Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/wJoEv1cTcMs89DVqbv88rXmkjBs.roa
File: wJoEv1cTcMs89DVqbv88rXmkjBs.roa (raw, json)
Hash identifier: dwNiZrwk++xFBCbnEtCywNysmHqCMLzFmgUxU3OD8L4=
Subject key identifier: C0:9A:04:BF:57:13:70:CB:3C:F4:35:6A:6E:FF:3C:AD:79:A4:8C:1B
Certificate issuer: /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Certificate serial: 01942067BBE873C85A1127F2C53AF86B9A37
Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/wJoEv1cTcMs89DVqbv88rXmkjBs.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207227
IP address blocks: 95.128.154.0/24 maxlen: 24
185.74.36.0/22 maxlen: 22
185.74.36.0/24 maxlen: 24
185.74.37.0/24 maxlen: 24
185.74.38.0/24 maxlen: 24
185.74.39.0/24 maxlen: 24
2a05:48c0::/29 maxlen: 29
2a13:1f40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bb:e8:73:c8:5a:11:27:f2:c5:3a:f8:6b:9a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c09a04bf571370cb3cf4356a6eff3cad79a48c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:65:99:70:58:12:31:09:47:70:48:27:8a:
93:32:be:9c:23:b2:4c:06:0f:70:8b:7e:ab:03:fd:
27:97:35:57:de:a8:fa:a5:8a:a8:2e:85:fe:13:cb:
2a:49:06:94:be:c0:83:c7:10:11:8c:a6:cc:b7:59:
fb:4e:20:a1:95:01:04:2a:dc:6a:fe:f2:1c:31:72:
81:83:84:4a:c9:dc:28:8a:4a:fe:21:87:21:15:4e:
a1:59:b3:36:f8:30:f1:f4:b9:81:05:06:07:6c:41:
77:d5:ef:e0:85:11:4b:12:2e:1f:0d:44:21:74:c2:
18:c6:f3:c0:d3:5a:16:23:b9:88:69:ae:8b:09:dd:
7a:e0:80:f7:dd:6d:b3:3b:5c:f6:9e:ee:63:fb:be:
83:81:a7:d9:84:d4:e2:fc:81:c1:3d:49:b6:70:96:
68:25:e5:fc:4f:a3:79:45:60:2c:3a:f8:9b:ee:b2:
5d:0e:db:9f:e4:b1:21:84:1b:7e:ea:5b:98:e8:7d:
5f:5b:c9:29:54:0a:fc:40:e7:13:03:b0:d5:ab:ec:
e5:a4:3b:e6:21:81:7e:6d:48:34:1b:54:20:13:ea:
f5:7e:08:b1:32:ad:ce:ad:89:58:cd:e6:37:ea:25:
8f:46:8c:53:b7:7c:8c:3d:cd:2a:91:d8:68:e6:f1:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9A:04:BF:57:13:70:CB:3C:F4:35:6A:6E:FF:3C:AD:79:A4:8C:1B
X509v3 Authority Key Identifier:
keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/wJoEv1cTcMs89DVqbv88rXmkjBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.154.0/24
185.74.36.0/22
IPv6:
2a05:48c0::/29
2a13:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
76:72:18:a9:2b:af:29:50:b0:bc:3e:6a:dc:1c:7e:2d:30:77:
0e:91:e9:f7:6f:7e:c0:0d:6f:e7:94:a0:16:04:f6:a6:55:6c:
c4:fa:97:d0:71:2d:c2:0e:30:ba:cf:90:23:30:a7:2f:37:82:
9f:ed:41:d7:08:3c:50:55:17:47:f3:9c:7b:3a:a4:46:e0:f6:
99:fd:0e:ec:33:36:4c:1c:73:7f:68:0d:41:ba:4b:85:02:68:
45:87:1b:29:d7:ea:bf:f4:12:24:60:dc:ba:32:89:e6:2c:62:
6b:c8:36:a2:21:aa:a8:ee:f1:84:b9:78:8e:b6:d3:e3:66:8f:
5b:da:c0:40:0c:58:d1:82:bf:98:b6:b7:0b:d9:49:d6:02:c8:
d7:aa:e7:c9:e1:fa:ba:33:0c:2a:94:c4:8a:6a:10:5b:55:9f:
d9:2a:3d:26:4b:c5:b6:80:c6:ce:bb:3d:19:a9:31:90:c9:ff:
79:41:75:0d:9c:24:49:f9:d9:1a:70:07:ff:99:b4:53:54:70:
ac:4f:6e:86:cd:5f:6b:5e:4d:19:e5:98:9a:ac:c6:3b:14:12:
5f:d7:36:ea:0a:6f:80:90:b5:c4:16:c2:91:2e:05:28:b4:18:
12:3e:83:fd:34:4d:fa:a0:d1:08:dd:ed:1f:63:5e:ba:97:d8:
58:08:f2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:11:15 2025 by rpki-client