Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/94wGpzC6dKW4wCyBuNwgbCmu0YI.roa
File: 94wGpzC6dKW4wCyBuNwgbCmu0YI.roa (raw, json)
Hash identifier: HmlUsbHYgnjwmvm0Ep06MITWSKS8pcY785u7DkFvmwU=
Subject key identifier: F7:8C:06:A7:30:BA:74:A5:B8:C0:2C:81:B8:DC:20:6C:29:AE:D1:82
Certificate issuer: /CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Certificate serial: 01941FFA490DB057DAEE805C5388C5A85741
Authority key identifier: 34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/94wGpzC6dKW4wCyBuNwgbCmu0YI.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 88.84.64.0/19 maxlen: 24
95.142.0.0/20 maxlen: 24
185.117.176.0/22 maxlen: 24
217.15.32.0/20 maxlen: 24
217.149.144.0/20 maxlen: 24
2a02:2068::/29 maxlen: 48
2a02:206a::/32 maxlen: 32
2a02:206b::/32 maxlen: 32
2a02:206d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:49:0d:b0:57:da:ee:80:5c:53:88:c5:a8:57:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34f47b73ee8fbedd25f41b3b17b2be08f5bf6563
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f78c06a730ba74a5b8c02c81b8dc206c29aed182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:ac:25:f0:80:ea:9b:b9:48:27:18:dc:7a:
6d:d7:fc:65:4a:1c:d0:f9:ea:d7:1a:51:15:e9:38:
c9:ec:d1:16:58:ad:97:0b:f8:52:b5:4b:6c:88:93:
70:b8:bf:6d:ce:ff:f9:eb:20:8a:b6:32:d5:f2:fd:
f0:d9:2e:2e:df:e5:59:b4:a6:c5:37:c0:0e:70:11:
ff:36:40:57:30:aa:af:36:5a:29:1d:fa:cb:12:c0:
36:73:74:d5:fa:65:21:a7:01:79:e9:42:f9:eb:25:
eb:6a:4e:b9:69:be:5a:5e:b4:27:d7:b5:53:39:8f:
0f:47:f1:fb:83:53:51:24:58:15:6c:f1:e3:0b:d8:
d7:21:b2:a3:7f:cc:af:a2:cb:55:69:46:e8:c0:ea:
90:84:af:0e:50:44:4f:e8:b5:b7:c8:5a:81:f1:61:
60:80:db:a3:1f:7a:ee:a5:6a:7d:1e:5e:b0:5c:0f:
40:3a:6e:5f:e0:36:57:91:5a:91:69:10:b8:4f:4b:
46:7e:c7:d3:5e:f4:8d:d9:aa:5d:8f:c6:38:84:2b:
57:42:97:f3:5d:44:0f:ff:01:00:e2:32:ea:bb:c3:
a0:1c:41:24:88:7c:f8:9d:50:41:d2:fc:c7:97:43:
99:ca:ef:1b:66:f6:88:e9:70:a0:88:95:43:ab:a5:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8C:06:A7:30:BA:74:A5:B8:C0:2C:81:B8:DC:20:6C:29:AE:D1:82
X509v3 Authority Key Identifier:
keyid:34:F4:7B:73:EE:8F:BE:DD:25:F4:1B:3B:17:B2:BE:08:F5:BF:65:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/94wGpzC6dKW4wCyBuNwgbCmu0YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0fc5c9-4ec6-4df6-82c4-d87e4047f853/1/NPR7c-6Pvt0l9Bs7F7K-CPW_ZWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.84.64.0/19
95.142.0.0/20
185.117.176.0/22
217.15.32.0/20
217.149.144.0/20
IPv6:
2a02:2068::/29
Signature Algorithm: sha256WithRSAEncryption
62:2c:99:f8:5e:e3:27:93:c1:39:8f:f7:3a:ca:f9:97:1c:1b:
76:00:86:de:4c:91:dd:38:11:c4:ef:3f:49:1e:68:93:f6:bf:
c9:f4:51:43:b5:56:3c:30:5d:66:b4:8d:3d:48:40:6d:62:71:
bb:8a:a2:ba:1e:13:b6:61:2d:54:b0:92:36:14:fd:81:1b:0b:
42:b5:78:a5:e7:fe:e3:cc:ae:62:f6:9b:bc:cd:67:45:bf:8f:
74:0a:6e:ed:0a:6e:4e:6c:be:63:53:0a:24:f1:a4:8c:05:a1:
31:08:17:c8:52:3c:98:de:97:ad:00:41:3c:89:fc:5c:78:96:
60:4e:cb:e6:18:75:63:2e:b1:6a:0a:02:b2:c1:a3:18:08:28:
bc:a4:fb:d2:f5:c8:0d:30:c6:e8:62:7a:87:f1:0e:d2:0a:f4:
6a:4f:3b:d5:6c:df:52:87:ff:91:2c:d4:98:e7:72:00:44:83:
31:83:e6:7e:59:b0:a2:7b:4c:86:35:b6:27:d6:ba:e4:48:3d:
c7:72:0f:40:de:3d:58:68:02:6a:2d:4c:ac:37:ae:75:df:66:
cf:f0:28:0b:62:4c:d8:19:b6:0c:08:73:2e:79:08:b2:52:75:
b1:a3:87:bd:46:81:13:73:0a:34:42:7f:7a:8a:0e:ff:f4:42:
44:3d:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:25 2025 by rpki-client