Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/bwNRYUasJ0C1RbED35CNZK887WI.roa
File: bwNRYUasJ0C1RbED35CNZK887WI.roa (raw, json)
Hash identifier: qjBvIWJNLsAYnKbl6w2sdcAfTgRQr0cFLPmy+7coLuw=
Subject key identifier: 6F:03:51:61:46:AC:27:40:B5:45:B1:03:DF:90:8D:64:AF:3C:ED:62
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 01941FFA6D6F92FE25902D0EB24E0BBF8251
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/bwNRYUasJ0C1RbED35CNZK887WI.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.64.0/18 maxlen: 22
37.98.114.0/24 maxlen: 24
93.117.176.0/20 maxlen: 24
93.119.208.0/20 maxlen: 24
178.131.0.0/18 maxlen: 24
178.131.4.0/24 maxlen: 24
178.131.64.0/18 maxlen: 24
178.131.128.0/18 maxlen: 24
188.211.0.0/20 maxlen: 24
188.211.15.0/24 maxlen: 24
188.212.240.0/21 maxlen: 24
188.213.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6d:6f:92:fe:25:90:2d:0e:b2:4e:0b:bf:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f03516146ac2740b545b103df908d64af3ced62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5d:3a:ba:5e:66:4a:0f:46:6f:e7:5e:a4:ca:
4e:c8:c3:89:5a:cd:65:c4:6e:25:a3:f6:0b:fa:12:
76:44:37:8a:5c:31:30:5e:9b:70:c3:f7:31:36:e1:
38:bf:0e:ab:86:a9:58:7f:dc:ac:d0:7d:ea:58:44:
89:23:fa:65:c3:99:30:c7:24:8f:39:c8:18:00:e9:
aa:d7:54:fb:4e:2a:75:84:53:8d:8d:a3:30:b7:07:
30:67:67:f3:95:96:d9:e9:0a:77:71:56:dc:9a:c2:
1b:c5:5e:44:79:6d:45:aa:5f:0a:af:60:11:e3:42:
e0:7d:34:0c:91:0d:7e:37:b6:b9:56:1f:c6:52:d7:
0a:b9:a6:86:86:20:a0:81:38:65:54:2f:27:5d:cd:
a2:e8:b4:87:be:b3:b8:06:c0:36:c2:ef:54:68:2a:
bc:87:db:cd:2e:4d:b9:af:65:66:ed:b0:16:7e:28:
53:08:c3:7a:da:e3:6a:38:15:26:3e:f3:a0:db:30:
02:65:bd:02:ba:49:2e:8e:44:07:94:c5:2b:76:74:
3f:9b:5a:0f:3e:78:dc:87:72:99:9b:16:c7:1d:86:
a9:1e:f6:ad:38:4e:cd:61:02:fc:ad:18:c1:d7:04:
2a:ea:c6:d4:3c:ab:7c:91:3d:43:a1:ad:dd:c1:a0:
6c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:03:51:61:46:AC:27:40:B5:45:B1:03:DF:90:8D:64:AF:3C:ED:62
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/bwNRYUasJ0C1RbED35CNZK887WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/18
93.117.176.0/20
93.119.208.0/20
178.131.0.0-178.131.191.255
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:9f:f2:c1:21:6d:29:35:13:93:74:7b:6b:84:17:74:62:83:
f7:fe:f5:31:54:a5:b7:b6:a1:56:17:c6:a4:e9:06:7f:73:37:
5b:12:ba:7d:02:d8:e3:7c:5a:01:2e:b8:f5:cd:57:2f:55:b3:
c7:02:e9:3a:b0:ca:af:93:55:6f:d7:eb:3a:b5:68:c8:4c:d1:
92:e2:b5:4b:0e:e9:13:d7:31:89:aa:8c:1e:54:44:6a:63:b7:
bd:26:81:1c:88:e1:a6:03:23:67:61:0e:50:21:b5:8c:44:ec:
e2:f1:04:0a:ca:76:e3:6a:82:0f:76:1f:49:f0:20:88:94:21:
2d:bd:a1:32:e0:9e:82:ce:97:fb:5f:57:f5:5a:8c:b9:38:fd:
6b:2a:9a:d5:fa:14:f4:74:2e:f4:ba:94:ba:61:8a:d5:fd:c4:
b2:c3:03:76:5a:87:8d:94:8f:f4:cd:cf:a5:af:33:f1:33:a5:
62:fc:b6:e1:bc:93:82:cf:91:15:e4:6f:3d:bd:71:cc:ef:8d:
09:c5:91:e2:61:6a:7c:7b:d9:3b:7b:e6:fb:76:22:73:d3:6d:
d8:aa:d9:ae:cd:a8:ed:32:e9:49:47:dc:c0:59:75:28:82:a0:
04:c8:fd:17:04:55:f9:b2:ad:8a:97:43:f5:a7:e8:56:e6:19:
97:e2:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:21:32 2025 by rpki-client