Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/1XPduftMWiA3mhDReUc68s4JF-M.roa
File: 1XPduftMWiA3mhDReUc68s4JF-M.roa (raw, json)
Hash identifier: BCW8W7hox85l+EvIIJN43p7alSsxdX+eLTmQrODF5v4=
Subject key identifier: D5:73:DD:B9:FB:4C:5A:20:37:9A:10:D1:79:47:3A:F2:CE:09:17:E3
Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial: 019420D65FC1E58BDC6DAD6AC2A8C8C28735
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/1XPduftMWiA3mhDReUc68s4JF-M.roa
Signing time: Wed 01 Jan 2025 07:48:27 +0000
ROA not before: Wed 01 Jan 2025 07:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198776
IP address blocks: 78.110.44.0/22 maxlen: 22
185.117.64.0/22 maxlen: 22
185.220.132.0/22 maxlen: 22
2a0b:f740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5f:c1:e5:8b:dc:6d:ad:6a:c2:a8:c8:c2:87:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Validity
Not Before: Jan 1 07:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d573ddb9fb4c5a20379a10d179473af2ce0917e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:af:6f:3f:bf:c2:45:bf:2a:39:24:e5:22:
d7:ce:8b:55:a6:50:6e:f6:01:ad:c1:aa:af:9c:a1:
54:68:88:9f:6a:47:03:f3:06:e7:70:46:2d:bd:7a:
96:28:bc:69:f4:be:02:54:17:a3:c9:a2:1a:4e:1c:
7e:46:cf:2a:7b:ed:8a:3a:62:be:87:61:4e:0d:48:
5a:22:88:ad:c3:5c:f1:07:34:98:4f:85:1e:3c:e2:
90:47:51:5e:d0:8a:ff:e9:d7:1b:f2:d3:7d:a9:41:
44:80:16:b2:f5:b4:b2:a5:a7:43:a9:0a:55:78:16:
c2:d0:8f:fd:ba:c7:a8:98:2b:11:5f:41:1a:5d:26:
3b:5e:8c:33:ac:6e:27:a8:21:74:83:82:3f:7f:57:
c3:b2:5c:13:4c:3d:07:a0:cf:a9:92:7c:c0:64:05:
5a:3e:e0:d7:4e:4d:a5:6a:9e:95:c7:4a:6f:0b:a1:
f4:96:82:87:db:e9:46:ea:21:aa:c2:3d:2d:be:6a:
b4:29:78:e4:41:4d:1d:0e:01:0c:63:4e:54:01:fe:
71:16:4f:be:1e:2f:71:b1:c1:51:1b:7a:86:70:e7:
23:8f:f8:e9:3c:9e:62:1b:f8:7b:15:8b:66:a3:4f:
0f:4b:34:85:8c:91:44:14:41:db:61:4c:cb:7a:94:
97:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:73:DD:B9:FB:4C:5A:20:37:9A:10:D1:79:47:3A:F2:CE:09:17:E3
X509v3 Authority Key Identifier:
keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/1XPduftMWiA3mhDReUc68s4JF-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.44.0/22
185.117.64.0/22
185.220.132.0/22
IPv6:
2a0b:f740::/29
Signature Algorithm: sha256WithRSAEncryption
76:c1:69:50:9c:d8:79:ed:c3:2d:a0:c0:12:4d:2b:22:ec:0d:
c3:22:9d:26:37:ab:98:da:3a:4d:c4:b3:74:7a:18:1e:af:2d:
09:c2:0d:d2:9d:c1:f7:39:3c:ce:cf:5e:81:64:ad:04:73:93:
77:bb:5a:d1:fb:1b:67:1b:f2:48:08:b0:db:a2:82:80:8d:60:
38:33:b2:75:fd:be:e3:9b:c8:62:1f:8b:2e:95:69:f3:68:8e:
f3:8b:d8:5b:0b:32:0d:ab:e0:5d:9a:56:db:91:a2:6c:17:be:
68:cf:f4:f3:4e:ff:34:ad:01:02:d3:34:8e:ec:f1:83:81:3d:
26:b1:2d:75:0c:39:7d:18:5e:72:d1:2b:33:fb:01:b5:e6:9d:
2c:6e:8e:86:96:8b:92:aa:83:70:07:48:3f:ce:05:53:b8:f3:
3d:d5:6d:1b:6f:ea:3a:f0:4a:a7:6c:4c:89:42:1a:de:e2:2c:
e3:9d:1b:70:06:a4:5d:07:64:4e:4f:e7:9e:a8:75:6d:45:9e:
51:a4:37:d3:fc:7e:b7:76:91:5c:e4:ee:41:96:53:ba:77:ef:
a6:b6:7c:e5:7b:1c:c9:9d:be:fa:35:c8:26:3f:f0:6e:5d:c4:
d0:8d:ab:59:73:fb:2e:c4:44:f7:c4:da:ad:3f:33:fd:4c:73:
e7:d2:45:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:58 2025 by rpki-client