Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/yWqbv8m78zRPBYHcRQrpHDhQyj8.roa
File: yWqbv8m78zRPBYHcRQrpHDhQyj8.roa (raw, json)
Hash identifier: SfVZhow6dDvaY/ddg+fEVIx1y/Hb6m65rBhEpqp4rjw=
Subject key identifier: C9:6A:9B:BF:C9:BB:F3:34:4F:05:81:DC:45:0A:E9:1C:38:50:CA:3F
Certificate issuer: /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial: 0194266C3E223A8ECF895319702646AA7256
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/yWqbv8m78zRPBYHcRQrpHDhQyj8.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205388
IP address blocks: 146.19.42.0/24 maxlen: 24
185.216.212.0/22 maxlen: 32
2a0b:bbc0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3e:22:3a:8e:cf:89:53:19:70:26:46:aa:72:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c96a9bbfc9bbf3344f0581dc450ae91c3850ca3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:a1:d2:55:5c:c0:7a:16:fe:08:0e:0c:d9:
2f:e2:86:94:ba:a3:42:b9:7d:f1:cb:0d:9b:96:50:
66:07:ee:36:68:15:82:6f:50:2d:c1:bf:08:ac:b1:
81:6d:5b:0a:30:0f:eb:15:50:2b:13:57:07:52:2d:
ad:d0:e1:de:88:d0:2b:b6:bd:47:18:55:c6:73:d8:
a2:8d:ee:9f:97:ed:1b:17:f6:6d:85:9f:f1:3d:3c:
b3:51:fe:e1:f4:c4:d9:0d:66:a5:3a:98:bf:89:97:
e6:eb:e0:65:1e:d5:09:e2:6e:a4:5e:40:c2:9f:5a:
40:bf:3d:43:e6:e0:0d:db:69:17:31:1e:58:22:e0:
01:f0:de:fc:72:85:73:70:25:93:00:ce:9f:88:92:
61:3d:b4:1b:52:5e:9e:a5:38:e7:c9:9d:cf:45:b9:
64:b4:95:8f:bd:66:14:34:12:7e:33:31:53:4c:41:
0a:87:37:b0:fc:51:7a:cb:b4:0d:a5:3b:9a:82:06:
bd:f3:5e:a3:a0:db:70:60:dc:58:9f:a4:44:6d:8b:
09:6e:d6:bb:8d:6f:e0:49:1b:c6:5d:74:70:13:fb:
c5:19:40:bb:12:6b:ad:47:74:3f:cc:81:ce:1c:67:
f5:14:ab:c4:fe:b4:ab:4b:77:2a:4b:7c:92:7d:2a:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6A:9B:BF:C9:BB:F3:34:4F:05:81:DC:45:0A:E9:1C:38:50:CA:3F
X509v3 Authority Key Identifier:
keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/yWqbv8m78zRPBYHcRQrpHDhQyj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.42.0/24
185.216.212.0/22
IPv6:
2a0b:bbc0::/32
Signature Algorithm: sha256WithRSAEncryption
33:f6:de:4d:30:a4:4b:c9:f3:29:9b:7b:f8:ee:c5:3a:b8:bc:
81:a6:06:18:fd:38:aa:56:1a:0f:d3:de:16:ac:c0:55:d1:2c:
d2:7e:cd:ff:81:d1:8a:6c:34:3c:06:24:4a:de:cf:65:f1:44:
7e:6b:70:bf:52:1b:01:bd:19:37:5a:bd:61:a4:0f:ce:ca:26:
e3:d0:d2:8a:ba:28:5e:51:c0:da:2a:c2:9e:52:68:7c:b1:9a:
cc:1f:a9:58:fc:95:47:c5:ac:8b:b2:4c:05:0d:53:af:3d:fa:
1a:f4:6b:88:29:c6:ed:f8:b6:ac:c8:2c:67:fe:7e:85:5c:3f:
5c:99:f6:61:76:07:a1:75:de:85:71:7d:a6:9d:f5:f6:45:dc:
8d:cd:ea:f7:74:cf:9a:d6:ac:65:16:cc:01:33:f0:ae:1d:16:
f7:a7:03:22:5d:4d:30:d9:3e:1c:32:5d:07:c8:a6:71:25:28:
96:23:63:c9:cd:17:01:85:41:16:08:b0:a3:a7:e6:47:62:76:
72:2e:cc:c0:af:3f:0f:7e:7c:36:6f:30:32:45:f0:d9:85:dc:
dc:56:61:ce:95:27:1b:43:ea:23:17:72:4b:34:42:b5:c8:8b:
d6:4f:6b:d0:c6:76:7d:a1:c4:e7:96:c8:ec:61:fc:e2:db:4f:
1f:44:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:30 2025 by rpki-client