Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wF_m4hcDVRIqJHZP62XpDfs5y9A.roa
File: wF_m4hcDVRIqJHZP62XpDfs5y9A.roa (raw, json)
Hash identifier: eUhk4YRQ29UJLc7wMI/jYs4YceK7hf7xAqr+PkasWbA=
Subject key identifier: C0:5F:E6:E2:17:03:55:12:2A:24:76:4F:EB:65:E9:0D:FB:39:CB:D0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C030F5B5EAB82DCFA078140C016F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wF_m4hcDVRIqJHZP62XpDfs5y9A.roa
Signing time: Thu 02 Jan 2025 17:51:24 +0000
ROA not before: Thu 02 Jan 2025 17:51:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213094
IP address blocks: 185.252.160.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c0:30:f5:b5:ea:b8:2d:cf:a0:78:14:0c:01:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c05fe6e2170355122a24764feb65e90dfb39cbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:d9:95:dd:1e:6d:2e:3b:c2:76:2f:eb:3a:
0f:88:af:24:a7:ad:46:80:50:2b:a8:87:61:77:fb:
7b:0c:53:8f:0e:73:a4:4f:f9:0b:0f:8d:23:d6:a8:
46:3e:a6:ff:1a:ad:35:24:d7:95:7e:40:96:5d:6f:
13:33:06:64:5a:e8:15:80:ad:fd:ea:53:7b:53:cb:
fc:3d:00:4f:43:a9:a7:d6:c7:1b:38:0b:59:c7:2b:
c4:73:64:92:3b:0f:bc:91:51:56:5b:59:e5:77:99:
fa:eb:dc:e6:c2:18:ba:c3:7e:ad:fb:60:71:05:b2:
11:34:4a:8b:78:fc:ee:1b:f6:61:87:96:dc:70:c8:
50:5d:57:19:81:e9:ca:04:1d:f2:88:7d:48:de:b4:
0e:18:61:2b:15:a9:b3:50:03:50:63:6c:8c:ab:6f:
09:02:16:05:d4:16:02:78:fe:fb:30:14:ba:6c:0b:
73:7c:4a:63:6a:bc:b5:dd:a7:50:45:90:f8:94:7e:
0d:75:6e:94:2d:e1:0c:d9:dd:85:c4:c0:9d:be:18:
bc:d6:d1:21:13:9d:8a:1b:ad:4b:c6:cb:22:72:91:
f8:f1:e7:ec:e2:c7:81:2e:fe:ed:8e:4b:16:73:13:
66:09:81:8c:64:58:b2:c5:45:ac:6e:9e:87:22:5f:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5F:E6:E2:17:03:55:12:2A:24:76:4F:EB:65:E9:0D:FB:39:CB:D0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wF_m4hcDVRIqJHZP62XpDfs5y9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:3d:ec:1c:d9:c1:f9:5b:5d:cf:82:f7:b5:6f:60:36:c6:f0:
9b:d5:5f:88:b6:30:2d:16:29:2e:93:f9:d4:9b:1b:6a:21:fc:
f0:83:67:69:fb:be:e6:6c:1b:a1:2c:ae:38:19:1f:90:5a:be:
73:ab:2e:2e:b2:86:6e:02:7f:4b:07:09:4a:80:63:af:86:1c:
7b:f0:89:85:bb:5d:5e:46:16:f9:a6:a3:10:44:d5:00:09:75:
ff:1b:b7:10:21:56:13:3f:1b:06:b3:b4:8f:bf:3d:fd:06:7b:
18:ea:21:86:16:8d:43:a5:7f:47:7b:d2:0a:f1:4c:db:fd:32:
e0:1f:93:1c:f7:b9:4a:a6:2c:b6:b8:39:65:db:54:98:78:f7:
8a:fd:ef:18:2a:54:a4:42:fd:fa:c2:ba:56:56:94:44:ed:f7:
a8:0a:44:98:96:93:2a:40:73:95:d5:4c:a1:df:15:95:72:d1:
77:3c:8e:a0:df:90:54:0b:8f:98:c6:7b:9a:ff:c9:4f:9a:7f:
56:4e:e5:56:52:6c:ed:af:52:64:3e:5e:25:f1:a1:f8:81:ca:
12:db:ad:e5:22:15:31:2e:9f:93:2c:be:b1:23:cd:31:67:47:
cc:2c:63:ce:ab:a7:4d:c6:f9:1a:56:23:74:23:ee:94:13:d8:
ff:dc:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:00 2025 by rpki-client