Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/4WEE6M8dthgW-fAXTbXKabGLlL0.roa
File: 4WEE6M8dthgW-fAXTbXKabGLlL0.roa (raw, json)
Hash identifier: Vz/LsTTjIy8GCO6P/Fc6vDeS0OdzaRulpb9xjUaoVO0=
Subject key identifier: E1:61:04:E8:CF:1D:B6:18:16:F9:F0:17:4D:B5:CA:69:B1:8B:94:BD
Certificate issuer: /CN=3680651aba066b4084a7ed20d7f5201b2296c197
Certificate serial: 0194206803C2F95640C95F6FE62F1DE9C64B
Authority key identifier: 36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/4WEE6M8dthgW-fAXTbXKabGLlL0.roa
Signing time: Wed 01 Jan 2025 05:47:54 +0000
ROA not before: Wed 01 Jan 2025 05:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35725
IP address blocks: 89.33.32.0/21 maxlen: 21
89.33.48.0/21 maxlen: 21
178.138.0.0/16 maxlen: 16
178.138.0.0/18 maxlen: 18
178.138.1.0/24 maxlen: 24
178.138.32.0/22 maxlen: 22
178.138.36.0/24 maxlen: 24
178.138.38.0/24 maxlen: 24
178.138.39.0/24 maxlen: 24
178.138.40.0/23 maxlen: 23
178.138.42.0/24 maxlen: 24
178.138.43.0/24 maxlen: 24
178.138.62.0/24 maxlen: 24
178.138.63.0/24 maxlen: 24
178.138.96.0/22 maxlen: 22
178.138.96.0/23 maxlen: 23
178.138.98.0/23 maxlen: 23
178.138.104.0/24 maxlen: 24
178.138.126.0/23 maxlen: 23
178.138.192.0/23 maxlen: 23
178.138.194.0/23 maxlen: 23
193.104.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:03:c2:f9:56:40:c9:5f:6f:e6:2f:1d:e9:c6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3680651aba066b4084a7ed20d7f5201b2296c197
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e16104e8cf1db61816f9f0174db5ca69b18b94bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:64:85:17:40:d8:38:c2:cb:6b:b7:5c:49:
26:22:d3:7c:db:a8:00:ab:7b:b1:5d:27:1e:f8:7d:
0b:8d:c0:93:48:1b:94:27:0c:3c:32:64:c1:3a:d0:
ec:a4:74:0f:77:83:e8:00:bd:12:91:7f:cb:b1:80:
5d:99:f6:0b:54:be:27:b3:07:0e:ce:d0:4c:e6:fb:
31:ad:42:18:10:fa:a1:46:75:1a:d7:30:8b:5e:af:
a8:c1:b0:64:47:a4:40:03:58:fb:0a:00:79:68:d9:
ac:33:71:fc:37:9a:e4:5e:48:5e:cc:9f:53:0f:dd:
b8:dc:9e:30:91:85:95:7a:1d:7e:4a:5c:a3:96:a8:
9a:aa:05:3d:a3:f2:9c:55:3a:63:59:78:3a:40:1a:
2c:87:6f:5c:69:b7:a1:b1:16:d9:ba:f2:e1:45:78:
41:d6:5b:06:38:1f:37:0c:fd:a9:c6:dd:a7:b8:e9:
51:c6:c7:91:75:e5:f2:25:01:6f:22:72:b8:c0:d8:
e2:c5:e6:51:0c:89:38:1c:26:a6:e9:69:0c:de:72:
bd:0f:a2:c6:d4:b3:77:fb:70:8c:17:25:5f:c3:8f:
1c:29:72:2d:92:3e:2a:9c:f3:f5:61:b1:dc:d8:86:
f0:04:89:ac:c4:04:9a:00:61:21:e2:ad:67:4c:05:
5a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:61:04:E8:CF:1D:B6:18:16:F9:F0:17:4D:B5:CA:69:B1:8B:94:BD
X509v3 Authority Key Identifier:
keyid:36:80:65:1A:BA:06:6B:40:84:A7:ED:20:D7:F5:20:1B:22:96:C1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NoBlGroGa0CEp-0g1_UgGyKWwZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/4WEE6M8dthgW-fAXTbXKabGLlL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d10b94-4105-45e2-a707-5224cf13f586/1/NoBlGroGa0CEp-0g1_UgGyKWwZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.33.32.0/21
89.33.48.0/21
178.138.0.0/16
193.104.247.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9e:65:4b:ca:21:af:e8:77:8c:ff:82:43:6f:e9:d3:14:d0:
76:fc:6d:4d:38:3c:98:6b:e2:c5:b5:dc:3d:2b:3b:18:f9:e9:
12:9f:d7:c2:2e:f9:d1:f1:d2:58:ed:a1:5c:6a:20:1e:c9:d3:
14:09:20:f0:da:f4:9d:da:26:3b:91:90:35:3e:a0:55:f6:51:
1a:41:db:52:21:c9:e1:5b:1e:a8:e2:0f:8a:cf:8b:22:d7:e5:
af:39:f2:3e:64:15:f1:ad:fb:c8:b4:5f:a0:1f:ae:fe:71:e7:
41:56:48:4a:a3:4c:dc:3b:7d:fc:a4:92:0f:0c:40:d8:93:89:
45:0f:f2:30:30:dd:b3:7d:62:c1:69:e7:92:dc:79:d8:c7:38:
0a:0b:bf:79:19:25:0f:c1:d4:d9:8a:18:33:77:dc:82:e1:ab:
f9:52:ff:42:3c:36:c7:a0:ec:0f:95:22:1d:63:64:9b:07:d4:
92:6e:be:b6:15:e9:3a:91:84:97:e3:32:cd:46:7b:7a:b0:3c:
4a:40:8b:b2:64:95:ef:ce:4b:cd:97:e8:72:29:01:b3:6f:cd:
bb:c8:4e:cd:7a:92:42:5e:b8:ff:58:90:e0:92:41:51:76:b0:
bd:0c:16:34:25:57:11:26:8b:59:0a:d6:c1:bc:87:bc:02:20:
6b:0f:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:42 2025 by rpki-client