Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/W0y-zOIi1-67OubMNwYseTI2YtY.roa
File: W0y-zOIi1-67OubMNwYseTI2YtY.roa (raw, json)
Hash identifier: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=
Subject key identifier: 5B:4C:BE:CC:E2:22:D7:EE:BB:3A:E6:CC:37:06:2C:79:32:36:62:D6
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0194258F823BFF5CCC20C5D6AEF42BCF81F6
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/W0y-zOIi1-67OubMNwYseTI2YtY.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8068
IP address blocks: 94.245.84.0/24 maxlen: 24
2a01:111:2003::/48 maxlen: 48
2a01:111:202c::/48 maxlen: 48
2a01:111:202d::/48 maxlen: 48
2a01:111:202e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:82:3b:ff:5c:cc:20:c5:d6:ae:f4:2b:cf:81:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b4cbecce222d7eebb3ae6cc37062c79323662d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:7e:bf:3c:fd:f6:35:12:17:53:c9:a6:0e:84:
51:b6:47:c0:2e:15:b0:8f:20:fd:0a:87:c9:f4:36:
ab:10:12:bd:6d:93:63:10:df:27:d6:79:d1:9c:20:
c5:c0:ff:79:60:4d:bb:44:c4:ef:3b:a3:89:18:9d:
cf:8a:53:08:92:16:c5:b9:18:74:d3:0d:66:fd:79:
cf:2b:63:ba:27:be:fe:ef:2f:7e:e7:5a:0f:53:72:
4c:80:5d:e1:25:2d:74:73:20:31:f1:cd:10:ef:8b:
df:d7:a4:fb:5f:07:e5:be:90:f3:e7:c4:41:f5:3e:
bb:f4:56:36:d8:14:e3:38:47:23:11:4c:6d:96:34:
90:74:5a:83:2a:be:01:c0:f0:3b:1b:f7:79:e9:b7:
30:0c:da:4a:33:15:bf:a0:06:35:51:66:54:48:c8:
11:d0:68:bc:ec:2c:43:11:4a:17:5a:54:65:a9:16:
4d:c4:a6:9c:26:d7:bf:39:9e:04:d0:7e:1a:a5:65:
08:51:68:c0:be:00:7e:f2:af:3f:60:16:27:f5:27:
21:b0:9f:19:7d:cd:bf:3d:2b:44:7d:bf:05:f5:5a:
5c:fe:d3:8c:5c:58:b5:09:49:7e:a5:7f:92:8a:5a:
17:0c:42:1b:7b:1d:91:88:ff:80:5a:2a:68:11:2a:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:BE:CC:E2:22:D7:EE:BB:3A:E6:CC:37:06:2C:79:32:36:62:D6
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/W0y-zOIi1-67OubMNwYseTI2YtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.245.84.0/24
IPv6:
2a01:111:2003::/48
2a01:111:202c::-2a01:111:202e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9d:e3:d6:b1:a8:0b:57:b6:ff:1e:4f:30:c6:f1:c7:c4:30:4c:
dc:c5:00:e2:92:08:f9:20:26:23:cc:61:c0:d1:fa:d0:23:49:
db:05:62:eb:12:db:92:60:fc:f0:e8:bc:ed:b5:32:a3:0f:a6:
74:0d:5a:c3:82:ff:3a:f5:b9:26:62:02:4c:d8:50:cc:bc:17:
b2:eb:b6:cf:01:7e:7b:f5:37:58:1c:4d:0d:98:16:d0:b6:2e:
ab:d5:39:08:fa:b4:d9:0f:41:c1:9f:c1:c5:ea:e6:dc:76:fe:
dc:13:c8:96:41:54:2d:93:6a:ee:e5:ab:49:22:af:69:81:91:
23:37:71:59:6c:98:24:fb:79:62:67:e5:12:74:ef:c7:13:b2:
94:21:78:d5:dd:6d:21:0b:65:e2:40:5e:b0:e6:36:f8:83:08:
40:c0:a0:dd:f4:38:ee:41:76:65:d3:aa:a5:5f:b2:20:88:36:
41:8e:34:ba:12:04:62:0a:63:fa:06:fa:5f:eb:54:e5:86:af:
90:c9:f0:11:4b:69:0f:de:85:62:60:0e:94:dc:c2:71:1a:fb:
5e:fb:d7:b6:85:3d:77:7a:81:89:b4:46:cf:05:47:c5:df:65:
ad:bd:c6:ec:3e:f4:c9:1c:5a:cd:aa:ce:e2:b7:92:42:50:c5:
36:d4:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:53:30 2025 by rpki-client