Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa
File: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (raw, json)
Hash identifier: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=
Subject key identifier: C3:4F:86:25:53:3F:EC:AE:A7:F1:CC:FA:73:CA:95:D1:92:0A:7A:49
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 0194258FC735AF9FE469732E5B57B5CB0B7A
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa
Signing time: Thu 02 Jan 2025 05:49:27 +0000
ROA not before: Thu 02 Jan 2025 05:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56828
IP address blocks: 31.25.216.0/21 maxlen: 21
83.118.128.0/18 maxlen: 18
91.186.64.0/19 maxlen: 19
185.84.36.0/22 maxlen: 22
2a05:ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c7:35:af:9f:e4:69:73:2e:5b:57:b5:cb:0b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Jan 2 05:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c34f8625533fecaea7f1ccfa73ca95d1920a7a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:22:42:e6:8f:ca:e0:d6:e9:38:a2:0b:3d:
eb:e5:38:22:b2:c6:38:03:19:c6:0c:f1:0d:96:5c:
1a:ad:56:18:60:84:f5:c0:70:1e:67:fa:31:db:e1:
49:77:16:4c:e8:30:30:5f:6e:f8:0b:d8:4d:2f:f6:
e4:ea:51:97:c6:41:08:cb:d1:29:fc:8f:23:a7:ff:
3f:51:09:e1:0b:e6:59:38:91:1b:10:93:8e:26:43:
b7:14:1b:90:5c:cd:b2:da:d5:1a:03:8f:47:7e:ef:
88:8a:c8:58:4c:04:aa:76:66:66:f4:b5:10:54:a8:
60:3f:7e:26:dc:bc:5e:37:d9:3f:02:28:87:c8:5c:
93:af:db:b3:a5:fe:b0:27:2a:28:f3:e7:ec:67:dd:
1e:b4:ac:ef:0a:85:9c:c9:ee:85:2a:d9:ac:cf:bf:
19:cd:6b:13:38:71:8d:d7:bc:72:f2:bc:0b:d2:54:
9f:9f:a2:42:f5:e6:3c:f9:3c:2f:18:21:3b:2b:2b:
53:3e:a0:1d:bb:a4:35:63:0f:06:61:fa:98:05:ed:
31:11:cf:83:39:45:b4:49:00:1e:ae:e6:11:e6:ae:
b3:f0:54:9e:3e:10:f0:e6:76:91:ce:3b:38:34:f4:
76:b7:64:1e:20:92:d7:6e:d7:b7:a8:b2:cf:2e:72:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:4F:86:25:53:3F:EC:AE:A7:F1:CC:FA:73:CA:95:D1:92:0A:7A:49
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.216.0/21
83.118.128.0/18
91.186.64.0/19
185.84.36.0/22
IPv6:
2a05:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
4b:46:c7:04:30:b8:47:92:fa:7e:18:3c:1d:ff:b2:ff:f4:db:
91:53:cd:3c:ae:4c:1b:c6:06:45:e2:84:62:dc:2c:32:2a:13:
48:d0:54:a6:84:c6:9b:91:50:db:c6:f8:2d:29:39:56:c5:65:
ab:17:7c:dc:e6:00:af:be:95:bd:ca:58:74:d4:cb:c6:6b:49:
07:39:10:87:22:2d:b2:73:84:55:ac:bc:f6:b1:63:cf:c8:13:
9e:69:48:e9:d5:f3:ea:3d:41:77:16:23:5b:4a:a6:29:a8:3a:
f5:58:6c:52:18:a7:5e:4f:3c:70:1a:fd:fe:d7:25:b0:31:6c:
52:64:d6:ec:7f:f1:54:a1:3f:95:e0:20:bd:0c:01:89:2a:52:
c3:a1:85:78:5d:c7:51:fa:3e:e2:6d:55:35:f4:10:5a:49:f6:
62:74:bc:e9:9c:64:27:15:6f:ef:7d:3d:96:17:fe:05:0d:36:
40:04:34:2c:c2:30:32:d2:b0:5b:48:7e:a9:6d:be:41:02:dc:
41:fa:d2:fb:7a:b6:62:57:77:73:61:e3:d6:9f:94:3b:eb:42:
a3:a9:02:3b:f5:fb:ad:58:c3:1a:3f:0d:56:0c:37:fa:9f:4d:
02:bb:6a:ca:67:5a:ef:73:3a:81:6e:37:d2:aa:c9:0a:e5:c9:
e6:5c:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:20:12 2025 by rpki-client