Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa
File: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (raw, json)
Hash identifier: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=
Subject key identifier: 58:FA:4B:8E:FB:FA:61:B1:88:EC:6B:13:7B:5C:A0:9B:45:72:DC:B9
Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Certificate serial: 01942368DA0C1C815DE3A1CE7F932D60D966
Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa
Signing time: Wed 01 Jan 2025 19:47:41 +0000
ROA not before: Wed 01 Jan 2025 19:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.40.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:da:0c:1c:81:5d:e3:a1:ce:7f:93:2d:60:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05
Validity
Not Before: Jan 1 19:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58fa4b8efbfa61b188ec6b137b5ca09b4572dcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:99:c7:1f:46:6a:93:c9:6c:57:80:f5:94:
f2:cf:09:77:62:bd:11:7e:e6:10:0e:92:90:a9:d7:
a7:3c:f8:0a:63:b2:dc:b5:d3:b3:25:69:60:67:e2:
08:ee:21:ef:3b:0a:ef:8b:c7:71:a1:87:c5:8e:ff:
da:fc:f0:48:33:dc:7f:2c:ad:a1:ac:65:5c:62:a4:
04:9b:d0:55:d8:4f:95:40:4e:dd:8d:5e:f8:ff:f3:
12:1e:51:a9:01:90:c5:74:87:15:ac:bd:89:35:b3:
fd:82:ef:77:c6:3c:87:51:9c:84:63:2e:a2:46:f5:
2d:80:32:5a:d7:8c:4d:79:bf:e0:a4:1a:aa:40:c0:
4b:27:8d:67:00:1e:f7:b9:08:f7:4e:97:27:4a:f6:
ce:4f:01:c3:54:4d:a9:a2:4c:13:7c:e0:3e:2f:ef:
46:26:df:16:b2:f8:50:12:c4:a4:e8:2d:6d:d8:7e:
4f:5a:ea:13:75:00:b3:56:a4:db:73:ea:0c:8d:d4:
4b:0d:fb:1c:7f:ec:1c:c1:4d:37:40:1b:bd:64:5f:
3e:ab:e3:e0:2d:88:45:d4:82:63:21:d6:7d:d2:24:
1d:c9:eb:c2:ef:c2:e3:c9:13:47:1e:e4:a5:0f:af:
ed:68:a7:19:72:44:ce:7c:15:95:d8:48:04:77:77:
51:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:4B:8E:FB:FA:61:B1:88:EC:6B:13:7B:5C:A0:9B:45:72:DC:B9
X509v3 Authority Key Identifier:
keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.110.0/24
Signature Algorithm: sha256WithRSAEncryption
33:68:f1:2f:5a:e9:cd:c8:e4:01:c0:fd:4b:ac:0d:1f:0d:25:
70:bd:02:9f:f2:c0:c3:43:9c:ec:bb:ce:64:5d:41:40:d2:8c:
c0:e1:dc:62:db:56:be:ae:df:65:63:14:e4:a6:46:43:4b:07:
c6:00:bc:3a:aa:4f:10:8a:93:65:74:5f:02:1d:b4:14:40:90:
99:af:f9:03:70:74:4b:ca:54:23:ca:f8:ad:9a:f1:f2:a8:89:
fd:46:97:d8:b0:21:7d:b9:86:5f:95:d7:0f:3d:83:9b:77:8d:
83:29:4d:00:a5:de:e5:ae:42:c4:6c:3d:01:c8:c8:f2:d6:90:
12:cc:db:02:a2:a1:2b:d3:ac:9c:63:21:59:85:79:77:f2:63:
9c:0d:61:4a:fa:42:e4:56:d4:c2:fa:ec:18:22:b1:eb:5a:81:
30:a2:ec:c3:78:2c:bf:56:57:b8:86:d8:19:9e:38:65:eb:0a:
9e:1a:48:52:b4:95:0d:85:89:eb:6b:5d:2f:c3:d1:47:db:92:
b3:e6:93:de:ae:ac:7a:12:69:6f:90:0f:8d:03:57:64:6e:cd:
3f:3f:92:99:4a:2a:2a:e2:dd:1c:a3:8e:db:e5:26:b7:95:01:
54:2a:e1:1a:bb:86:41:cc:32:b4:ff:21:63:b4:1e:f5:29:48:
b1:4a:3c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:26 2025 by rpki-client