Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/wVpL2j5nsvEOF_qqEsSAJNn0lXA.roa
File: wVpL2j5nsvEOF_qqEsSAJNn0lXA.roa (raw, json)
Hash identifier: f+qgp29Uq2utb65H6J3NS0Uogcoa6Kna4BXkD94lNJQ=
Subject key identifier: C1:5A:4B:DA:3E:67:B2:F1:0E:17:FA:AA:12:C4:80:24:D9:F4:95:70
Certificate issuer: /CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Certificate serial: 019426D9D095EC61D56E75AFADDFDBAD429B
Authority key identifier: DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/wVpL2j5nsvEOF_qqEsSAJNn0lXA.roa
Signing time: Thu 02 Jan 2025 11:49:56 +0000
ROA not before: Thu 02 Jan 2025 11:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33854
IP address blocks: 80.93.170.0/24 maxlen: 24
92.60.96.0/20 maxlen: 24
194.150.252.0/24 maxlen: 24
194.150.253.0/24 maxlen: 24
217.172.128.0/20 maxlen: 24
2a00:1a90::/32 maxlen: 34
2a00:1a90:8000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d0:95:ec:61:d5:6e:75:af:ad:df:db:ad:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe0ca7c1e0e8a1c7ad02d0bb828b41188ae5243
Validity
Not Before: Jan 2 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c15a4bda3e67b2f10e17faaa12c48024d9f49570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:35:4d:c9:a4:3e:b9:8e:bf:db:48:02:5a:
e9:88:b9:83:9f:c1:c0:1a:54:80:56:4b:7d:71:18:
a9:cb:d7:77:15:fd:16:70:d3:08:e5:7f:a6:fd:82:
24:6b:f7:96:8f:0e:83:de:25:59:01:60:55:4b:66:
fc:f7:b1:13:63:6e:bc:3b:59:70:2e:f0:f1:43:45:
3f:c9:19:ee:be:66:23:bb:6b:f0:c8:e1:90:d5:08:
3f:c8:70:07:3c:8b:63:06:50:8d:42:8c:87:26:11:
62:6f:97:0d:50:ba:79:87:06:48:fa:97:63:61:fe:
30:c8:ab:56:f2:6b:75:54:ff:11:80:17:ee:c2:7f:
9e:44:d5:7e:be:b7:eb:cf:c3:03:15:c9:f4:41:17:
eb:cb:2a:e3:9d:84:ee:41:d4:31:ab:ce:45:01:ff:
45:37:ac:c4:2a:17:18:c1:f3:a8:70:da:c0:87:69:
f1:f5:ff:63:98:d5:1b:06:37:14:85:6b:52:8a:79:
ff:31:66:c6:3d:b4:37:6d:17:4d:dd:88:b4:36:58:
c2:ae:04:ef:b7:2a:4f:de:17:c4:a7:d2:0e:2c:d1:
9c:dd:df:d3:91:e2:cc:80:e3:a1:3d:45:39:ff:ba:
85:6e:40:3b:e2:1e:6f:27:40:ab:7d:a8:a8:4d:e7:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5A:4B:DA:3E:67:B2:F1:0E:17:FA:AA:12:C4:80:24:D9:F4:95:70
X509v3 Authority Key Identifier:
keyid:DB:E0:CA:7C:1E:0E:8A:1C:7A:D0:2D:0B:B8:28:B4:11:88:AE:52:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-DKfB4Oihx60C0LuCi0EYiuUkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/wVpL2j5nsvEOF_qqEsSAJNn0lXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f3c8e8-c5bc-4211-a9ac-4f9112ede968/1/2-DKfB4Oihx60C0LuCi0EYiuUkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.170.0/24
92.60.96.0/20
194.150.252.0/23
217.172.128.0/20
IPv6:
2a00:1a90::/32
Signature Algorithm: sha256WithRSAEncryption
1b:ec:f3:62:76:e3:02:a5:39:53:7d:ae:df:62:ed:57:fa:13:
8c:77:af:ee:cb:ab:46:70:3e:17:7f:a8:55:3c:6a:67:a2:b3:
29:c4:65:0d:34:26:a9:b9:cf:a9:67:2a:87:96:73:f1:c9:73:
7d:91:33:21:41:7b:3c:ca:26:0e:4c:8f:58:fa:eb:5e:d4:25:
95:4a:57:9f:fc:55:50:1f:33:76:6d:3e:52:61:76:31:69:4a:
16:b4:b5:df:db:8a:33:8a:27:c9:d4:5f:77:12:6e:e1:10:f9:
68:55:5c:ef:7a:3f:a3:44:8a:ae:e8:88:7f:98:b2:08:7c:4b:
09:19:ff:ec:84:a0:29:d0:58:2d:6a:4f:e0:f8:8f:1d:1f:a4:
86:37:60:87:c0:25:cd:87:21:a2:25:8c:0e:b4:48:50:1b:26:
34:ee:0c:28:bc:9b:a7:f8:f4:4d:d3:00:1e:e7:d6:00:94:fe:
f6:c1:06:9c:f4:f6:ce:80:48:14:99:17:15:42:97:28:8d:af:
d5:ce:59:87:62:c8:df:e6:15:72:20:c7:c9:2a:1e:2b:43:d1:
30:bf:ad:be:90:f0:6d:88:98:6f:d4:b8:4a:d4:f0:bb:79:af:
c5:96:42:66:b7:41:c8:5d:48:a5:bb:ff:eb:77:ad:27:5c:eb:
03:5f:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:18 2025 by rpki-client on console.sobornost.net