Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/wIuWmKQqKRafTdpQCAjgZGdOwSg.roa
File: wIuWmKQqKRafTdpQCAjgZGdOwSg.roa (raw, json)
Hash identifier: FSZWMB16h9Z2ZEIxjWe18pWkdzeyGtdch3JRTJHt/gU=
Subject key identifier: C0:8B:96:98:A4:2A:29:16:9F:4D:DA:50:08:08:E0:64:67:4E:C1:28
Certificate issuer: /CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Certificate serial: 0194266B7167371F76FCECA18E26E4F619ED
Authority key identifier: D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/wIuWmKQqKRafTdpQCAjgZGdOwSg.roa
Signing time: Thu 02 Jan 2025 09:49:23 +0000
ROA not before: Thu 02 Jan 2025 09:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61121
IP address blocks: 91.212.151.0/24 maxlen: 24
185.18.4.0/22 maxlen: 24
185.18.4.0/23 maxlen: 24
185.18.4.0/24 maxlen: 24
185.18.5.0/24 maxlen: 24
185.18.6.0/23 maxlen: 24
185.18.6.0/24 maxlen: 24
185.18.7.0/24 maxlen: 24
2a03:f1c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:71:67:37:1f:76:fc:ec:a1:8e:26:e4:f6:19:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8073d06b58652f849fa8bcf3cec6b950909bd68
Validity
Not Before: Jan 2 09:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c08b9698a42a29169f4dda500808e064674ec128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:09:19:62:a2:80:66:b5:d0:4b:ec:94:f5:
15:34:34:ad:75:a6:37:3d:e3:59:43:70:6f:d1:9c:
ed:f1:7e:43:75:06:a8:ec:9d:cd:69:08:34:5e:00:
0c:d7:86:3c:a3:f0:1a:0d:48:d7:66:89:58:d3:42:
f1:56:4c:b5:79:76:0b:aa:ad:26:a2:03:5c:9e:da:
09:35:59:5d:70:1a:93:b0:8b:46:d6:26:a1:5f:43:
9b:91:64:cb:82:ac:ef:b0:f5:00:f2:2d:6f:93:d1:
81:a9:38:45:55:f2:7a:54:b3:df:71:74:57:b9:8c:
75:1e:fd:73:5c:9d:e6:24:4f:79:3c:91:20:e4:68:
8b:46:d6:a0:56:a6:73:65:4c:9f:dc:ee:ac:20:21:
d7:a0:2d:e1:73:21:ed:a9:0f:44:03:a3:e1:8e:68:
e9:7e:b5:52:98:36:a4:9b:da:b0:30:7f:1f:4a:0e:
4a:4a:e3:15:8d:32:31:8f:bb:58:15:95:3d:62:6b:
8a:2e:b6:9d:94:31:6c:15:00:2d:fc:e2:b0:73:d3:
33:08:f4:dd:c9:06:fd:80:0b:a1:88:63:7c:33:93:
58:a8:b3:41:97:0e:65:bb:fa:4e:70:80:68:36:5d:
37:c4:54:a6:d5:35:9a:f5:73:6c:2c:c5:9c:6c:e7:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8B:96:98:A4:2A:29:16:9F:4D:DA:50:08:08:E0:64:67:4E:C1:28
X509v3 Authority Key Identifier:
keyid:D8:07:3D:06:B5:86:52:F8:49:FA:8B:CF:3C:EC:6B:95:09:09:BD:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/wIuWmKQqKRafTdpQCAjgZGdOwSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/721920-939b-412b-a3c5-2329d79c4ae3/1/2Ac9BrWGUvhJ-ovPPOxrlQkJvWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.151.0/24
185.18.4.0/22
IPv6:
2a03:f1c0::/32
Signature Algorithm: sha256WithRSAEncryption
b1:84:30:7c:82:b1:0b:40:88:a2:be:e4:59:5e:78:9e:c1:0a:
80:d2:8d:9c:80:fe:e5:d8:eb:d4:6c:97:97:fe:5f:4b:9a:6b:
3c:15:4b:78:1a:fe:81:0c:96:63:fe:1d:51:63:a7:93:28:04:
dd:03:fa:09:01:fd:4f:c1:7c:85:ce:e5:87:fe:c6:be:63:29:
f9:92:a7:92:57:1c:41:f1:0f:32:3c:46:c2:d3:08:18:18:15:
3e:5a:aa:d3:b9:04:54:4a:e8:e7:66:8b:75:2c:ea:b5:cf:ad:
2d:87:e0:6f:59:af:6e:c0:81:c0:21:e1:fc:91:e2:b2:5e:4e:
04:b6:2d:1b:6c:90:cd:1f:a1:c5:87:0b:a2:ec:9a:35:01:4c:
50:64:36:64:6b:d5:3d:9b:08:8a:50:99:4c:37:cc:67:92:c5:
e6:5e:d7:f0:9d:42:a5:fd:3d:4f:ed:55:9e:4d:c0:fd:43:2a:
c2:df:3d:16:64:3f:fa:4c:84:21:a7:77:ec:47:0e:cf:82:92:
66:f4:4f:8c:fe:a2:32:40:c4:1c:11:52:06:3e:21:d4:72:a8:
26:c2:1f:6d:eb:44:2e:fe:f1:ed:71:6b:1e:5f:d1:bc:36:99:
a5:09:09:e5:5b:b3:e7:79:c2:10:2d:c5:49:b4:ee:b7:7c:27:
f3:68:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:24:32 2025 by rpki-client