Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/wx1b7wSo3IENdo5aRxstuEb6e_8.roa
File: wx1b7wSo3IENdo5aRxstuEb6e_8.roa (raw, json)
Hash identifier: Pjk1ZSdAEd1vWaEOWohydmZmcsdRJu6/0hd4TtAw+OQ=
Subject key identifier: C3:1D:5B:EF:04:A8:DC:81:0D:76:8E:5A:47:1B:2D:B8:46:FA:7B:FF
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 01942067C30E31F7FD0C2F42FF7E353F551D
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/wx1b7wSo3IENdo5aRxstuEb6e_8.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.144.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c3:0e:31:f7:fd:0c:2f:42:ff:7e:35:3f:55:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c31d5bef04a8dc810d768e5a471b2db846fa7bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:a1:f4:09:85:df:a9:ff:90:63:95:6c:ef:
de:a2:86:5c:ce:29:4c:26:17:d9:1d:0b:de:ce:2f:
52:db:9a:e9:20:ed:ea:54:27:f5:02:49:13:c6:60:
86:72:1e:c8:3f:1c:e3:26:0c:7a:4c:50:42:23:6d:
d3:46:f7:f7:3f:94:e3:d9:45:53:60:8e:94:57:6a:
c4:89:7a:d2:04:59:07:0e:14:d6:50:a1:c7:d9:70:
84:e0:7e:75:e4:18:c8:e8:5e:60:f4:7b:24:80:de:
ca:c3:04:45:ba:b3:a8:9f:5e:e5:a2:ce:5d:18:8e:
86:95:54:35:38:b7:94:97:06:bd:14:f9:bf:64:2c:
37:a0:87:a0:be:fb:96:8e:7a:42:a2:21:82:f8:5d:
ac:fb:97:7c:9a:83:7c:74:85:12:cc:dd:a0:4e:37:
37:5c:db:71:1f:78:ad:a8:6c:d4:2e:d8:78:9f:5d:
74:bb:e6:a5:56:76:93:8b:d7:29:0a:7c:fe:4c:29:
bd:be:52:f5:44:c8:96:e2:5c:b1:2e:da:cc:31:8d:
26:ec:61:d9:01:4a:3b:0f:f7:a9:93:0e:18:a1:0c:
e1:dc:46:53:32:32:8f:57:c3:b7:f1:db:2c:90:8d:
65:4f:d7:e3:a0:7b:1e:1f:42:af:0c:16:29:b2:ea:
89:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1D:5B:EF:04:A8:DC:81:0D:76:8E:5A:47:1B:2D:B8:46:FA:7B:FF
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/wx1b7wSo3IENdo5aRxstuEb6e_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:3c:98:56:02:78:18:70:da:85:3c:06:42:77:31:53:35:bb:
03:91:d6:e1:b0:d0:23:8e:b3:8f:78:e7:6b:2c:3d:f7:4c:74:
db:07:93:a1:c6:ba:d6:07:ba:57:04:27:01:15:02:b1:18:99:
69:55:08:9f:ba:c3:22:cd:70:f4:74:b0:99:c6:da:57:d3:b7:
9b:fa:35:64:91:6d:69:5d:81:98:3c:86:ce:d5:3d:e0:d7:24:
11:11:ba:e0:c0:f6:14:1d:e9:a3:47:8c:cd:b5:6b:1c:34:3f:
26:07:7f:51:29:22:09:be:4d:cb:6c:aa:a5:a9:cc:54:a5:11:
54:2b:f2:f7:e0:a1:aa:03:02:e9:00:02:17:6c:3c:05:e3:cd:
9a:14:31:63:3a:93:e6:75:9b:c5:8f:ba:e9:80:b5:7e:df:c3:
4b:93:6c:00:d6:f5:1e:19:58:a4:e0:35:bd:76:e2:db:4d:7a:
1b:05:bc:bc:51:4a:63:cc:4a:f3:cc:d4:d8:b9:b6:eb:94:2a:
7b:d6:a8:cc:05:64:b8:57:d4:45:c9:b8:e5:73:42:be:bb:ec:
0c:82:08:00:df:e2:c1:66:52:af:c6:1d:83:f2:53:db:85:8a:
2a:23:e6:b9:7b:2d:d1:f8:c2:6e:7a:45:47:f1:65:84:66:f4:
6e:ca:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:12 2025 by rpki-client