Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/9-WaE-0W0C2-xi69gzYkMuedaqE.roa
File: 9-WaE-0W0C2-xi69gzYkMuedaqE.roa (raw, json)
Hash identifier: Ni4kAgTOQryp0q8v6aKfDPP/yXNeK1dLp1wIlpBqk+8=
Subject key identifier: F7:E5:9A:13:ED:16:D0:2D:BE:C6:2E:BD:83:36:24:32:E7:9D:6A:A1
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 0193ED80C7813E51C9EEA87D718EFC59031C
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/9-WaE-0W0C2-xi69gzYkMuedaqE.roa
Signing time: Sun 22 Dec 2024 08:34:20 +0000
ROA not before: Sun 22 Dec 2024 08:34:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 46.35.160.0/19 maxlen: 24
79.110.120.0/21 maxlen: 24
80.95.16.0/21 maxlen: 24
93.152.234.0/23 maxlen: 24
93.175.244.0/22 maxlen: 24
95.158.128.0/18 maxlen: 24
151.252.192.0/20 maxlen: 24
185.18.228.0/22 maxlen: 24
185.40.164.0/22 maxlen: 24
212.21.128.0/19 maxlen: 24
2a00:e200::/32 maxlen: 48
2a0d:3b40::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ed:80:c7:81:3e:51:c9:ee:a8:7d:71:8e:fc:59:03:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Dec 22 08:34:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e59a13ed16d02dbec62ebd83362432e79d6aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bb:a9:c6:6b:a4:2a:34:5a:14:3a:59:14:0a:
48:34:fe:21:e7:a8:34:46:8a:c7:4c:8b:c1:db:eb:
cc:85:0b:14:e8:65:41:82:a0:ff:ba:99:78:5d:eb:
aa:4d:2c:10:5a:89:db:60:7b:fa:e4:01:95:c6:62:
76:84:f5:83:88:e8:e4:06:41:7a:68:3a:02:96:2e:
c6:44:f1:d5:0b:1d:d5:bd:7f:d1:84:16:d0:1d:1d:
47:4b:72:3f:d9:d9:56:09:0a:e9:b6:a0:b6:ba:54:
d4:34:d4:64:34:51:63:69:eb:12:dc:2d:69:a8:32:
bc:18:9f:48:a2:50:3d:fb:86:8b:6c:b9:2e:19:0b:
b2:40:29:8e:1d:1c:7f:69:6e:d1:28:ff:94:f0:d3:
a4:5b:da:3f:78:11:9b:2a:67:a1:83:bc:2c:5b:e6:
60:25:2e:8e:f8:6b:9b:f7:81:b9:f0:1a:76:19:8c:
cf:42:19:d0:58:80:c7:6c:4c:0d:9c:cd:fe:d7:9a:
77:b0:80:60:0e:c3:4f:00:bf:1d:f1:8a:8f:26:dd:
fc:20:91:41:8a:5e:8c:ee:bd:b2:c8:0c:88:5b:c8:
47:a9:3f:d7:63:52:c2:1f:78:ce:b3:97:ad:6a:5b:
99:81:d1:2b:1f:b5:82:f2:3b:b4:d1:62:ec:30:9d:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E5:9A:13:ED:16:D0:2D:BE:C6:2E:BD:83:36:24:32:E7:9D:6A:A1
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/9-WaE-0W0C2-xi69gzYkMuedaqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0/19
79.110.120.0/21
80.95.16.0/21
93.152.234.0/23
93.175.244.0/22
95.158.128.0/18
151.252.192.0/20
185.18.228.0/22
185.40.164.0/22
212.21.128.0/19
IPv6:
2a00:e200::/32
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
27:97:e7:8c:df:43:fc:43:bb:68:63:0d:5c:5c:7a:bf:98:2f:
ba:9f:35:24:1a:9c:f4:96:ce:31:77:5f:27:3c:8f:16:f0:b7:
04:b9:bf:b9:50:c6:16:ea:b2:ca:eb:b8:5d:f8:67:bb:14:b6:
de:60:2f:f7:71:89:08:08:ef:a8:03:92:7b:8f:df:ed:83:c2:
1a:18:00:7e:c7:1e:83:95:70:e7:13:65:7d:58:d7:77:62:35:
8e:b2:8c:08:ba:92:c2:e1:8b:e2:51:38:fd:9b:e2:1e:c6:f5:
eb:ad:16:fb:fd:ea:99:5d:4a:dd:86:98:9f:f6:14:be:2d:10:
f3:34:1b:31:08:12:7f:d9:7f:5d:5d:5f:12:68:54:92:00:1d:
b8:27:7d:2d:a8:37:75:f8:98:6c:c9:cf:93:95:6d:fd:40:d4:
55:98:47:f9:39:cf:87:47:dc:d8:44:2b:a9:be:5a:4b:c7:41:
de:fc:4c:6e:47:d0:14:c9:ec:4c:1a:e6:95:d2:13:f1:e0:df:
12:98:51:3b:9e:43:24:e6:f5:e3:06:c1:8a:56:16:ed:19:cc:
df:dc:b8:bf:2b:25:d2:4e:b7:e4:81:d2:c4:18:e1:69:f5:e5:
ee:f8:4e:b6:c1:89:eb:e6:a0:c6:5a:cd:09:fd:88:5b:b7:fe:
33:7e:b6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:29 2025 by rpki-client