Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/wG1qFolwcBGtOkZ-f90re3N6fos.roa
File: wG1qFolwcBGtOkZ-f90re3N6fos.roa (raw, json)
Hash identifier: DSVUG942WMoq+u7pxis2vBh8oy2PvhoVVnD6wt/x71I=
Subject key identifier: C0:6D:6A:16:89:70:70:11:AD:3A:46:7E:7F:DD:2B:7B:73:7A:7E:8B
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 0184855A63A0481D6242C895A34893E57B5F
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/wG1qFolwcBGtOkZ-f90re3N6fos.roa
Signing time: Thu 17 Nov 2022 11:30:04 +0000
ROA not before: Thu 17 Nov 2022 11:30:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31472
IP address blocks: 185.91.41.0/24 maxlen: 24
185.91.40.0/22 maxlen: 22
185.60.4.0/22 maxlen: 22
149.19.176.0/22 maxlen: 22
195.206.184.0/21 maxlen: 21
185.86.20.0/22 maxlen: 22
185.34.80.0/22 maxlen: 22
185.61.88.0/22 maxlen: 22
37.157.48.0/21 maxlen: 21
185.2.76.0/23 maxlen: 23
185.2.76.0/22 maxlen: 22
2a00:b840:1::/48 maxlen: 48
2a00:b840::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:85:5a:63:a0:48:1d:62:42:c8:95:a3:48:93:e5:7b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: Nov 17 11:30:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c06d6a1689707011ad3a467e7fdd2b7b737a7e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f0:39:ed:f8:84:48:8c:97:53:3d:f8:93:6e:
8d:09:2e:f3:15:53:e6:42:6e:95:78:06:2b:15:c3:
cc:96:fb:e3:0c:46:95:c0:5f:cc:84:37:20:ac:0b:
54:7e:24:da:1d:b9:33:48:77:26:06:13:bb:e9:e0:
b4:19:7f:64:c1:2f:3f:bb:b2:7b:28:ce:5c:89:f9:
9b:34:90:f7:8b:99:bb:b0:e6:4c:8a:cd:da:97:49:
7b:db:1f:ce:e8:4c:83:d2:0d:be:37:05:e0:99:df:
01:5a:5d:6a:5c:f3:31:be:11:d4:06:ee:ce:e9:f5:
12:5f:1a:6b:8f:9c:3c:eb:09:eb:e8:df:20:99:f9:
04:f7:42:57:3f:6a:1f:72:66:a8:dc:69:2f:ac:13:
41:b3:26:0b:fe:6c:80:f6:0c:21:5e:32:dc:ae:49:
6c:b9:1b:b3:50:44:84:17:4a:d8:6f:bb:47:6f:9e:
b1:24:fc:0f:96:5b:1c:fa:6d:b8:00:0b:49:5b:6a:
64:97:18:7b:27:13:19:de:99:5a:58:2a:d7:dc:e0:
76:fd:3c:ec:33:6a:a9:7e:4d:25:51:b4:5b:64:2d:
6c:b8:d2:20:33:a9:e8:58:c6:f7:37:80:ad:4b:5f:
10:b9:66:ec:02:70:9c:c9:7e:e6:cb:93:7f:61:a0:
8f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6D:6A:16:89:70:70:11:AD:3A:46:7E:7F:DD:2B:7B:73:7A:7E:8B
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/wG1qFolwcBGtOkZ-f90re3N6fos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.48.0/21
149.19.176.0/22
185.2.76.0/22
185.34.80.0/22
185.60.4.0/22
185.61.88.0/22
185.86.20.0/22
185.91.40.0/22
195.206.184.0/21
IPv6:
2a00:b840::/29
Signature Algorithm: sha256WithRSAEncryption
45:62:36:29:e5:2c:0d:45:f0:e2:75:b8:ed:86:16:25:bc:0a:
d8:dd:a2:24:ef:7f:42:fb:d1:8a:93:e9:8d:1c:10:4d:5a:bf:
23:b4:4e:ec:d4:0c:0f:95:a4:1a:cc:82:34:87:0d:f9:dc:27:
44:02:60:73:8b:17:fe:86:c5:ef:fb:09:f7:e2:43:80:12:f5:
50:a9:4e:a9:05:3d:b6:51:05:4f:8c:47:7c:d4:6c:6b:2d:06:
f6:d7:7f:c0:e3:ca:91:12:8d:8f:2b:d8:c7:00:ab:58:8e:c8:
2a:0a:d9:f6:a8:3c:35:ea:43:6d:72:fd:c1:c2:6d:e5:49:2b:
3d:e0:7d:c4:cf:79:9f:6f:33:59:3b:42:cb:d1:c8:91:63:f0:
eb:4b:95:5c:98:1e:d0:1a:33:0d:a9:b8:88:08:a2:af:1a:46:
6b:f2:22:7c:1b:01:7e:cf:6f:6c:94:d7:a0:09:43:e4:c9:ec:
fe:65:11:e6:7d:fd:f2:f5:bb:58:38:d3:18:66:14:cd:43:e5:
96:56:31:94:59:97:87:e0:67:c4:c9:6a:1c:cb:ce:fd:b1:d2:
af:24:a1:e1:58:a3:79:b7:11:37:f1:ca:cd:25:13:8f:57:68:
01:22:d2:3f:b2:96:54:f4:f5:a6:04:04:c6:8f:08:86:26:0b:
02:2f:7b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:45:36 2025 by rpki-client