Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wkDz4piEW6E8TjjPv3mOyqzv81A.roa
File: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (raw, json)
Hash identifier: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=
Subject key identifier: C2:40:F3:E2:98:84:5B:A1:3C:4E:38:CF:BF:79:8E:CA:AC:EF:F3:50
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 01942747B9302FCFD1ADFE84B145D6BD0C90
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wkDz4piEW6E8TjjPv3mOyqzv81A.roa
Signing time: Thu 02 Jan 2025 13:49:59 +0000
ROA not before: Thu 02 Jan 2025 13:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 80.252.160.0/19 maxlen: 19
93.189.240.0/21 maxlen: 21
94.136.64.0/19 maxlen: 19
94.136.71.0/24 maxlen: 24
185.165.80.0/22 maxlen: 22
2a01:6d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b9:30:2f:cf:d1:ad:fe:84:b1:45:d6:bd:0c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c240f3e298845ba13c4e38cfbf798ecaaceff350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:c5:18:c1:c0:d2:34:92:e2:8f:74:79:f7:
8e:8e:7b:43:aa:f0:50:1a:bb:85:d6:42:13:b5:8f:
4f:76:ed:b2:2f:a9:39:2a:1b:67:a2:f2:ef:fa:89:
ed:0b:0d:cc:28:67:34:00:59:17:b8:55:66:92:47:
79:60:fc:06:29:f6:db:14:0b:90:66:aa:f8:da:2b:
b5:1b:ad:ff:f7:1a:fc:e9:5e:1c:0b:7a:02:05:91:
97:6d:d5:3f:2f:14:22:e2:6b:5b:3a:3b:a5:cf:2b:
52:a1:a6:f1:39:25:a8:8e:5c:bb:e8:d2:e8:29:80:
06:33:e4:05:bb:fa:56:e5:cb:65:0f:84:46:4d:03:
f7:5b:42:74:57:cc:a0:14:a3:3a:a5:2d:e2:64:45:
76:7b:46:51:7d:37:f0:fc:80:b9:94:e7:6c:e7:9a:
3d:f1:6e:2b:04:3d:86:a2:3a:f1:06:ad:7f:3b:7f:
b4:d8:fa:f1:7e:23:e4:5b:95:44:dc:ba:42:c4:18:
19:46:eb:fc:e2:69:4a:6a:df:c6:f7:82:a4:74:11:
5b:0a:76:6d:4c:1d:c6:14:29:32:4b:6b:e4:d6:80:
3b:e3:ab:5c:8d:0e:01:59:dd:b4:03:10:6e:42:0f:
fb:61:71:89:05:26:36:a7:18:a6:05:5b:61:3b:e5:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:F3:E2:98:84:5B:A1:3C:4E:38:CF:BF:79:8E:CA:AC:EF:F3:50
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wkDz4piEW6E8TjjPv3mOyqzv81A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.252.160.0/19
93.189.240.0/21
94.136.64.0/19
185.165.80.0/22
IPv6:
2a01:6d0::/32
Signature Algorithm: sha256WithRSAEncryption
86:fa:05:d8:ee:a5:0f:15:cc:7b:02:4c:86:da:2e:de:28:ac:
8e:21:bb:09:31:4a:7d:5e:23:c7:e2:56:0a:c9:64:ec:6b:b3:
29:40:e2:b6:3c:87:16:98:d5:fc:a6:59:7f:d9:6d:61:8e:c0:
a5:33:4f:a1:ed:55:f1:17:e4:17:bd:73:1e:69:f5:d1:e5:c7:
68:44:d9:8d:80:c6:9b:1d:0f:a2:e4:75:39:75:b9:77:14:f6:
7c:f1:2a:2e:38:55:51:67:ff:24:6d:24:3a:99:bd:44:26:a3:
b2:5e:3d:01:7c:49:22:b1:de:41:e3:ce:eb:c6:c5:99:48:eb:
b6:cc:35:61:1f:aa:ee:cf:62:d5:52:cf:4f:7c:91:ae:67:eb:
d1:8a:9c:43:9e:a9:54:43:d4:8d:85:bf:e0:a7:0b:ee:85:a9:
04:13:30:9a:4a:e1:79:0f:85:78:3e:08:b0:52:2e:e6:a7:6d:
00:4a:52:c8:f5:f9:90:0d:58:c0:89:93:56:45:22:64:70:ea:
f8:1a:7e:d0:f6:24:95:fa:3e:d3:d5:ad:b1:7b:9c:9b:38:dd:
95:47:00:e8:ea:4a:36:cf:e8:1b:b8:9b:6d:ab:af:0c:47:c1:
25:0e:cf:b0:f0:f2:f2:a6:ee:32:ed:f6:c8:af:40:58:96:54:
74:0a:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:46:31 2025 by rpki-client