Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/1ZViwBwJWukG7x8H8vOJHhjrl20.roa
File: 1ZViwBwJWukG7x8H8vOJHhjrl20.roa (raw, json)
Hash identifier: +aEN4SwtP07CGGNGf2sl0Ng37swdYqF9I3PWCaVNvKY=
Subject key identifier: D5:95:62:C0:1C:09:5A:E9:06:EF:1F:07:F2:F3:89:1E:18:EB:97:6D
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 0195846A64DBC7A621903F5CFCB1273E34AF
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/1ZViwBwJWukG7x8H8vOJHhjrl20.roa
Signing time: Tue 11 Mar 2025 08:55:19 +0000
ROA not before: Tue 11 Mar 2025 08:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 84.247.110.0/24 maxlen: 24
89.149.15.0/24 maxlen: 24
89.149.42.0/24 maxlen: 24
89.149.43.0/24 maxlen: 24
89.149.44.0/24 maxlen: 24
89.149.45.0/24 maxlen: 24
89.149.46.0/24 maxlen: 24
89.149.47.0/24 maxlen: 24
89.149.48.0/24 maxlen: 24
89.149.52.0/24 maxlen: 24
89.149.53.0/24 maxlen: 24
89.149.56.0/24 maxlen: 24
89.149.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:6a:64:db:c7:a6:21:90:3f:5c:fc:b1:27:3e:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Mar 11 08:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d59562c01c095ae906ef1f07f2f3891e18eb976d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:3c:ed:dd:51:90:42:0c:a3:b0:84:33:62:
dd:32:16:73:3d:9d:d3:6c:06:26:18:b5:7b:9f:92:
e3:1d:06:db:d9:ab:af:16:95:13:62:85:c4:4b:5b:
56:ae:63:8c:b6:df:64:11:2d:aa:cc:6e:ae:47:76:
83:b9:33:6d:2d:31:51:ee:68:9b:90:49:41:de:01:
20:f6:f1:14:52:d5:c3:04:4d:97:40:77:38:45:b3:
99:f7:79:c3:31:12:24:e4:4b:7b:47:8c:a4:4c:86:
5c:71:c5:0a:49:b0:64:a3:40:6d:17:a2:70:92:12:
53:bf:58:39:29:8f:54:59:26:c8:5d:a9:ee:df:a2:
1a:91:2a:2d:ba:81:c3:11:b4:e1:10:28:fd:3b:5d:
02:27:91:e1:bb:4d:00:c3:de:87:50:09:4d:0f:c6:
db:79:09:be:c0:25:70:f3:30:b1:f2:27:2a:3f:1e:
41:9d:96:2b:7a:5b:e1:9b:7b:88:48:e1:03:cd:4c:
aa:52:ed:cf:b4:e6:69:d0:c4:ab:f6:81:2c:36:7a:
aa:8e:05:8f:71:6e:f6:8f:bd:87:c1:49:27:83:0b:
f0:ba:71:59:14:66:1c:17:d1:05:38:43:27:41:5a:
54:f8:b5:d4:bd:9a:27:62:42:31:89:77:b8:72:a6:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:95:62:C0:1C:09:5A:E9:06:EF:1F:07:F2:F3:89:1E:18:EB:97:6D
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/1ZViwBwJWukG7x8H8vOJHhjrl20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.110.0/24
89.149.15.0/24
89.149.42.0-89.149.48.255
89.149.52.0/23
89.149.56.0/24
89.149.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b6:99:49:58:00:27:35:f0:59:48:9f:f3:97:57:34:23:3c:
7b:83:a5:f5:09:c1:d9:c9:c3:b3:4f:8f:06:01:04:9c:53:25:
49:e4:56:e2:b4:f2:7c:6e:71:95:4f:f3:30:7f:51:87:8e:a1:
f7:ed:95:6e:ec:6a:3c:8d:62:52:95:7c:2d:5b:e6:45:30:65:
8c:58:15:b6:c3:fa:72:c8:d0:85:5c:05:61:1f:d1:7f:44:97:
fd:2f:cc:be:c2:08:08:87:a7:0b:0f:d1:67:fe:7b:a2:fc:d1:
05:db:22:f9:b2:fd:18:25:06:f5:07:a4:f9:6b:cb:b6:da:4f:
1e:ad:91:2c:a1:14:bc:2d:39:d9:24:e8:be:e0:b7:1a:76:74:
e3:96:c7:c3:aa:2b:99:db:87:4e:6c:ff:ff:19:1b:a9:e6:94:
8d:a0:4c:00:4f:46:b1:f7:7a:49:7c:0f:8f:1b:06:c0:7a:ef:
2f:e8:5a:ca:04:9a:c9:36:7c:09:3c:a7:bb:99:36:d9:8d:58:
42:02:2f:25:bd:17:cb:a7:b7:01:0f:a0:82:1b:7e:b8:35:15:
7d:dd:f5:3b:8a:e7:f1:fe:74:3d:84:ab:d7:20:9a:de:4d:ab:
46:ca:8a:49:bb:be:2f:13:6a:61:13:0d:d4:b5:bb:c7:50:b0:
08:29:8d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:10:56 2025 by rpki-client