Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/WYyFBT5nmwxFR4gPo5unCY2UhVc.roa
File: WYyFBT5nmwxFR4gPo5unCY2UhVc.roa (raw, json)
Hash identifier: Z4ZpbpPZKoHHj3yG0X2Ro2qP/JaWFIzV9WlYUI0Hg8s=
Subject key identifier: 59:8C:85:05:3E:67:9B:0C:45:47:88:0F:A3:9B:A7:09:8D:94:85:57
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 019421442252741A2BEDDB46F3193401AAC0
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/WYyFBT5nmwxFR4gPo5unCY2UhVc.roa
Signing time: Wed 01 Jan 2025 09:48:20 +0000
ROA not before: Wed 01 Jan 2025 09:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213245
IP address blocks: 185.19.82.0/24 maxlen: 24
185.215.44.0/24 maxlen: 24
185.215.45.0/24 maxlen: 24
185.215.46.0/24 maxlen: 24
185.215.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:22:52:74:1a:2b:ed:db:46:f3:19:34:01:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Jan 1 09:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=598c85053e679b0c4547880fa39ba7098d948557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:4b:41:c0:f9:95:33:fb:df:d1:e4:1e:c0:
e7:2d:58:8d:bf:6f:52:38:9a:ab:80:37:95:e2:ef:
a0:01:e7:cb:e2:f4:2d:6d:8f:38:ca:18:70:04:9b:
3c:31:17:ed:66:f7:cc:12:ba:5d:af:8e:f1:54:08:
50:b3:66:17:21:55:93:1c:47:a7:96:55:44:cd:5d:
9a:09:d4:7b:d6:d4:35:84:2e:8c:c0:6c:bc:61:27:
17:af:6d:df:dd:f8:7e:fa:1e:97:43:62:35:b2:82:
b1:a1:ab:28:39:ca:82:73:ba:62:10:52:f3:7f:0b:
f9:62:fe:c2:23:34:7e:ce:7f:4f:31:e0:0d:ea:6c:
6f:3a:8d:a9:d1:a8:94:9f:e9:fc:de:41:1a:a8:c7:
f6:6b:6e:c1:7c:43:b2:ce:d8:b2:8c:61:73:df:96:
84:69:9b:e8:06:4e:50:57:55:f2:22:04:88:ef:25:
5e:c7:58:f8:b2:93:9a:b3:6d:17:79:6e:a7:eb:6b:
88:41:c3:fc:25:d7:8d:0f:c1:f0:6c:40:db:4e:d8:
e9:e1:49:3b:13:dd:12:10:46:ec:b6:e0:34:5a:1a:
63:72:20:ca:3c:48:36:4d:80:00:2d:4d:30:4a:93:
19:40:3f:a4:a5:08:33:c1:08:fc:28:f2:0a:2a:dd:
80:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8C:85:05:3E:67:9B:0C:45:47:88:0F:A3:9B:A7:09:8D:94:85:57
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/WYyFBT5nmwxFR4gPo5unCY2UhVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.82.0/24
185.215.44.0/22
Signature Algorithm: sha256WithRSAEncryption
21:d8:6f:fc:e2:fb:42:6d:bd:f3:4d:96:e6:77:d0:7a:21:5b:
96:78:bd:a7:1e:49:d4:c3:c4:a6:0a:46:6b:ce:79:a5:5f:41:
0f:cb:58:ee:ec:73:85:4d:55:d8:86:92:8b:00:35:b0:50:7c:
6c:1e:85:24:29:31:57:28:7c:74:00:52:5a:fb:1d:64:88:32:
ff:89:04:aa:d0:3f:2b:e1:97:78:01:41:09:fb:cd:e2:2f:14:
c1:2d:f3:2b:0b:10:67:2b:4c:ee:ad:2d:42:d8:08:3c:d1:42:
a2:67:aa:f1:b2:5f:29:9b:c6:31:29:a8:4b:7b:c8:06:37:f0:
5e:24:2e:23:66:b0:f7:33:ce:a4:0b:29:9e:c9:6a:29:fb:29:
a3:a2:c6:df:b0:4d:e4:6e:45:ad:d1:69:28:2d:bc:da:93:2d:
53:8b:b2:ef:81:9f:be:f0:68:ce:06:b8:7a:67:69:e4:4f:f9:
60:d7:0d:da:89:61:ad:34:ca:43:9c:ae:50:cd:98:03:3f:93:
47:b8:4a:6a:ef:26:60:64:70:3f:e4:d3:51:19:68:92:04:37:
50:cc:8c:34:4b:ae:20:96:e2:0f:2e:25:ab:b1:68:cd:88:3a:
9e:2b:1e:86:3e:c5:3e:97:67:ac:46:82:68:af:80:3c:a7:32:
f7:95:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:10:36 2025 by rpki-client