Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/WVIwWkHHRVsyE849KIs6dtAKS5w.roa
File: WVIwWkHHRVsyE849KIs6dtAKS5w.roa (raw, json)
Hash identifier: q1o5hXghtzsQxdwG9DCka1tT8MljckbYQzr00THvBZw=
Subject key identifier: 59:52:30:5A:41:C7:45:5B:32:13:CE:3D:28:8B:3A:76:D0:0A:4B:9C
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 0194221FC4CC885701D453DBA9DC6A90E9BB
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/WVIwWkHHRVsyE849KIs6dtAKS5w.roa
Signing time: Wed 01 Jan 2025 13:48:14 +0000
ROA not before: Wed 01 Jan 2025 13:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 185.218.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c4:cc:88:57:01:d4:53:db:a9:dc:6a:90:e9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Jan 1 13:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5952305a41c7455b3213ce3d288b3a76d00a4b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:41:9c:87:ec:96:47:15:9c:18:3f:4c:67:
12:57:0d:ba:d0:2b:bc:ee:a8:1a:6b:c4:22:e3:de:
90:67:8d:b3:b2:3d:cc:36:da:25:3c:66:a7:55:03:
60:87:9a:4a:80:4b:45:29:ff:f7:a2:17:7a:26:13:
1d:ba:01:4b:37:13:93:26:2c:c5:ff:94:09:48:17:
00:b6:7d:a7:cc:61:4f:80:79:c8:f4:2c:dd:77:11:
96:4a:6d:0f:0b:aa:f1:b2:66:ce:bd:2e:01:ec:7d:
67:4f:f4:61:69:f9:b4:f3:69:5f:b6:61:46:28:bd:
f2:e0:0e:f9:32:40:63:f2:92:85:57:22:3d:39:70:
cd:59:af:b9:42:7f:f2:2d:44:c5:ee:da:8f:f8:45:
6c:ad:40:66:21:74:44:84:a0:25:cb:ad:dd:28:7b:
7e:b3:5e:e7:be:94:59:50:28:c3:4b:0c:d2:46:d8:
3e:e5:4b:53:a7:7e:75:86:8d:20:47:55:60:7c:b4:
e8:ad:23:93:3c:e0:fe:5a:e8:32:41:48:2d:84:af:
c6:b8:ac:4c:d0:61:d6:63:6f:ee:fb:1c:ba:58:f0:
98:85:17:78:db:af:91:8f:31:8e:e8:ea:85:b3:de:
62:4a:ae:b1:73:d6:d9:93:c8:64:9e:f7:13:19:f6:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:52:30:5A:41:C7:45:5B:32:13:CE:3D:28:8B:3A:76:D0:0A:4B:9C
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/WVIwWkHHRVsyE849KIs6dtAKS5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.143.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b5:66:c8:89:4e:ca:88:50:e1:ee:6a:68:b9:08:59:c7:c2:
03:09:a7:b8:73:4a:36:18:98:f6:f1:97:14:cc:1b:19:4a:5c:
ee:d3:83:57:c5:13:3a:1f:8a:ff:db:c3:b4:02:a9:9f:c3:ce:
6a:6f:6f:ad:cc:c2:ad:51:42:ba:1e:83:08:08:34:8c:0a:86:
39:7b:1e:0f:8d:66:7a:e0:14:43:93:05:f2:d4:5d:e3:a3:cb:
da:3d:1e:c2:f6:0d:38:c4:e5:87:88:d5:e5:11:7a:80:1f:18:
4c:5c:00:d1:2a:b0:26:e3:8e:00:4b:e2:4c:6a:b2:1f:84:c8:
01:c6:11:d1:46:57:0e:de:7f:52:e6:24:78:ac:ca:24:91:54:
53:45:db:fb:7e:e6:81:36:52:d8:4d:42:3d:57:7a:36:67:4e:
6c:ba:be:52:02:05:05:1d:fe:94:7a:26:c8:42:12:83:9f:de:
f1:ac:85:df:e5:27:fb:98:89:fc:df:55:0c:63:c8:7e:ea:08:
54:4c:4b:54:5f:08:75:2f:35:f9:4c:b2:7b:20:88:3a:39:17:
5f:3e:a6:b7:f6:63:79:cb:6b:9b:0f:fa:b5:f4:a2:e4:83:c8:
1f:c1:7e:21:15:0e:0c:e7:46:22:65:5b:f5:2d:d4:65:95:2b:
49:7b:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:40 2025 by rpki-client