Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/gZ9Ojc4UNWeqqwMBpp7FrP10wiI.roa
File: gZ9Ojc4UNWeqqwMBpp7FrP10wiI.roa (raw, json)
Hash identifier: LB2ZQVKXYnVtOl1GjrynJ1NY20hqhQVioGRUarT0MgI=
Subject key identifier: 81:9F:4E:8D:CE:14:35:67:AA:AB:03:01:A6:9E:C5:AC:FD:74:C2:22
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 0194221F7E3BE49E46128A7BA1205B1E8D51
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/gZ9Ojc4UNWeqqwMBpp7FrP10wiI.roa
Signing time: Wed 01 Jan 2025 13:47:56 +0000
ROA not before: Wed 01 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33930
IP address blocks: 45.15.212.0/22 maxlen: 22
80.75.152.0/21 maxlen: 21
91.223.207.0/24 maxlen: 24
93.187.40.0/21 maxlen: 21
185.56.204.0/22 maxlen: 22
194.6.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7e:3b:e4:9e:46:12:8a:7b:a1:20:5b:1e:8d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819f4e8dce143567aaab0301a69ec5acfd74c222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:34:d3:54:be:8b:10:f8:93:7c:e5:97:ad:
e7:05:d6:c0:96:21:10:65:76:a1:60:e2:38:6c:9e:
dd:a6:5d:ad:f2:37:e8:4c:36:c9:7b:b9:e8:fe:57:
9c:93:d5:58:bb:90:18:39:cb:19:ed:76:f7:19:20:
ca:8c:46:af:5a:d2:91:12:49:f3:c3:67:7a:43:a1:
1d:31:1d:ff:07:70:66:67:84:cb:ba:12:ad:41:57:
af:c6:86:5c:49:41:35:bd:62:fd:a9:3b:1a:02:9d:
ac:15:c4:32:fa:3a:b2:56:b6:76:de:2c:5f:a5:23:
97:25:99:c3:9f:a6:a5:42:bb:a8:29:8f:9d:6d:cd:
27:b3:76:b8:54:10:81:8d:fc:5a:c4:7c:9a:d7:f5:
7b:7e:52:76:13:03:91:e9:cf:b4:39:71:6f:a1:ec:
77:b4:24:5e:cd:84:67:7a:99:5b:86:d8:b4:99:7b:
63:df:50:4d:1f:e7:84:fd:85:f6:92:cc:9c:a7:23:
42:b2:55:28:25:bd:46:5c:5a:fb:ac:02:c4:8d:02:
17:99:95:42:2c:4b:8d:a5:73:f7:8e:e5:bd:bc:a5:
4a:43:42:af:51:8c:be:c3:a7:4b:c0:b1:fa:e5:f0:
a5:68:a1:31:38:47:63:b0:4a:d2:50:82:fa:06:39:
81:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:4E:8D:CE:14:35:67:AA:AB:03:01:A6:9E:C5:AC:FD:74:C2:22
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/gZ9Ojc4UNWeqqwMBpp7FrP10wiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.212.0/22
80.75.152.0/21
91.223.207.0/24
93.187.40.0/21
185.56.204.0/22
194.6.240.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5c:8b:57:bb:1d:6d:36:6e:73:5e:c3:7d:5d:8c:a8:c7:a3:
59:10:5f:bc:1b:1e:c9:ef:93:40:b6:86:98:ea:8e:3a:c3:94:
eb:e4:81:54:57:13:e8:01:ce:1c:2c:45:18:ae:52:21:33:a9:
a8:c1:19:6b:2e:0d:33:e5:f9:95:b8:e8:8a:ae:e3:4c:6a:b7:
d7:76:76:24:f0:21:65:92:66:73:11:60:92:62:03:09:51:7a:
dd:10:2f:71:f5:18:19:85:59:dd:49:20:f0:36:eb:3b:94:1a:
5c:15:64:1f:ad:c0:00:dd:44:dc:65:ea:5a:e2:32:a3:33:b4:
d4:da:f9:e5:3a:8c:e3:81:d2:c9:eb:ed:69:75:aa:38:cb:4c:
3b:4b:90:65:31:f0:af:1a:0c:a7:b9:fb:ef:d2:f0:06:e4:8d:
a3:98:15:5d:d7:01:1c:77:4b:5a:cb:cc:6e:5f:ac:90:b2:6e:
3f:28:1a:2b:1b:3e:ed:a9:68:60:5f:33:8f:78:12:cd:a8:a1:
6a:61:8b:5d:be:40:ed:9a:99:ba:3f:22:d0:fd:7a:3e:45:68:
07:fc:66:9d:50:cf:f3:fe:8e:b0:ab:ed:60:40:48:88:88:73:
ff:2c:8f:60:f8:0b:7d:25:a4:00:b5:08:b4:42:3f:01:45:95:
33:6c:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:37 2025 by rpki-client