Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/1-V2Wppi99tQ0ICJCe3K1wVDWeJM.roa
File: 1-V2Wppi99tQ0ICJCe3K1wVDWeJM.roa (raw, json)
Hash identifier: 8LD/75b8b3uJIXBI6PmoCNFAOUQg00FVymHzyQOdHPs=
Subject key identifier: F9:5D:96:A6:98:BD:F6:D4:34:20:22:42:7B:72:B5:C1:50:D6:78:93
Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial: 0195A52DFEE5A8EE5A6B35448F9A09EC5997
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/1-V2Wppi99tQ0ICJCe3K1wVDWeJM.roa
Signing time: Mon 17 Mar 2025 17:36:49 +0000
ROA not before: Mon 17 Mar 2025 17:36:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201971
IP address blocks: 185.57.188.0/22 maxlen: 24
185.57.188.0/23 maxlen: 23
185.57.190.0/24 maxlen: 24
185.57.191.0/24 maxlen: 24
2a04:de40::/29 maxlen: 64
2a04:de40:80::/42 maxlen: 42
2a04:de40:c0::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:2d:fe:e5:a8:ee:5a:6b:35:44:8f:9a:09:ec:59:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Validity
Not Before: Mar 17 17:36:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f95d96a698bdf6d4342022427b72b5c150d67893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:23:bc:27:fe:4e:32:6d:14:3c:90:f3:dc:
53:a0:62:5f:ce:0e:e8:7c:75:2c:9f:a9:d2:34:7c:
bd:76:7f:a6:b1:84:0f:bf:76:c1:1d:fb:f5:44:0f:
cb:03:20:52:bc:2b:63:2f:ab:fd:d3:dd:bd:72:ed:
c1:a7:25:8c:d6:cf:1b:83:06:c3:36:37:c3:2a:ff:
b4:ac:e2:99:a7:bc:34:f6:e4:43:0f:db:bb:88:ce:
75:a7:31:9e:26:ba:92:fd:ed:ee:05:7f:4a:6d:aa:
6b:ee:de:14:2e:4d:c9:29:a2:60:b0:4c:6b:ea:52:
db:38:19:42:0f:81:b4:08:92:60:aa:c0:40:fa:4c:
17:79:d7:b0:20:cf:e4:3d:33:0a:4d:ea:49:b6:d9:
17:65:6d:5b:6f:4f:9c:b0:37:1e:dd:94:96:9e:f7:
61:14:90:70:f1:e1:a2:31:82:ad:36:f3:81:4e:ef:
f1:85:c9:48:62:92:54:fd:6c:98:19:0c:c2:e9:23:
be:64:6e:73:0a:d8:24:b8:07:db:ee:d9:a6:e4:51:
8f:bf:52:1d:72:06:20:64:90:49:99:df:df:34:e7:
84:4f:6f:87:8c:bf:6d:78:97:d8:f1:c0:6b:f9:01:
e8:ae:af:a9:df:ad:6c:df:96:b7:f5:ca:75:e3:63:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5D:96:A6:98:BD:F6:D4:34:20:22:42:7B:72:B5:C1:50:D6:78:93
X509v3 Authority Key Identifier:
keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/1-V2Wppi99tQ0ICJCe3K1wVDWeJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.188.0/22
IPv6:
2a04:de40::/29
Signature Algorithm: sha256WithRSAEncryption
52:d6:c0:97:eb:ab:f5:c6:31:63:cc:26:5f:0a:e7:f0:cb:c8:
25:3b:83:ce:58:5b:66:bd:29:02:ab:ca:01:cc:31:af:67:6a:
ea:ac:a5:05:7e:db:72:e0:78:d9:2f:be:51:5f:b5:98:36:c2:
7f:01:70:89:f0:17:59:6c:ba:90:ad:6d:09:63:f4:ac:0e:cf:
d0:fb:6f:94:36:75:6d:24:9c:3c:5f:27:aa:32:19:08:e4:0b:
6b:a1:f0:b8:d6:ec:87:db:43:c9:d2:c8:0a:72:33:08:d3:fb:
c1:e7:6f:8d:1f:85:a9:b5:9a:fc:24:55:57:28:27:37:65:c2:
86:54:81:86:b4:e7:f1:2a:9b:8c:60:1a:b8:e0:9e:20:7c:90:
4e:5a:cc:95:81:99:f1:e9:7b:9a:52:95:18:ea:fe:16:ac:6b:
7c:0b:99:81:41:d8:60:7e:1d:d5:1d:53:19:f4:0a:55:bc:f3:
9c:1a:46:00:4a:f0:54:56:07:c4:01:32:d3:76:ac:49:f2:91:
f2:f5:bd:27:26:7f:36:c4:b3:43:2f:fb:7e:f6:88:38:b5:30:
64:58:1d:1c:54:07:6d:82:16:63:44:c5:38:29:34:64:38:e8:
8e:05:e3:58:18:0f:dd:c7:1b:51:5f:54:db:b8:68:4c:5a:87:
01:66:e4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:26:23 2025 by rpki-client