Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/WvSF42Su_uVbed2nx9KzRAL1sRU.roa
File: WvSF42Su_uVbed2nx9KzRAL1sRU.roa (raw, json)
Hash identifier: lPXNc0YWMoGoLJAS5ON0UYrpHOprm+EoHdfpx9EkpYg=
Subject key identifier: 5A:F4:85:E3:64:AE:FE:E5:5B:79:DD:A7:C7:D2:B3:44:02:F5:B1:15
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01944CEDC76A0DA037E09DA8E757BBF7CAD7
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/WvSF42Su_uVbed2nx9KzRAL1sRU.roa
Signing time: Thu 09 Jan 2025 21:17:18 +0000
ROA not before: Thu 09 Jan 2025 21:17:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 164.138.8.0/24 maxlen: 24
164.138.9.0/24 maxlen: 24
164.138.10.0/24 maxlen: 24
164.138.11.0/24 maxlen: 24
164.138.12.0/24 maxlen: 24
164.138.13.0/24 maxlen: 24
164.138.14.0/24 maxlen: 24
164.138.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:ed:c7:6a:0d:a0:37:e0:9d:a8:e7:57:bb:f7:ca:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Jan 9 21:17:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5af485e364aefee55b79dda7c7d2b34402f5b115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:87:c7:ad:7c:d5:40:3c:a2:84:9d:3d:35:
8f:fc:df:d9:33:d2:39:ac:b8:c2:dc:1c:74:8e:76:
fe:aa:e0:a4:ec:13:c1:a3:61:48:33:09:5f:55:8a:
eb:d5:a9:c5:78:fd:b2:5f:02:8a:7e:d1:52:31:9e:
4b:d5:2d:1a:14:e4:1b:b1:3a:61:d1:0a:1b:ec:96:
ce:71:c6:7b:21:74:24:26:bd:0c:37:67:21:38:0c:
4f:5b:b1:90:b7:5f:61:79:e3:ad:c6:57:27:50:d3:
ca:a5:3a:d7:5d:56:94:6f:33:31:0b:29:82:96:81:
2c:1e:6a:ea:f2:a3:54:59:1b:9c:74:38:24:57:22:
f6:f0:a9:86:bb:bf:64:84:93:95:82:c3:0b:05:5e:
1a:ea:c3:63:c3:0e:4f:70:e9:de:a1:e7:9f:d6:be:
b7:e7:1b:4c:12:e7:39:df:5d:fb:45:53:2a:5d:4a:
0c:2a:7c:3f:cc:8e:b2:3f:84:c6:d1:0b:00:b7:67:
33:e1:d5:10:0a:2e:2f:f3:d6:54:c9:a8:9c:78:2b:
f8:c1:ff:dd:b7:c9:d2:fc:81:9b:98:0e:a6:14:93:
e2:1a:4b:fb:9c:3f:e8:84:05:24:d6:ec:68:15:a8:
f0:de:a2:b2:41:54:51:35:f9:61:36:54:5c:b6:05:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F4:85:E3:64:AE:FE:E5:5B:79:DD:A7:C7:D2:B3:44:02:F5:B1:15
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/WvSF42Su_uVbed2nx9KzRAL1sRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.8.0/21
Signature Algorithm: sha256WithRSAEncryption
40:6f:a0:b9:b3:a8:6a:71:a3:db:34:64:00:fb:9c:02:1d:95:
89:12:f5:95:cf:7a:7f:a2:16:b9:55:9e:f7:82:da:c4:1a:6f:
f8:cb:35:12:ba:c0:1c:1d:d8:db:09:ab:17:03:ff:02:12:af:
87:ac:37:57:23:0b:2e:24:64:cd:a0:0c:2c:cb:21:db:3e:b4:
5d:6a:2c:bb:a4:8b:fd:77:65:ba:aa:97:18:68:3a:dd:0b:0f:
71:0c:6e:a5:7b:53:a0:4e:a2:d9:73:bb:b5:98:30:20:8a:2c:
83:4e:49:e6:78:66:76:27:21:16:e7:0b:89:da:5c:b1:75:03:
9a:72:ea:ee:b0:83:8f:9c:7e:7c:14:40:1e:6c:6e:a3:2c:97:
c7:69:8c:91:b6:01:9b:79:b5:4a:b5:e2:85:db:aa:5f:5b:56:
2d:f4:19:c1:54:74:8e:9e:0e:0b:15:59:53:4f:96:6d:72:b5:
1f:52:87:63:09:f4:5d:00:52:3d:64:25:21:a3:3b:f8:27:c1:
f3:99:77:68:92:55:0f:ad:c4:17:0b:3f:07:3e:cf:7e:b8:f7:
cc:a8:df:84:0f:ba:4f:89:8d:ea:6f:9c:6c:f4:3f:ae:67:47:
42:3d:b6:04:3c:7a:6b:b0:71:3e:83:11:cd:c9:ab:9d:a9:64:
13:50:06:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:16:49 2025 by rpki-client on console.sobornost.net