Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa
File: gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa (raw, json)
Hash identifier: Ti/CZSFOtoIaq484ozrtbBvj7jlxko/Yt5KtEt0muLk=
Subject key identifier: 81:64:E6:B5:58:71:EC:4D:1C:48:62:4C:59:B8:74:29:D9:15:24:B9
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 019423699D1306D04A22AC99993E43F29FC6
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa
Signing time: Wed 01 Jan 2025 19:48:31 +0000
ROA not before: Wed 01 Jan 2025 19:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136258
IP address blocks: 92.243.80.0/24 maxlen: 24
185.90.61.0/24 maxlen: 24
185.93.173.0/24 maxlen: 24
185.192.124.0/24 maxlen: 24
185.196.61.0/24 maxlen: 24
188.214.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9d:13:06:d0:4a:22:ac:99:99:3e:43:f2:9f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8164e6b55871ec4d1c48624c59b87429d91524b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e4:28:f0:fd:80:54:76:a6:cd:e0:16:2a:8e:
95:01:12:ce:59:a2:aa:ce:17:da:35:1e:b5:20:a8:
e7:f3:f3:cf:12:ed:95:36:42:06:d8:8d:85:05:a3:
a5:d0:6e:05:a7:aa:ad:cd:0d:d6:1b:44:55:14:b9:
47:40:16:4c:2a:6f:d8:16:08:17:54:94:59:ad:f8:
b7:fe:20:d2:89:51:8c:c5:83:9d:97:61:08:df:aa:
da:00:1d:e9:2f:bf:96:5b:f0:89:2a:0e:e5:3c:b2:
39:74:03:df:4f:71:01:62:73:a9:5d:4f:69:a7:3f:
ff:1c:26:37:f5:38:1a:2e:40:68:22:80:11:9f:61:
26:48:93:a1:94:69:c6:d5:04:33:df:f9:3c:e0:60:
5e:75:95:80:22:9a:37:27:a6:86:ab:75:5b:1e:fd:
7d:fe:91:83:92:0f:fa:7c:22:e0:30:ef:eb:91:92:
42:d7:2b:54:50:2d:09:07:cd:f1:35:2c:2f:11:65:
97:fb:90:8b:84:1b:0c:52:bf:43:59:dc:13:f2:25:
15:fc:45:78:81:a2:bb:2d:cf:3f:79:76:aa:89:60:
04:8d:f9:a1:f6:ba:0a:7e:41:94:38:f4:94:15:bb:
0a:34:22:0f:82:75:7a:4b:05:80:6a:d9:75:67:45:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:64:E6:B5:58:71:EC:4D:1C:48:62:4C:59:B8:74:29:D9:15:24:B9
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/gWTmtVhx7E0cSGJMWbh0KdkVJLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.80.0/24
185.90.61.0/24
185.93.173.0/24
185.192.124.0/24
185.196.61.0/24
188.214.157.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:57:22:8e:56:14:20:81:90:52:e7:da:3f:3f:9a:15:6e:ec:
13:b5:e5:c7:50:8b:02:40:aa:14:8a:7f:21:78:80:6f:50:35:
e0:41:20:a4:c4:e4:fd:0d:d9:f7:f6:da:20:26:12:24:5f:d8:
51:ba:d9:5c:a8:ec:2e:07:ed:43:13:a9:97:cf:22:ea:67:6f:
09:04:51:4b:a5:a8:1a:bc:65:08:e8:bd:61:42:79:45:9f:23:
55:18:45:2d:22:a0:f2:25:de:83:63:bd:b3:b3:34:7b:0a:2c:
e9:57:6d:ed:1d:60:cf:8b:b6:71:a6:c3:ee:9e:fa:9f:6a:87:
3d:5b:c6:8e:11:6f:cc:74:48:df:ee:bd:0a:dd:1a:38:90:35:
ce:94:c9:a1:cb:b2:2c:37:fb:6f:67:72:21:84:fe:9c:1b:d4:
6b:de:e4:5b:16:8d:48:85:fc:38:ac:82:4f:d8:10:17:5d:0d:
17:ee:7d:00:49:32:2e:c0:48:08:53:07:0c:5d:5f:02:18:8c:
58:d6:9a:e7:cb:cc:8f:47:29:30:d5:34:41:a9:69:27:1e:61:
62:a3:a8:2a:ff:39:0d:73:a5:89:aa:11:7d:33:8f:aa:00:43:
22:0b:9e:f3:d3:af:c3:8a:92:15:1c:13:3b:84:4a:2f:42:be:
20:49:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:20 2025 by rpki-client