Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/wZlxL67WLzX5pGa8n1agszoK1xc.roa
File: wZlxL67WLzX5pGa8n1agszoK1xc.roa (raw, json)
Hash identifier: 1WuGE1PhCylMEcbcrsL7MtSG58/ynaMg5R26KIeDkyk=
Subject key identifier: C1:99:71:2F:AE:D6:2F:35:F9:A4:66:BC:9F:56:A0:B3:3A:0A:D7:17
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 019425FD8A64CD3836DDE4920813356E2B75
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/wZlxL67WLzX5pGa8n1agszoK1xc.roa
Signing time: Thu 02 Jan 2025 07:49:20 +0000
ROA not before: Thu 02 Jan 2025 07:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 94.72.248.0/21 maxlen: 21
159.253.66.0/23 maxlen: 23
178.78.106.0/23 maxlen: 23
178.78.108.0/22 maxlen: 22
178.78.112.0/21 maxlen: 21
178.78.120.0/21 maxlen: 21
213.249.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:8a:64:cd:38:36:dd:e4:92:08:13:35:6e:2b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 2 07:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c199712faed62f35f9a466bc9f56a0b33a0ad717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:1b:57:23:09:85:1d:5f:17:83:64:c6:e1:
42:b7:9d:83:2f:58:9d:8c:77:b6:a6:d3:fe:6a:b8:
41:bd:db:89:cb:91:eb:cc:e9:7d:55:bf:4f:23:40:
85:5d:d2:df:d2:ac:f0:e7:68:41:2d:e5:57:b2:3b:
80:32:b5:00:7e:b3:31:27:2f:1b:7c:44:64:93:dd:
64:f0:aa:f1:5a:14:0a:ff:8a:c9:32:81:bd:97:4a:
40:8b:4a:df:5f:05:c1:cc:10:18:ef:96:51:01:6b:
ab:3d:67:21:61:5f:e8:9b:f1:7c:bd:19:66:5c:2d:
ef:7f:c9:a0:25:f9:d8:8b:5f:b3:d6:f4:a8:9e:e9:
0e:5e:7b:29:ba:b3:15:3c:1e:e9:8a:00:c8:44:47:
7e:39:15:4e:2e:e2:f7:f5:e7:4f:83:de:77:28:db:
67:b1:fa:c8:a3:db:4a:bf:7f:5b:38:38:42:e5:1a:
c7:bc:73:be:dd:87:1d:2d:39:31:ce:25:8e:35:e7:
03:98:93:53:71:17:43:8e:05:79:a8:9c:d9:af:8b:
ff:78:67:ae:4e:54:2f:b8:25:b7:d7:1c:74:31:a9:
79:31:a0:fa:c2:1a:f7:be:f1:12:69:1e:5b:1c:91:
05:4f:5a:ab:ab:49:f0:2f:4c:54:05:73:6f:84:35:
c5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:71:2F:AE:D6:2F:35:F9:A4:66:BC:9F:56:A0:B3:3A:0A:D7:17
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/wZlxL67WLzX5pGa8n1agszoK1xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.248.0/21
159.253.66.0/23
178.78.106.0-178.78.127.255
213.249.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ec:1b:94:67:4d:1f:67:48:e3:60:bb:b0:f6:4e:93:4a:09:
42:1d:f5:63:97:66:f3:6b:8e:f0:6a:73:ac:c2:36:b1:dc:49:
9a:ee:39:a6:29:e4:38:56:cc:c3:2e:ea:dc:77:7e:63:ae:ef:
00:74:a5:cf:c7:43:3e:e0:37:05:a4:78:d8:c2:23:23:ea:0c:
46:a0:42:82:6f:18:83:9f:25:45:16:72:9c:bb:1e:06:6a:f1:
3b:db:18:bd:8e:d0:b5:83:df:ef:f1:40:be:4e:51:cd:71:5b:
d1:8a:0b:28:2d:31:28:23:e3:dc:e3:0f:71:da:70:5d:4c:46:
f1:e8:13:8d:4e:e0:fc:83:29:8e:dc:f8:5c:d3:80:aa:d9:8f:
f7:6f:37:bd:8f:62:c8:ac:25:ff:c8:ed:5f:ac:14:d3:aa:e4:
77:45:ba:d0:8f:4b:44:05:41:0a:a0:73:84:0e:42:81:60:40:
8f:24:38:1d:c8:60:bc:7a:7f:13:08:33:1e:a8:18:bf:04:ef:
ef:37:de:fc:68:5c:a5:f3:4f:2c:dd:cf:73:ee:2d:8a:90:2f:
b4:f2:64:5a:ec:c6:14:3f:29:9f:45:3c:b9:af:78:a6:6f:62:
de:be:b8:0c:27:7c:6b:7d:22:6e:20:7d:66:fc:9e:96:5a:cf:
e2:0e:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:39 2025 by rpki-client