Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/wk5e4hIcd56Z58a_bsc7eOFpvEo.roa
File: wk5e4hIcd56Z58a_bsc7eOFpvEo.roa (raw, json)
Hash identifier: rW3zDMHLagp1fBqXsKbxwNvVG019sDcCbQQDsBMyiNI=
Subject key identifier: C2:4E:5E:E2:12:1C:77:9E:99:E7:C6:BF:6E:C7:3B:78:E1:69:BC:4A
Certificate issuer: /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial: 019427B669F1B4AAC964F45FFD560FF3F162
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/wk5e4hIcd56Z58a_bsc7eOFpvEo.roa
Signing time: Thu 02 Jan 2025 15:50:53 +0000
ROA not before: Thu 02 Jan 2025 15:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 37.16.64.0/21 maxlen: 21
37.228.160.0/20 maxlen: 20
46.167.16.0/21 maxlen: 21
46.232.224.0/21 maxlen: 21
81.26.160.0/20 maxlen: 20
85.115.0.0/19 maxlen: 19
88.214.60.0/22 maxlen: 22
93.189.152.0/21 maxlen: 21
109.109.200.0/21 maxlen: 21
109.109.201.200/30 maxlen: 30
185.9.176.0/22 maxlen: 22
185.106.0.0/21 maxlen: 21
213.144.0.0/19 maxlen: 19
2a02:788::/29 maxlen: 29
2a02:788:1::18/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:69:f1:b4:aa:c9:64:f4:5f:fd:56:0f:f3:f1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Validity
Not Before: Jan 2 15:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c24e5ee2121c779e99e7c6bf6ec73b78e169bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:16:4c:17:47:39:59:f0:34:48:52:90:1f:
80:3a:fd:8b:e4:cd:c3:ca:2f:ce:c1:7a:e7:7b:e4:
f0:b7:34:87:d5:1f:f8:d6:ff:9d:53:fb:a8:30:48:
a6:1a:21:fb:45:3f:02:a2:44:5e:32:e3:27:a7:48:
0d:32:58:92:02:37:15:10:e6:eb:9f:10:71:56:9e:
2d:71:f9:54:78:20:bf:2d:59:c3:e9:36:ff:7d:a7:
90:f3:f7:51:06:99:f0:4b:f2:a9:56:33:25:22:02:
c0:87:44:28:8b:5b:5a:3f:09:7d:d8:c3:8a:58:6a:
6b:d9:b7:0b:d3:a0:d9:5d:7b:17:b1:90:39:a3:c4:
20:bf:3d:86:1d:85:08:12:45:7f:36:22:50:6f:6d:
18:47:85:ce:88:d5:53:e6:87:1f:df:e7:be:7e:ef:
dd:70:3f:e0:3e:cc:f8:2e:3f:28:e5:08:fe:4a:3d:
80:1f:4c:b6:32:55:df:98:74:08:3f:76:fd:ca:31:
5e:84:90:d0:c8:7b:ed:bc:9e:09:90:33:81:b3:25:
b8:05:94:38:ff:26:7c:39:a9:07:15:ea:eb:29:f3:
74:0e:e7:ec:86:02:8c:00:e2:18:86:6b:d5:15:50:
e9:71:42:6f:6b:6d:16:5a:d2:66:21:b2:f0:35:63:
99:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4E:5E:E2:12:1C:77:9E:99:E7:C6:BF:6E:C7:3B:78:E1:69:BC:4A
X509v3 Authority Key Identifier:
keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/wk5e4hIcd56Z58a_bsc7eOFpvEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.64.0/21
37.228.160.0/20
46.167.16.0/21
46.232.224.0/21
81.26.160.0/20
85.115.0.0/19
88.214.60.0/22
93.189.152.0/21
109.109.200.0/21
185.9.176.0/22
185.106.0.0/21
213.144.0.0/19
IPv6:
2a02:788::/29
Signature Algorithm: sha256WithRSAEncryption
91:91:b7:81:04:7c:37:9c:6b:2f:4c:b1:a4:59:b9:4c:8c:d0:
71:ba:77:72:04:45:22:6e:c4:ef:39:1c:d9:47:7a:42:53:f3:
c7:6b:bc:38:22:10:f6:e9:76:dd:a7:1f:75:ae:cd:9d:5d:f5:
77:15:6a:6e:22:05:f9:8d:16:e8:ef:57:3c:92:06:ec:39:52:
33:30:18:3d:e6:89:01:30:a6:86:e9:dc:1e:25:b4:40:45:b5:
2f:65:61:db:d0:81:bd:af:eb:73:fd:16:c7:fc:99:c6:72:b8:
af:3f:15:39:0f:71:ab:cd:d6:45:44:02:19:f4:60:cf:c8:5c:
b1:bd:e8:4d:6a:52:60:71:d6:a1:30:59:cf:92:dc:24:26:ef:
e6:73:dd:66:e0:6a:0e:be:14:cd:59:ff:83:06:48:9e:5e:50:
89:c9:17:4f:89:db:1d:e4:50:54:c5:2e:cb:6c:83:b4:95:bb:
bb:11:b1:81:93:64:63:90:72:13:d7:df:06:d4:3b:4c:36:cc:
b9:3a:93:75:9b:c1:dc:52:f5:c4:b7:23:e6:e9:a7:77:6b:38:
31:db:1d:fb:bd:fa:a0:5d:a1:15:20:9f:3b:86:c1:3f:e7:72:
9f:d0:02:27:bc:7e:b5:b2:a5:ab:2a:bb:7c:6f:bc:f9:86:ac:
94:11:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:05:45 2025 by rpki-client