:77:18:90:87:47:7b:50:1d:fd:0a:e4:22:f7:bb:c5:d5:a7:
30:bf:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:00 2025 by rpki-client