Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/wy1RBt9-FTDUKThwB6O8_c8fLfA.roa
File: wy1RBt9-FTDUKThwB6O8_c8fLfA.roa (raw, json)
Hash identifier: Fllwvy2h9OiyLGl6uM6ez626CNdcbz90U+OjeiGk5Os=
Subject key identifier: C3:2D:51:06:DF:7E:15:30:D4:29:38:70:07:A3:BC:FD:CF:1F:2D:F0
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 019425217726B88965A7AEE1340406C99E1A
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/wy1RBt9-FTDUKThwB6O8_c8fLfA.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34304
IP address blocks: 86.107.57.0/24 maxlen: 24
86.107.60.0/23 maxlen: 23
86.107.63.0/24 maxlen: 24
89.35.224.0/24 maxlen: 24
89.35.229.0/24 maxlen: 24
89.35.232.0/24 maxlen: 24
89.35.235.0/24 maxlen: 24
89.35.236.0/24 maxlen: 24
89.35.238.0/24 maxlen: 24
89.47.0.0/24 maxlen: 24
89.47.12.0/24 maxlen: 24
89.47.14.0/24 maxlen: 24
93.190.122.0/24 maxlen: 24
188.211.164.0/23 maxlen: 23
193.138.192.0/23 maxlen: 23
193.138.194.0/24 maxlen: 24
2a05:8880::/30 maxlen: 30
2a05:8884::/30 maxlen: 30
2a0f:55c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:77:26:b8:89:65:a7:ae:e1:34:04:06:c9:9e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c32d5106df7e1530d429387007a3bcfdcf1f2df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:45:79:fa:fa:a7:5e:c6:2d:46:93:2a:89:
ce:77:b1:32:cb:57:26:3d:61:e2:3b:33:9b:b2:e0:
28:a0:16:79:81:a9:75:02:8f:79:52:af:3f:2f:f0:
38:01:97:0a:9b:75:23:20:c5:65:e3:74:78:94:bc:
06:b5:8a:f7:8f:bf:8b:e8:2a:de:74:4c:fe:9c:a4:
c9:5e:c0:31:73:69:11:3b:54:9f:56:45:13:fc:49:
d2:8e:1b:f1:61:08:23:20:5a:7f:39:a3:df:36:ab:
39:4f:21:20:29:53:f8:38:98:59:45:96:d3:02:a4:
ac:ed:4d:21:a8:53:53:ba:4c:97:1a:02:23:bd:33:
fb:96:c7:52:aa:e4:2c:e1:42:e4:fa:1b:d0:42:c7:
a3:c4:59:a3:5e:f9:d3:08:81:60:67:9a:cf:ef:6a:
6e:89:09:97:df:87:44:76:29:1f:64:80:2a:77:19:
6f:53:c1:3f:97:69:16:65:c6:18:65:64:13:7b:71:
9a:f2:11:58:94:f3:14:6b:16:03:b1:61:61:42:12:
b4:7e:d0:d4:38:aa:68:71:42:ee:be:e3:f1:fc:ef:
6c:65:a6:ab:5d:0b:dc:83:e1:a0:5f:6f:09:c2:ec:
0b:6a:99:05:4d:5e:f8:85:f8:db:a3:f2:ce:e0:45:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2D:51:06:DF:7E:15:30:D4:29:38:70:07:A3:BC:FD:CF:1F:2D:F0
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/wy1RBt9-FTDUKThwB6O8_c8fLfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.57.0/24
86.107.60.0/23
86.107.63.0/24
89.35.224.0/24
89.35.229.0/24
89.35.232.0/24
89.35.235.0-89.35.236.255
89.35.238.0/24
89.47.0.0/24
89.47.12.0/24
89.47.14.0/24
93.190.122.0/24
188.211.164.0/23
193.138.192.0-193.138.194.255
IPv6:
2a05:8880::/29
2a0f:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:28:a6:61:07:ba:eb:2d:18:1c:fe:a6:0d:6a:d3:48:7d:09:
5d:78:0f:f7:95:b2:fb:aa:b7:5b:89:2c:4f:ce:11:b5:a9:a8:
a2:15:8d:da:6f:15:78:ef:eb:c5:d8:ad:52:30:9e:c9:69:c1:
f7:ad:ed:4a:b9:c7:70:56:6b:8c:9a:ff:12:41:b4:00:95:04:
4d:65:0f:9b:c7:35:14:40:33:a6:8c:4f:54:c0:45:91:31:36:
10:a8:24:e3:67:55:9d:90:67:31:45:5e:0f:70:ec:c4:64:29:
d0:ea:9f:56:4e:db:19:da:e7:db:2a:9e:73:43:52:54:bd:ce:
85:2e:d3:65:75:a4:e8:32:de:93:3e:67:0d:1b:62:48:e2:0f:
41:66:b8:e8:bc:c3:98:de:31:91:d7:dd:dc:3d:35:81:69:d9:
9a:fc:17:0c:e0:a9:84:1b:21:c4:d5:56:39:eb:96:54:57:fa:
e7:dc:2f:64:56:73:2b:30:c4:dc:a6:24:15:4d:ba:ea:86:c7:
a0:1f:25:c5:2a:f8:82:f0:34:c8:a2:4a:ad:c6:48:f7:30:01:
f4:7e:b0:7d:47:e0:d1:e0:41:6e:66:91:3b:c4:6f:a7:d2:68:
dd:e9:c1:69:2e:f0:05:9d:25:a8:e1:18:c9:f3:fc:9b:53:cc:
0c:79:fb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:34 2025 by rpki-client