Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/WF76jFs55ZNE75IYqc8YUcRwiwc.roa
File: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (raw, json)
Hash identifier: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=
Subject key identifier: 58:5E:FA:8C:5B:39:E5:93:44:EF:92:18:A9:CF:18:51:C4:70:8B:07
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 019420D62C8574D2BEA3BF1BD27E2E82070F
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/WF76jFs55ZNE75IYqc8YUcRwiwc.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1764
IP address blocks: 185.57.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2c:85:74:d2:be:a3:bf:1b:d2:7e:2e:82:07:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=585efa8c5b39e59344ef9218a9cf1851c4708b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ef:b5:2d:fa:ce:9d:8d:4b:d8:93:7c:6c:30:
b6:27:66:69:2f:fe:8c:56:54:51:00:e7:56:43:b5:
5b:f0:73:03:00:42:c7:25:26:ba:1f:3e:ef:f9:03:
d1:86:bf:0e:8e:02:89:4b:fe:66:ba:d5:3b:a2:9c:
16:4b:96:dd:e9:34:e3:f0:d8:63:16:32:44:a9:64:
19:62:5b:0f:36:aa:f7:12:5b:b3:7f:f4:cf:39:0d:
da:b4:7b:25:65:0f:e9:77:3e:0f:22:88:8b:0b:9b:
9f:4d:4b:fd:63:6f:25:bb:7a:93:2d:8a:47:45:fb:
e9:be:c9:c9:6b:df:f8:ca:dd:b5:57:b6:1f:d1:97:
67:42:6a:99:c5:d4:c6:5f:8c:70:9e:24:1a:3a:87:
32:64:0e:15:75:43:27:36:a3:87:2e:ce:3e:61:46:
66:eb:0c:ce:c5:c1:5c:6e:c6:75:0a:ee:cd:1a:ef:
43:e4:e9:04:7d:a5:7d:1f:94:f6:44:ab:77:83:20:
2b:f0:be:67:a6:96:c5:3a:22:48:a3:54:74:6a:b4:
7a:3f:02:4b:e4:e6:5d:1e:3f:dc:1b:68:e1:30:3c:
2d:4f:16:e9:24:75:73:ac:86:4b:1d:7c:eb:40:27:
82:b6:ac:a8:d2:b5:a8:fe:f4:4e:13:a8:5c:7e:2b:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:FA:8C:5B:39:E5:93:44:EF:92:18:A9:CF:18:51:C4:70:8B:07
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/WF76jFs55ZNE75IYqc8YUcRwiwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.51.0/24
Signature Algorithm: sha256WithRSAEncryption
70:3a:71:0f:d7:36:ed:f4:2f:40:0a:be:aa:a7:da:94:e3:70:
a6:7a:ba:9f:2d:ab:d1:f2:2a:18:04:48:10:0a:aa:30:7e:62:
15:27:b2:2f:13:6a:73:32:65:0e:5c:ba:23:a9:ea:4f:a7:b2:
0d:b5:3e:12:4b:94:63:0a:0f:cf:da:1e:0a:00:ea:2f:5c:d4:
bb:e6:e3:1a:57:5f:58:4a:a7:85:89:d0:97:fa:47:af:d3:a4:
0c:28:43:d2:f7:c0:ef:0e:83:f4:21:9b:2b:a7:2c:ae:2d:d5:
8e:d1:8e:88:cd:9a:10:14:b4:35:43:44:1c:62:d5:d5:d6:61:
8b:91:ce:20:55:9a:7e:fd:4a:51:c9:49:e5:01:9a:73:62:9a:
a9:ef:26:dd:56:7d:3a:aa:00:fc:36:c6:50:1b:6c:f2:ed:a9:
47:b5:4f:f4:5b:01:87:4c:2b:64:7a:60:24:1b:03:86:52:96:
e4:9c:8b:c5:f6:c0:e1:0e:1b:6f:51:e3:7f:a3:48:17:90:b2:
d0:47:c3:80:9b:70:85:75:06:d8:f8:f6:a5:84:a2:56:75:5a:
fe:b3:60:5f:b5:3f:c9:6f:9a:67:55:23:51:93:03:d5:9d:3d:
ce:b5:04:a7:e7:5c:3a:c1:5a:5a:63:6a:b8:5c:f4:73:ff:55:
2a:8c:ee:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:36:58 2025 by rpki-client