Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Wlf4qwTGfd_1ToCYtpuQV2e4K8A.roa
File: Wlf4qwTGfd_1ToCYtpuQV2e4K8A.roa (raw, json)
Hash identifier: 9JQS+aElObvUBSyfS9FYlSLe8xy1JjU1izhaiDX62nY=
Subject key identifier: 5A:57:F8:AB:04:C6:7D:DF:F5:4E:80:98:B6:9B:90:57:67:B8:2B:C0
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194221FFDB97CF6DAB58F13FD460B28034F
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Wlf4qwTGfd_1ToCYtpuQV2e4K8A.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 45.139.68.0/23 maxlen: 24
45.150.80.0/23 maxlen: 24
80.91.221.0/24 maxlen: 24
95.214.38.0/24 maxlen: 24
95.214.39.0/24 maxlen: 24
193.36.162.0/24 maxlen: 24
193.36.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fd:b9:7c:f6:da:b5:8f:13:fd:46:0b:28:03:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a57f8ab04c67ddff54e8098b69b905767b82bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e6:8f:e2:5b:9c:8c:74:ac:70:1d:6a:90:88:
b8:75:8c:59:8e:4e:4c:60:f3:fa:52:ae:ca:d9:d0:
9f:68:2b:0a:90:17:d6:ce:85:6e:21:78:8a:77:1f:
43:ba:5d:bf:a0:16:13:85:32:97:90:7c:71:7a:96:
5b:36:65:bb:bd:95:2a:00:89:53:7d:5f:1f:00:d7:
a1:f4:25:2d:98:36:18:d5:7a:96:f5:27:40:2e:fd:
15:06:0e:0d:6c:4a:ea:7b:c0:ff:86:c8:36:d7:76:
83:e6:3e:68:a7:25:59:f8:5f:58:1d:b6:7c:1b:fe:
ee:6b:68:dc:f6:d6:6f:d5:cc:7b:10:d6:82:a5:b8:
f6:45:56:0e:ca:04:c0:54:47:4b:f8:3f:1a:e1:03:
65:88:f7:f1:fd:32:59:ee:66:f4:f0:3d:dd:7a:33:
5e:4b:45:8f:03:a9:ac:bb:98:aa:ed:f0:fa:46:ff:
de:4a:83:95:a2:d4:cb:a7:98:c6:04:af:cf:2d:80:
bb:73:2b:28:4a:67:ec:15:c0:63:70:db:cf:2a:65:
75:b7:76:8c:72:10:49:79:b4:4a:96:b4:90:7f:b4:
7f:0d:12:3b:a7:21:a4:e7:65:6f:1e:67:70:83:80:
96:42:99:05:f2:ed:a5:8a:99:f0:9f:35:0c:6b:5c:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:F8:AB:04:C6:7D:DF:F5:4E:80:98:B6:9B:90:57:67:B8:2B:C0
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/Wlf4qwTGfd_1ToCYtpuQV2e4K8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.68.0/23
45.150.80.0/23
80.91.221.0/24
95.214.38.0/23
193.36.162.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:5f:ab:bb:ff:28:a8:1c:c7:f1:07:42:64:06:32:35:59:42:
52:2e:88:00:9d:28:2a:b9:22:32:7f:31:8e:d2:78:88:04:f8:
10:2d:ea:9a:ad:f7:3b:51:9f:f2:ad:1a:30:c9:0a:70:ca:03:
83:55:44:2b:54:aa:cd:12:a3:29:39:6f:82:83:20:e1:9c:f1:
e3:07:d5:63:7a:a5:4e:e7:69:a0:5b:e3:fe:39:26:3a:70:57:
83:b3:b6:45:6b:3c:5f:8c:3b:ab:91:07:2e:ee:1f:4c:bc:21:
8b:3b:ef:a1:c2:9f:17:6e:1f:96:ab:ac:ea:aa:ac:94:64:cb:
03:34:27:b4:52:27:d0:19:65:70:64:e5:5f:0f:fa:73:0c:fc:
1b:07:84:48:c3:cd:ca:c6:d6:22:8b:55:7d:bf:3a:d0:e4:56:
2a:2e:90:96:8e:6e:65:16:25:02:09:cc:07:78:5f:d0:46:a0:
e7:4c:ef:47:c6:c8:6d:77:a9:e3:88:ee:11:32:41:83:f8:e7:
c5:31:25:04:58:da:79:3c:45:1d:bf:aa:34:d2:a5:2f:84:3f:
0b:5d:06:63:ce:1c:61:53:22:98:60:f4:db:1a:31:6b:9e:59:
2c:85:c4:9a:59:d6:09:90:7d:88:1d:5b:09:da:ba:8d:f6:89:
e8:74:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:36 2025 by rpki-client