Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/w_kbWva8bPy_BJIaV4ykob78GrA.roa
File: w_kbWva8bPy_BJIaV4ykob78GrA.roa (raw, json)
Hash identifier: E/+pwYk30W429Hx1ACBcwVtYRPMkzzJrjllRBSavTZw=
Subject key identifier: C3:F9:1B:5A:F6:BC:6C:FC:BF:04:92:1A:57:8C:A4:A1:BE:FC:1A:B0
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 01942369726237AD5E1C58ED997C1AECC51B
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/w_kbWva8bPy_BJIaV4ykob78GrA.roa
Signing time: Wed 01 Jan 2025 19:48:20 +0000
ROA not before: Wed 01 Jan 2025 19:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202613
IP address blocks: 80.73.232.0/21 maxlen: 24
82.192.128.0/19 maxlen: 24
95.110.180.0/22 maxlen: 24
176.107.152.0/21 maxlen: 24
185.58.120.0/22 maxlen: 24
195.231.40.0/21 maxlen: 24
195.231.96.0/19 maxlen: 24
209.227.192.0/20 maxlen: 24
217.198.128.0/20 maxlen: 24
2a00:6d43::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:72:62:37:ad:5e:1c:58:ed:99:7c:1a:ec:c5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 1 19:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3f91b5af6bc6cfcbf04921a578ca4a1befc1ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:41:d6:9b:74:7e:79:52:5c:3f:2b:c3:8d:
5d:ba:1e:60:5e:33:6c:68:42:b9:6f:9e:89:98:2b:
52:10:01:87:c1:42:11:b5:53:90:32:d8:98:2a:db:
21:cf:0f:39:bc:04:7f:a5:c1:5a:47:54:ce:97:af:
4d:28:04:6d:fb:c1:f4:2f:60:37:ce:b4:98:b3:f6:
c0:aa:28:ec:c4:6d:00:b0:99:c7:19:21:32:8c:23:
c2:d3:e5:de:63:a3:f5:42:d0:35:9e:b5:da:f8:f3:
f5:37:a6:40:44:73:0a:b6:bd:47:77:c0:ea:f4:98:
dd:28:10:d0:e2:20:04:2c:ed:c3:61:3b:15:90:cb:
85:0a:ce:77:e1:84:a0:c0:9c:44:1c:1a:e5:af:c4:
2e:3f:40:36:12:62:0b:92:60:ff:b6:04:62:dd:53:
04:b1:2b:ac:f6:fa:cf:9e:4a:fa:36:f1:45:df:29:
e8:17:e6:82:64:cc:1e:7b:ce:a3:a8:67:4c:af:b2:
b0:10:f7:63:ce:66:dd:a3:e9:fe:30:45:e2:99:02:
01:9f:9a:56:ca:6a:15:64:2f:a9:c5:f6:a3:ad:45:
40:35:05:8c:6d:88:97:cf:2a:40:15:4f:1b:99:10:
81:fe:09:fa:c4:21:ba:a0:71:96:89:7a:09:90:98:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:1B:5A:F6:BC:6C:FC:BF:04:92:1A:57:8C:A4:A1:BE:FC:1A:B0
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/w_kbWva8bPy_BJIaV4ykob78GrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.232.0/21
82.192.128.0/19
95.110.180.0/22
176.107.152.0/21
185.58.120.0/22
195.231.40.0/21
195.231.96.0/19
209.227.192.0/20
217.198.128.0/20
IPv6:
2a00:6d43::/32
Signature Algorithm: sha256WithRSAEncryption
14:03:86:fe:3a:85:39:cd:a7:33:c0:31:59:8c:67:6b:46:21:
88:a3:dc:c8:8e:f9:8e:4e:ee:b0:8e:d5:7c:b7:08:5f:c0:13:
32:a8:63:2d:50:e8:7b:e7:95:ef:c9:83:fa:82:03:89:a0:23:
cf:b8:95:bf:f0:7c:4b:e1:a6:0e:7d:2e:f9:7d:d5:06:61:1d:
2d:3f:a8:c1:f7:a4:09:58:64:93:11:e3:03:8e:f0:7a:7a:60:
ca:14:37:62:8b:be:70:69:c0:b4:11:f1:22:77:a8:71:da:75:
96:b0:0c:35:56:82:62:46:39:be:a6:d8:70:e0:48:49:82:1e:
40:76:1a:5a:ef:79:5d:00:03:98:06:b5:14:ef:7d:c2:58:b9:
54:e1:ed:6b:87:1a:6a:4a:74:48:d9:c6:6a:3c:08:5c:ca:6d:
93:91:89:66:0d:a6:93:8a:ef:01:48:aa:8b:da:5f:d0:99:5c:
40:bf:d8:f2:b9:b8:ed:90:3c:36:6f:52:0b:93:d1:91:0d:2b:
43:46:f6:80:58:b7:12:3b:9c:06:76:82:b8:61:31:30:d4:c8:
d3:1f:11:41:33:9b:4e:2d:e3:a2:02:d7:bf:2e:5f:22:fd:43:
1c:00:ad:af:3c:02:2d:9a:e8:15:d7:85:ee:3b:64:88:4b:aa:
d8:9d:7f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:27 2025 by rpki-client