Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/WgPDUokIULDOoR23_fynyfvKx_M.roa
File: WgPDUokIULDOoR23_fynyfvKx_M.roa (raw, json)
Hash identifier: NwpkKrEJI8Ok8ZmB6AQ+ABltD2vjaUnrA6fGbqaFIS8=
Subject key identifier: 5A:03:C3:52:89:08:50:B0:CE:A1:1D:B7:FD:FC:A7:C9:FB:CA:C7:F3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 0194258F7F3FE91E2DDD9EE1C753E122675F
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/WgPDUokIULDOoR23_fynyfvKx_M.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.186.212.0/24 maxlen: 24
185.186.213.0/24 maxlen: 24
2a0b:8780::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7f:3f:e9:1e:2d:dd:9e:e1:c7:53:e1:22:67:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a03c352890850b0cea11db7fdfca7c9fbcac7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:52:5b:6f:93:7c:e8:55:c5:d2:5e:d8:4d:a9:
7e:09:c8:c6:4c:c6:a8:7b:de:f7:5a:34:6f:67:e2:
6e:15:83:df:11:8b:d9:8e:9b:62:92:4b:63:cf:c9:
b7:aa:42:82:cb:97:e1:de:9e:28:bf:61:c6:39:fd:
4b:db:23:07:0e:79:47:ae:26:17:18:d0:37:5b:0e:
44:51:80:44:4c:bf:cb:56:03:19:dc:ef:ea:4e:21:
aa:66:49:7f:64:a0:4b:76:86:b6:6d:0a:56:2c:17:
ad:a0:e4:9c:b4:32:63:2c:e4:14:2f:89:00:9c:7f:
f3:31:3d:a6:69:c6:60:59:c5:ee:9c:67:fa:97:dc:
e6:ba:4f:4d:2f:2b:c5:dd:f4:7b:be:48:07:8b:2f:
18:0f:c8:da:8e:42:1e:41:4a:1d:1f:f3:65:c5:ab:
96:a8:fe:e5:4c:32:a5:09:96:ea:90:96:98:5a:a6:
15:0b:9a:be:a8:8b:d6:88:0a:90:17:c3:32:e2:b2:
be:ee:8e:33:74:c2:ab:3c:7a:03:04:94:82:a4:fc:
c2:98:8d:1c:23:51:6a:04:02:8c:1d:db:2e:54:2f:
de:1d:9c:a0:3f:3f:4c:6b:60:bd:4a:bf:c1:e2:f8:
6d:06:9b:34:3c:a4:a0:81:2b:72:49:b2:b5:c8:5a:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:C3:52:89:08:50:B0:CE:A1:1D:B7:FD:FC:A7:C9:FB:CA:C7:F3
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/WgPDUokIULDOoR23_fynyfvKx_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.212.0/23
IPv6:
2a0b:8780::/48
Signature Algorithm: sha256WithRSAEncryption
5d:42:6e:3e:d5:51:99:ea:aa:09:4d:1a:7c:0f:25:ea:df:16:
b9:fa:38:9f:c7:d7:54:19:a6:c6:c5:56:e3:44:63:5c:05:38:
78:12:b1:88:04:0d:d0:3b:3f:ac:7f:69:32:7b:ee:bb:47:e6:
4a:99:1c:a7:f5:97:33:b8:3e:dd:e8:e2:4a:0d:97:2c:21:5c:
eb:24:01:87:c9:ff:a3:53:73:86:73:0b:ab:88:be:23:5a:de:
d3:bf:0e:f1:9c:d2:54:2d:83:3b:4b:8f:c6:dd:74:37:db:c2:
93:9c:be:b0:14:57:1e:39:19:67:3d:83:97:d0:5e:43:3b:d5:
41:56:7a:d5:e3:1c:ab:bd:0f:bb:15:fa:c8:ef:4e:e8:91:3d:
17:20:f5:e5:01:15:5b:bc:ac:5c:2b:ed:2e:5a:57:30:7e:6d:
9b:14:9a:3b:72:ed:0f:a1:6e:53:5a:93:7c:d3:a3:e7:d4:b4:
94:6a:87:21:45:4c:aa:d7:55:26:43:14:42:da:49:8e:52:b0:
c5:a9:50:9e:83:ea:90:7a:65:b0:31:ac:88:60:7c:ba:5c:08:
9c:91:c2:78:a4:27:3d:c5:17:c6:92:47:a5:a0:39:8f:74:6e:
04:8b:39:c5:2f:27:da:67:3c:70:7d:dc:3f:ad:87:8b:50:1f:
72:03:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:34 2025 by rpki-client