Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa
File: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (raw, json)
Hash identifier: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=
Subject key identifier: C1:D2:26:D6:A0:9D:D0:E6:C9:D7:1C:81:E5:33:D0:90:56:82:D1:80
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 019426D9602D94B545BBE9CA5F127871F1CA
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210333
IP address blocks: 185.202.96.0/23 maxlen: 24
185.202.98.0/23 maxlen: 24
213.109.144.0/24 maxlen: 24
2a11:6a40::/40 maxlen: 48
2a11:6a40:100::/40 maxlen: 48
2a11:6a40:ff8::/46 maxlen: 48
2a11:6a40:fff::/48 maxlen: 48
2a11:6a40:2000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:60:2d:94:b5:45:bb:e9:ca:5f:12:78:71:f1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1d226d6a09dd0e6c9d71c81e533d0905682d180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:22:c7:cb:fe:25:35:9c:bb:44:d2:ca:03:
fe:46:e6:ed:89:a8:b0:31:72:8d:fe:c1:9c:1a:1c:
f1:f3:ba:f1:7f:f4:25:a9:b3:46:a1:0f:18:7f:de:
41:70:1b:02:80:38:1f:eb:ab:15:b3:6b:61:a1:e7:
2d:8b:e0:8e:dd:68:dd:32:a8:b4:0e:c7:b3:47:43:
81:01:f2:cd:1a:33:6f:1b:53:24:6d:62:f4:de:af:
d2:49:32:b3:cb:e5:45:a0:4f:82:4a:a3:93:24:f5:
b4:55:08:38:fd:39:c3:ca:b6:3c:47:bd:88:dc:48:
e7:4f:3a:f0:f1:8f:66:1f:1d:7b:ba:21:d0:80:72:
2e:3a:9c:c9:ab:e7:70:ae:71:04:05:3c:dd:ad:e0:
7a:4e:16:24:85:50:f1:06:01:1c:34:ab:e7:07:c6:
d6:a4:80:d1:1d:c2:00:46:20:69:f4:a5:df:0d:95:
93:36:62:19:5b:ae:08:c3:71:68:e9:26:97:51:15:
47:d1:2f:35:e1:03:73:fe:c1:a5:d1:6a:75:3b:a6:
df:a2:36:18:07:07:89:46:9c:ba:2f:d6:d5:bf:53:
db:53:ba:d7:5c:88:6c:b9:0f:62:3f:7d:9d:1f:4d:
8f:d6:48:50:f9:93:ba:96:a8:41:6f:04:d2:65:d1:
c0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D2:26:D6:A0:9D:D0:E6:C9:D7:1C:81:E5:33:D0:90:56:82:D1:80
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.96.0/22
213.109.144.0/24
IPv6:
2a11:6a40::/39
2a11:6a40:ff8::/46
2a11:6a40:fff::/48
2a11:6a40:2000::/44
Signature Algorithm: sha256WithRSAEncryption
bd:68:91:de:49:d2:ab:9f:95:05:1a:59:51:60:f8:6f:62:c5:
a8:9a:6a:29:a8:cb:3c:a4:15:96:d3:b6:bf:7b:a7:8f:2e:d2:
4e:b0:52:ee:8d:90:a4:79:53:96:0e:33:32:9c:40:a8:2e:f6:
f5:e2:09:6b:05:aa:2f:be:0e:ba:b8:0e:ee:60:6e:4f:f4:35:
65:19:1d:bd:de:d2:92:16:90:ed:ec:7f:cf:f7:62:46:32:74:
ed:03:32:84:88:69:ba:44:71:db:a2:7f:ea:2a:00:a7:d0:0c:
6b:09:d7:57:a5:83:8f:c4:e6:8c:f2:20:cc:6f:a0:fb:a8:50:
a0:e6:30:d7:b6:a3:b0:b7:b1:d9:5b:68:ea:a5:6c:ae:77:6e:
2c:d9:dd:a7:5d:4d:aa:a4:85:8e:b6:b2:32:8c:71:59:ff:e5:
98:ea:a7:3f:6c:2e:6c:e3:13:6e:8b:b6:24:da:38:a1:3f:56:
dc:68:3e:14:cf:dc:e7:42:cb:bc:2a:78:04:c9:9e:cb:47:96:
9d:a5:e8:80:64:aa:58:52:d5:97:99:f0:d8:5e:db:c9:bd:07:
a5:ca:ac:52:de:ae:46:91:bf:da:60:13:ea:a9:99:1b:1c:9f:
f7:6c:fe:14:28:cd:1a:47:f7:5f:08:bb:85:3b:0f:b9:00:4f:
33:43:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:13 2025 by rpki-client