Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/w4RtskuHRknczZMIgEOayAnx-bw.roa
File: w4RtskuHRknczZMIgEOayAnx-bw.roa (raw, json)
Hash identifier: Gao/WvW+wIEEG5my4KsRa6yF/N6hpufS64G6NkhyzQU=
Subject key identifier: C3:84:6D:B2:4B:87:46:49:DC:CD:93:08:80:43:9A:C8:09:F1:F9:BC
Certificate issuer: /CN=6676dff61a8305675977e86f52eee6745d6428f4
Certificate serial: 019421B241288B1191FB56EF712C195F0739
Authority key identifier: 66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/w4RtskuHRknczZMIgEOayAnx-bw.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199952
IP address blocks: 45.66.64.0/22 maxlen: 22
92.119.108.0/22 maxlen: 22
152.89.100.0/22 maxlen: 22
185.29.68.0/22 maxlen: 24
185.69.8.0/22 maxlen: 24
185.88.52.0/22 maxlen: 24
185.110.76.0/22 maxlen: 24
185.223.240.0/22 maxlen: 24
185.227.8.0/22 maxlen: 24
2a04:41c0::/29 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:41:28:8b:11:91:fb:56:ef:71:2c:19:5f:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6676dff61a8305675977e86f52eee6745d6428f4
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3846db24b874649dccd930880439ac809f1f9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e2:ae:96:c1:43:de:bd:2b:d2:3a:e5:58:da:
91:04:48:20:eb:a7:6a:44:41:6b:66:d1:a7:25:5b:
c2:dc:24:a8:6f:e0:38:de:c3:3b:ce:35:d0:04:3e:
6c:c2:f7:77:51:21:4d:9a:e1:89:4c:85:e7:ec:b9:
1c:f7:00:e0:a6:4f:2d:7c:ec:34:c9:3b:03:b9:84:
2a:1d:c2:5b:22:19:b1:ef:36:5d:96:b7:3f:a5:f2:
a4:80:8d:0f:72:ab:8e:f9:70:46:91:75:a9:64:6f:
bc:32:8e:40:62:13:8b:29:92:54:03:bf:f3:c6:19:
ea:91:87:85:29:b1:8e:15:e2:f6:50:a3:63:cb:eb:
2d:38:6e:19:36:e9:66:b1:f4:02:44:46:68:5d:88:
fb:4d:eb:b5:a6:4d:44:61:bc:fe:9e:46:e4:33:c0:
75:c3:e0:70:84:da:51:0f:d2:59:03:c9:6a:0b:76:
4e:a0:87:d7:2a:c9:4e:1f:2a:63:f6:ed:e1:ba:53:
86:02:73:be:02:dd:67:cd:3e:7d:e8:0f:ee:b0:df:
f0:c2:e6:58:fa:fb:42:55:6a:ef:a2:db:0f:b0:50:
e1:ee:df:66:31:4f:62:c1:59:e2:05:f7:83:55:c1:
ab:3d:6b:7d:e0:58:11:42:b8:7d:c1:d8:12:5f:1c:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:84:6D:B2:4B:87:46:49:DC:CD:93:08:80:43:9A:C8:09:F1:F9:BC
X509v3 Authority Key Identifier:
keyid:66:76:DF:F6:1A:83:05:67:59:77:E8:6F:52:EE:E6:74:5D:64:28:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/w4RtskuHRknczZMIgEOayAnx-bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6cb23e-7c65-46b3-9b6d-7c6635da892d/1/Znbf9hqDBWdZd-hvUu7mdF1kKPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.64.0/22
92.119.108.0/22
152.89.100.0/22
185.29.68.0/22
185.69.8.0/22
185.88.52.0/22
185.110.76.0/22
185.223.240.0/22
185.227.8.0/22
IPv6:
2a04:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:3e:8c:01:59:3f:22:1f:4b:c9:e8:bf:0d:a5:7d:58:05:0a:
aa:3b:d4:a4:89:26:5d:5b:69:89:29:3f:65:05:59:f1:f0:54:
77:ac:26:74:5f:d9:7e:39:9d:fc:73:2c:85:59:ef:fb:84:0d:
32:12:b7:83:47:45:f5:b7:b8:4b:0a:7d:ea:d8:cb:e1:a5:65:
da:45:47:90:87:36:60:43:ab:20:15:fe:2a:d6:a5:52:eb:49:
33:d1:9d:16:34:1a:7d:63:4f:55:5d:96:60:f6:2f:af:e0:12:
0a:72:ce:78:f9:8f:aa:b8:73:3e:33:c1:ec:67:d9:e8:2f:36:
0a:ec:98:b1:62:45:a4:78:78:06:5f:95:d4:13:5b:d0:b6:31:
b3:1c:ea:95:09:73:42:ce:5d:4a:3b:4a:06:4c:9c:84:5c:2f:
d3:e0:69:7e:9b:37:96:4c:b0:2a:be:7d:9a:c1:d9:fc:ca:7b:
ec:af:98:9e:ab:c6:9c:63:4b:b1:68:fe:8d:1c:b4:0a:f2:e1:
8e:a6:ef:07:fb:a5:ee:e0:bd:ca:71:2e:c0:0c:5f:86:70:23:
56:37:34:85:ed:28:a1:1e:03:e5:5e:58:a0:5b:dd:19:fd:63:
7b:a0:d9:9f:56:2a:f5:b8:ef:b0:7d:92:3c:7a:2f:e7:6f:54:
05:d0:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:47:33 2025 by rpki-client