Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa
File: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (raw, json)
Hash identifier: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=
Subject key identifier: C0:19:86:29:71:CD:F0:CD:DC:EC:E0:4A:CB:1B:91:4D:4E:E5:04:B0
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0194266B5D0DF7929C6FD51ADD11280BEE7F
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa
Signing time: Thu 02 Jan 2025 09:49:17 +0000
ROA not before: Thu 02 Jan 2025 09:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49040
IP address blocks: 78.108.244.0/24 maxlen: 24
78.108.245.0/24 maxlen: 24
78.108.246.0/24 maxlen: 24
83.222.160.0/24 maxlen: 24
83.222.167.0/24 maxlen: 24
83.222.170.0/24 maxlen: 24
83.222.172.0/24 maxlen: 24
109.160.56.0/24 maxlen: 24
109.160.59.0/24 maxlen: 24
109.160.85.0/24 maxlen: 24
109.160.87.0/24 maxlen: 24
109.160.88.0/24 maxlen: 24
109.160.89.0/24 maxlen: 24
109.160.90.0/24 maxlen: 24
109.160.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5d:0d:f7:92:9c:6f:d5:1a:dd:11:28:0b:ee:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 2 09:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c019862971cdf0cddcece04acb1b914d4ee504b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:a6:75:eb:39:94:ef:b2:76:7f:0e:73:e5:
79:b0:c8:e3:c7:da:fb:a1:d7:5f:8f:7b:4e:56:52:
47:ee:0c:74:de:7c:36:f6:ff:1b:01:7a:21:ab:96:
b7:95:47:a6:f9:44:6c:47:4a:bb:9d:cf:1f:44:82:
46:dc:17:27:f5:41:1a:46:e2:6e:10:55:4c:e7:e2:
f7:0f:47:23:d7:56:6c:7f:8c:be:4a:cf:11:49:55:
b5:2a:d3:3e:04:7c:df:e2:d6:95:2a:5b:9c:81:b4:
4b:00:50:bd:ca:20:b6:87:c0:3a:1d:d2:e7:6b:e7:
88:da:2a:7a:59:4c:3e:ed:78:c9:12:53:3c:c8:15:
33:ba:a0:f5:0f:0b:ba:ef:42:37:40:2c:4d:6b:66:
a9:f4:c6:25:a6:9c:e4:a7:38:1e:d7:50:85:01:d6:
ea:3e:bd:ae:33:71:81:50:ad:58:51:98:3f:39:e0:
ea:d1:e1:1f:fe:81:52:d1:74:a8:a6:39:5c:0e:79:
54:74:a0:9b:a6:fb:18:fa:c7:85:11:a5:9b:96:52:
3a:ff:62:c6:c2:d4:e7:53:5d:99:3a:40:6a:1a:24:
3c:e2:e3:c1:42:14:0e:01:c1:c0:66:95:d9:30:37:
1d:68:f0:6a:bc:fb:fe:a1:f9:cd:e2:55:20:0c:cc:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:86:29:71:CD:F0:CD:DC:EC:E0:4A:CB:1B:91:4D:4E:E5:04:B0
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.244.0-78.108.246.255
83.222.160.0/24
83.222.167.0/24
83.222.170.0/24
83.222.172.0/24
109.160.56.0/24
109.160.59.0/24
109.160.85.0/24
109.160.87.0-109.160.91.255
Signature Algorithm: sha256WithRSAEncryption
67:76:f3:ff:09:8f:0b:e7:5c:62:7b:ad:b5:95:69:33:f3:d4:
f6:54:e7:8f:ec:0b:59:d4:75:0c:b1:09:5c:a3:b6:77:c8:cd:
a0:28:76:7d:64:f4:98:64:18:58:0d:57:6d:3a:68:7b:74:74:
1a:42:d6:03:72:d7:41:ba:23:c3:fb:9e:b2:50:40:67:77:a2:
45:43:73:c3:26:1c:51:b8:e8:42:0b:68:a4:2e:c5:d8:ed:7d:
93:c9:53:63:c8:4c:0e:1b:9c:e3:e3:cb:a0:33:e6:34:9d:d0:
1c:0a:ba:a6:1b:9f:61:71:24:2a:6a:02:23:e1:94:5a:b9:9c:
ae:64:94:72:64:a5:25:0c:6f:ab:3a:38:9b:6c:93:22:ce:dc:
fa:6a:40:36:1c:40:cc:a2:0f:98:65:67:ae:82:e1:2a:e8:87:
c8:fd:50:05:37:9f:c7:72:ba:78:34:60:ed:df:4e:36:bc:e8:
f7:a5:6b:3f:1c:76:5c:fc:1e:f4:a8:50:dd:73:ac:4a:7e:07:
db:b6:21:67:59:1c:74:80:79:97:11:ee:81:ff:39:3c:68:e2:
79:f0:cc:a4:82:b1:42:19:aa:a0:c5:76:6f:dc:35:15:77:70:
b3:6c:d1:c0:3e:ac:fd:2a:a5:71:5e:62:fc:96:5a:49:dc:24:
04:49:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:10 2025 by rpki-client