Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/wHe63tLHFMK7NBW2SYijpGxUNgM.roa
File: wHe63tLHFMK7NBW2SYijpGxUNgM.roa (raw, json)
Hash identifier: CT+CH4LtTVHno3GtUxYN9M1xC2YXqLCYEq0QekucUtg=
Subject key identifier: C0:77:BA:DE:D2:C7:14:C2:BB:34:15:B6:49:88:A3:A4:6C:54:36:03
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019440CE2452074165208703095C6E3CAAF6
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/wHe63tLHFMK7NBW2SYijpGxUNgM.roa
Signing time: Tue 07 Jan 2025 12:47:19 +0000
ROA not before: Tue 07 Jan 2025 12:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34636
IP address blocks: 94.139.176.0/21 maxlen: 21
94.139.176.0/22 maxlen: 22
94.139.180.0/23 maxlen: 23
94.139.184.0/22 maxlen: 22
94.139.188.0/24 maxlen: 24
94.139.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:ce:24:52:07:41:65:20:87:03:09:5c:6e:3c:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 7 12:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c077baded2c714c2bb3415b64988a3a46c543603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:45:c5:72:f4:05:ee:b9:5b:4b:0c:52:cc:
ca:0f:7a:94:cb:7a:52:3e:70:d5:8b:48:7d:5f:25:
19:9e:cc:c7:92:a4:72:e9:55:a2:86:fe:e1:02:a4:
e3:cb:9f:58:7d:8b:a9:6f:3e:14:89:1b:1e:d8:55:
5d:53:44:f3:87:2f:b2:a2:ab:37:89:9a:05:e5:1f:
ae:d6:aa:19:05:44:ca:9d:75:40:70:20:f5:55:f9:
e8:9b:cc:80:77:3a:7d:64:0c:cf:03:4b:f1:8d:74:
ea:e7:8d:ea:01:9f:24:49:a5:de:b6:65:06:d1:36:
2f:27:52:00:f6:a4:2b:32:57:1a:e3:f3:2e:77:94:
23:11:46:14:8a:79:ee:04:d0:43:a8:9e:c2:fd:83:
58:42:19:54:39:48:80:5a:dd:28:cb:1e:52:92:26:
a2:4c:06:bc:c3:45:f2:b4:c2:0d:fc:fa:2d:a1:8d:
91:bc:b5:e4:5b:f4:5c:d3:4c:b4:d9:a7:3f:2a:d4:
46:ed:bd:e7:19:d1:43:f1:3d:2f:48:79:15:f0:01:
4d:48:e4:f6:cd:43:33:52:21:ed:df:ac:8a:7d:67:
bb:74:53:e7:3e:2d:e3:b4:54:80:6f:29:b4:24:ad:
f8:95:df:32:f7:f1:27:dd:84:15:09:55:69:4e:f0:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:77:BA:DE:D2:C7:14:C2:BB:34:15:B6:49:88:A3:A4:6C:54:36:03
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/wHe63tLHFMK7NBW2SYijpGxUNgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0-94.139.188.255
94.139.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:02:2e:70:58:2f:b6:09:3e:4f:7e:97:76:da:e1:5b:0b:a3:
c7:29:62:22:12:8f:9e:34:a1:ec:97:63:30:bc:d7:06:c6:ec:
f4:18:f1:98:b5:c9:cc:98:16:b0:a3:d5:f7:7e:4f:ac:23:bb:
69:b3:de:6c:dc:b7:72:18:fe:07:97:36:5b:1e:ac:85:b0:26:
bd:70:12:3b:9b:c7:bf:ea:8b:36:33:c9:1d:49:79:51:bb:14:
f7:42:12:be:27:f3:3f:f2:51:72:e3:82:db:20:2f:18:c9:29:
f7:c4:e3:32:81:11:48:f1:1f:47:59:c1:3b:e9:4e:5c:fd:d0:
5f:4e:70:41:e3:72:bf:b5:f5:bc:6d:0d:ee:73:03:28:23:b7:
1e:43:70:84:a6:33:52:c3:b4:a0:b3:73:97:b3:95:04:1b:70:
ef:85:de:0f:8d:0d:0e:8a:17:6e:ef:d7:75:e5:ae:3c:a1:de:
c1:9b:fb:a0:6b:2d:1a:a2:68:0c:5b:e9:8b:31:c7:5c:89:8e:
9b:72:d2:b0:bb:ae:ce:56:6d:c2:94:ba:90:d0:91:f9:55:d7:
ee:49:94:9e:89:3d:fd:89:4a:10:a6:91:01:5b:56:8f:b9:39:
41:57:55:9c:4f:d5:b0:b2:88:fa:35:f7:cb:5e:87:31:e3:24:
d2:45:dd:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:56 2025 by rpki-client