Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/wnHzclbUTpmI2i25YXVP3hxML5Y.roa
File: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (raw, json)
Hash identifier: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=
Subject key identifier: C2:71:F3:72:56:D4:4E:99:88:DA:2D:B9:61:75:4F:DE:1C:4C:2F:96
Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial: 0194258F43075FA1CA4E570ADEB9B9107A80
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/wnHzclbUTpmI2i25YXVP3hxML5Y.roa
Signing time: Thu 02 Jan 2025 05:48:53 +0000
ROA not before: Thu 02 Jan 2025 05:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6697
IP address blocks: 185.179.80.0/24 maxlen: 24
185.179.81.0/24 maxlen: 24
195.137.160.0/24 maxlen: 24
2a0a:7d80::/48 maxlen: 48
2a0a:7d80:1::/48 maxlen: 48
2a0a:7d80:f::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:43:07:5f:a1:ca:4e:57:0a:de:b9:b9:10:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Validity
Not Before: Jan 2 05:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c271f37256d44e9988da2db961754fde1c4c2f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:41:1d:95:4b:6a:72:1e:68:39:74:37:9f:
c3:f7:47:18:6e:2a:75:15:33:4d:dd:72:1e:a9:93:
c8:9b:5c:9b:b0:60:bd:e9:af:a1:03:62:6a:fb:16:
5b:1f:3b:f4:04:58:6f:8e:82:9e:54:eb:db:d9:75:
a4:7d:7f:9a:b1:66:66:c7:d5:aa:db:14:9e:43:d9:
32:79:e7:f6:31:c8:35:16:1a:ec:7b:0c:dc:19:e4:
65:d4:e9:96:3c:5c:60:d0:f5:78:1d:0b:dd:c0:75:
91:9f:c3:02:17:34:26:76:18:f7:09:96:92:86:50:
08:d4:bc:4a:a7:57:f0:e6:b7:f4:70:7c:9c:84:c2:
c8:ad:fa:f4:ec:71:8f:30:00:46:e9:f4:ef:32:8c:
a2:6c:3b:3f:f7:0b:3b:c7:ad:d1:fd:54:b2:b4:cc:
8c:bf:9f:f6:b4:d3:fe:27:12:93:cb:ab:b9:9b:3b:
7f:02:ff:ad:f5:e7:2c:bb:46:6c:ec:a4:68:19:1a:
6e:98:55:70:46:45:37:bb:85:b7:03:cc:68:a5:3a:
13:0d:6f:9c:f9:41:85:70:ea:2c:3f:ea:87:83:79:
94:8d:8e:d9:3d:a1:23:2a:50:ab:75:97:aa:c7:0b:
1e:7c:6a:90:bd:99:ef:c0:a5:9c:22:b8:ab:00:1c:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:F3:72:56:D4:4E:99:88:DA:2D:B9:61:75:4F:DE:1C:4C:2F:96
X509v3 Authority Key Identifier:
keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/wnHzclbUTpmI2i25YXVP3hxML5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.80.0/23
195.137.160.0/24
IPv6:
2a0a:7d80::/47
2a0a:7d80:f::/48
Signature Algorithm: sha256WithRSAEncryption
06:71:1f:49:7f:9f:79:d3:21:cc:ce:af:a3:1f:d2:31:c9:ec:
b3:0f:3f:fa:0d:11:f8:65:40:f8:8c:f1:87:51:d6:10:c6:74:
ec:fd:90:67:69:b0:d1:d6:0a:ee:a1:8a:00:75:3f:d7:17:25:
53:47:66:de:19:23:40:27:40:14:1d:ff:f0:dd:a8:16:49:bb:
16:03:77:82:a1:93:b5:3b:85:50:25:7a:ff:e6:e9:b8:e7:5c:
a2:13:b7:24:db:ba:04:a6:c3:58:13:44:d8:e7:8d:c6:a9:66:
0b:00:92:c2:29:fc:ef:84:2b:07:88:39:25:cc:13:7f:7d:70:
4f:5e:f4:b8:3f:25:5e:83:9f:c9:45:8d:8e:d8:49:c0:a0:60:
5a:73:b8:36:4e:f8:da:22:bf:3a:c7:4c:5a:e5:1e:71:e9:4a:
af:4c:20:e5:aa:c5:a4:6a:49:e3:43:13:52:95:a9:5b:55:d1:
9c:23:06:a0:c2:55:42:69:3a:ba:c2:d3:f3:8e:80:a1:cf:92:
64:a1:36:14:5e:2b:81:ee:d0:f1:f9:97:c5:6c:35:86:e3:50:
57:70:11:ff:c3:8d:fc:e0:6f:a6:19:ba:1a:a2:76:c1:a6:b5:
14:c6:9c:45:f4:aa:ba:02:61:9d:0c:bd:e9:0f:07:43:ca:84:
be:79:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:17 2025 by rpki-client