Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pwv5QI-H4M6f8xqRbONZQS_upNs.roa
File: pwv5QI-H4M6f8xqRbONZQS_upNs.roa (raw, json)
Hash identifier: MTYzagqMIxomjqD/t1bUXqZqEQSCcmHou8AqaJZXYe0=
Subject key identifier: A7:0B:F9:40:8F:87:E0:CE:9F:F3:1A:91:6C:E3:59:41:2F:EE:A4:DB
Certificate issuer: /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial: 019425FDCE893A768A021F99DACAB5F96863
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pwv5QI-H4M6f8xqRbONZQS_upNs.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60690
IP address blocks: 93.95.72.0/21 maxlen: 21
178.248.16.0/21 maxlen: 21
185.27.36.0/22 maxlen: 22
185.67.84.0/22 maxlen: 22
185.109.100.0/22 maxlen: 22
185.123.196.0/22 maxlen: 22
185.219.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ce:89:3a:76:8a:02:1f:99:da:ca:b5:f9:68:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a70bf9408f87e0ce9ff31a916ce359412feea4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:19:51:1d:39:af:04:40:34:1b:9c:90:71:
82:96:db:a9:14:14:3f:d3:58:36:cd:6e:4b:5d:bd:
bc:f2:56:50:04:34:e9:9a:b7:a7:e7:ca:0f:a5:35:
e9:a5:7d:99:eb:f6:58:80:bd:f7:1a:6e:c6:c7:8b:
6a:90:ec:10:2f:cd:56:3b:b9:51:0f:d1:4b:d7:0c:
7e:6b:be:3f:99:24:17:8c:27:5b:23:75:03:6a:e8:
07:b9:8e:fa:dd:37:de:67:4d:d8:18:e4:eb:23:35:
1e:c5:cb:ec:40:a7:bd:84:63:58:ee:6c:bf:47:e3:
49:7e:42:fa:0e:27:5a:76:00:6c:5c:fb:a1:d4:2c:
f3:a2:50:81:5f:3a:d6:cc:67:63:f1:14:71:b1:f1:
9a:38:b9:8b:cb:39:ab:e4:b4:c2:c2:46:f8:47:3d:
9d:76:5d:a3:f3:7e:67:36:b0:f9:3c:94:fc:74:84:
e1:17:fe:ff:63:82:60:e5:d0:12:f8:69:4a:5f:b9:
bf:5d:95:1c:3b:11:ee:5e:2f:39:0f:e4:4e:cb:dc:
33:f5:15:96:ae:73:61:0b:29:7f:73:88:c1:aa:a6:
6b:2b:5f:7b:9a:ac:bc:84:67:eb:24:18:6c:eb:c7:
9c:68:93:b7:61:a5:5d:7f:91:06:15:7e:00:89:b6:
5a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0B:F9:40:8F:87:E0:CE:9F:F3:1A:91:6C:E3:59:41:2F:EE:A4:DB
X509v3 Authority Key Identifier:
keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pwv5QI-H4M6f8xqRbONZQS_upNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.72.0/21
178.248.16.0/21
185.27.36.0/22
185.67.84.0/22
185.109.100.0/22
185.123.196.0/22
185.219.148.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:45:97:c9:d4:e7:60:76:94:4e:b8:ce:da:db:93:08:c9:63:
6d:81:16:fb:a4:7f:7a:1e:b5:ec:51:ec:d1:07:8c:65:4d:4b:
13:26:99:23:e8:58:17:13:f8:16:e9:55:38:94:7c:69:29:f3:
75:3f:c7:0a:d4:ab:4b:00:18:0d:a5:ee:ce:a3:c8:cc:4a:6b:
b9:b6:b5:6e:87:7e:dd:9d:c7:ff:71:c0:c6:80:73:3e:ed:f5:
ae:04:22:34:91:f7:f0:e1:d9:cb:ff:8a:8a:3b:d5:db:04:6b:
83:86:ae:f7:ac:9d:40:ea:46:17:bd:8b:c1:86:88:43:81:43:
1e:48:6e:5f:b5:9d:20:aa:32:d5:52:9b:f2:91:d0:b2:45:9e:
a1:47:44:91:5b:47:77:d0:ad:4a:42:53:1f:d7:75:f8:e4:c6:
12:6e:46:74:1e:40:73:bc:50:26:a0:80:4a:5e:cb:50:f3:67:
ce:05:df:41:ed:59:8e:3f:c7:b1:d4:72:a9:56:4e:83:10:02:
e7:b3:6a:eb:f0:28:94:32:fe:7b:f4:5a:14:a5:2c:b3:c3:c0:
f8:d3:d9:db:11:ee:82:32:81:b2:b3:c6:7f:3d:57:14:b8:25:
ac:c2:28:83:fc:06:88:3c:95:50:89:a0:b1:eb:58:b7:d9:36:
92:2e:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:10 2025 by rpki-client