Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/we3WmLsJsvw8GBFhs1qaYGVwVbQ.roa
File: we3WmLsJsvw8GBFhs1qaYGVwVbQ.roa (raw, json)
Hash identifier: LM0Vw0smpqWyB+iLsVFIQmWyp29hSe4LSMRB0WeaPi0=
Subject key identifier: C1:ED:D6:98:BB:09:B2:FC:3C:18:11:61:B3:5A:9A:60:65:70:55:B4
Certificate issuer: /CN=c7797819b245b16be0b47958f7e6abd8e83d099c
Certificate serial: 0AC27F27
Authority key identifier: C7:79:78:19:B2:45:B1:6B:E0:B4:79:58:F7:E6:AB:D8:E8:3D:09:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3l4GbJFsWvgtHlY9-ar2Og9CZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/we3WmLsJsvw8GBFhs1qaYGVwVbQ.roa
Signing time: Fri 03 Jun 2022 12:24:20 +0000
ROA not before: Fri 03 Jun 2022 12:24:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44451
IP address blocks: 93.92.8.0/21 maxlen: 21
185.152.72.0/22 maxlen: 22
94.247.48.0/21 maxlen: 21
37.46.16.0/21 maxlen: 21
2a0b:17c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180518695 (0xac27f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7797819b245b16be0b47958f7e6abd8e83d099c
Validity
Not Before: Jun 3 12:24:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1edd698bb09b2fc3c181161b35a9a60657055b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:8d:a1:ed:52:c7:ed:ae:2f:ec:24:cd:d2:
3e:e8:a1:75:07:bb:56:a6:e4:ee:17:7a:77:f0:f0:
fc:df:b3:b8:68:c3:4f:44:a3:fd:31:cd:83:c3:aa:
b7:c1:b8:b7:70:9a:2c:4b:5b:a5:45:5c:d9:2c:4a:
cc:28:be:9d:d7:fa:fa:13:9f:4d:5c:00:bf:94:bf:
45:c3:b3:23:24:70:ea:aa:96:85:0b:03:9f:de:c6:
81:95:1e:37:2e:30:f0:b1:13:c1:4f:de:85:71:b4:
f1:41:c5:b3:a0:78:1e:27:da:15:9b:16:01:0c:c0:
5f:f7:be:c8:1a:d5:6d:60:e5:7d:3d:b7:44:83:5b:
10:a7:3f:aa:2f:fa:04:2e:23:30:72:62:77:93:6d:
d1:4c:74:3c:c5:10:69:d1:04:c5:85:89:c8:67:39:
37:cc:62:fb:b8:c6:4f:b0:c8:42:9c:de:e3:7f:1a:
0c:0b:1e:a5:e7:00:86:df:c7:3e:d4:c1:e5:7a:55:
a8:ee:76:49:54:20:23:a1:60:be:38:97:be:35:25:
bf:fe:39:b6:5c:23:e3:ba:f8:9c:9d:4f:02:54:86:
98:c3:19:19:db:19:16:cc:8f:56:8f:ca:7c:82:6c:
68:71:43:84:88:3c:5e:38:44:33:7f:f1:11:ea:0c:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:ED:D6:98:BB:09:B2:FC:3C:18:11:61:B3:5A:9A:60:65:70:55:B4
X509v3 Authority Key Identifier:
keyid:C7:79:78:19:B2:45:B1:6B:E0:B4:79:58:F7:E6:AB:D8:E8:3D:09:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3l4GbJFsWvgtHlY9-ar2Og9CZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/we3WmLsJsvw8GBFhs1qaYGVwVbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a44d5f-6f10-44f4-bffb-b7f91fa6fbf2/1/x3l4GbJFsWvgtHlY9-ar2Og9CZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.16.0/21
93.92.8.0/21
94.247.48.0/21
185.152.72.0/22
IPv6:
2a0b:17c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:96:e1:c6:d9:bd:34:63:c8:a2:21:22:f0:d1:de:01:43:2a:
37:27:31:23:79:8f:03:85:cc:8f:6f:ff:ec:79:7f:42:ab:4d:
44:ab:57:a3:3d:f4:fe:43:c7:12:53:50:5e:ce:5f:d4:00:90:
7f:ce:89:5d:0b:e4:55:da:37:db:93:b9:00:a0:26:54:69:82:
80:1b:d1:19:5c:74:1b:d2:0c:23:d9:ad:45:92:36:7b:11:dc:
48:01:e2:70:22:7f:1a:36:cf:24:c9:7a:8d:bc:c3:b9:e0:31:
61:31:19:49:04:04:95:c8:38:51:fa:ea:4a:28:d3:e0:dc:3f:
ba:b6:81:8d:58:b1:29:e0:8c:41:de:dd:5c:02:db:33:bb:3e:
d9:5c:60:57:56:aa:3d:c2:3e:f6:86:9a:2e:be:16:62:32:44:
15:89:92:61:5f:7a:ac:b6:c9:70:75:fe:8c:c6:b5:47:f1:e8:
df:eb:04:61:2d:66:5c:ee:5e:03:80:65:92:1a:7b:ae:23:97:
e9:e6:cf:f4:77:05:0f:b3:16:14:e7:24:24:94:cf:c1:61:ab:
66:24:44:2c:4d:c6:27:8c:53:59:f3:ad:d4:c0:40:be:46:d6:
e9:1d:61:94:81:b5:39:f2:fc:23:6c:e5:5c:1d:1e:14:f6:8a:
85:55:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:55 2025 by rpki-client