Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/pWHDIdvugLu8Y51LeZtocP5HOcI.roa
File: pWHDIdvugLu8Y51LeZtocP5HOcI.roa (raw, json)
Hash identifier: fyvGZubWInNshv6PvFcn8DVCaqecv6kcINe/lSRIemw=
Subject key identifier: A5:61:C3:21:DB:EE:80:BB:BC:63:9D:4B:79:9B:68:70:FE:47:39:C2
Certificate issuer: /CN=6b8bacd95f1f4bd675527d326d299956862c321a
Certificate serial: 01942068265259632251E97AD9063912DD9F
Authority key identifier: 6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/pWHDIdvugLu8Y51LeZtocP5HOcI.roa
Signing time: Wed 01 Jan 2025 05:48:03 +0000
ROA not before: Wed 01 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207595
IP address blocks: 185.225.227.0/24 maxlen: 24
2a05:ba00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:26:52:59:63:22:51:e9:7a:d9:06:39:12:dd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8bacd95f1f4bd675527d326d299956862c321a
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a561c321dbee80bbbc639d4b799b6870fe4739c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:e6:d7:75:45:69:7a:f1:04:38:09:e1:e7:
e9:ad:2e:35:d8:ad:13:d0:05:31:10:78:5c:a2:15:
cd:1d:42:2d:b0:90:05:27:b8:c0:97:1d:8d:a4:25:
4b:bd:18:f9:35:0c:8a:6b:3f:42:92:04:28:48:95:
cc:10:79:d2:d1:35:8d:c6:85:ec:34:07:31:58:6a:
a0:27:ca:a5:78:bf:04:7b:61:27:b5:bf:56:eb:a8:
81:ec:ad:50:ae:27:39:56:54:4c:a6:62:77:94:5d:
d4:e5:dd:5e:36:a9:87:14:9c:70:60:29:68:dd:d1:
27:df:b6:0e:c0:2f:ce:e6:d1:4d:27:c7:1b:35:ac:
01:8a:33:1c:fc:65:64:3e:08:7b:9b:54:a1:e3:a5:
da:56:ea:ab:43:63:e5:32:9f:68:70:6d:0a:8f:a9:
86:9c:59:8a:93:1b:d3:42:e0:c9:82:c5:a6:15:d1:
ea:20:7c:2e:dd:97:87:83:cc:b6:44:66:a3:36:c1:
17:ae:bc:51:66:b4:10:2b:43:24:1d:23:31:5b:e8:
e1:7f:b4:e6:30:27:ce:05:ba:f0:98:2e:da:02:86:
32:3e:ed:96:64:0b:93:a5:ec:dc:b6:b5:ed:09:60:
1e:65:9d:8f:6c:df:ad:09:8b:e2:ca:61:3e:96:ca:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:61:C3:21:DB:EE:80:BB:BC:63:9D:4B:79:9B:68:70:FE:47:39:C2
X509v3 Authority Key Identifier:
keyid:6B:8B:AC:D9:5F:1F:4B:D6:75:52:7D:32:6D:29:99:56:86:2C:32:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4us2V8fS9Z1Un0ybSmZVoYsMho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/pWHDIdvugLu8Y51LeZtocP5HOcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9ce550-2b7e-4f8f-8ee1-12ed3995e5de/1/a4us2V8fS9Z1Un0ybSmZVoYsMho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.227.0/24
IPv6:
2a05:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
63:d0:c3:f5:29:3f:40:3c:4f:41:5c:f9:34:cd:98:f6:3c:43:
a2:e1:b0:fe:62:22:72:ca:ad:9d:cc:c8:5c:27:1d:e1:1d:0b:
48:68:7b:ac:ae:0b:3e:42:47:c5:55:d6:a6:90:ad:1f:4c:3e:
8a:7d:07:b3:91:d6:68:a4:67:ea:3d:89:70:5d:38:a9:53:e0:
23:de:37:ca:27:a0:a9:d7:e3:eb:60:41:1f:d9:ea:ee:37:8d:
0c:3b:66:e3:57:52:2b:f7:f4:43:6a:9d:4a:f6:8d:bf:db:a7:
59:d1:2b:70:3f:95:d8:f8:64:28:ae:19:f1:77:d7:14:41:61:
60:a6:06:f8:1d:b5:b0:13:b0:ca:63:6d:cf:e0:1f:3f:70:ce:
27:04:22:58:f6:c0:c4:3a:70:a9:00:b8:5c:a1:ca:75:f0:b2:
b7:9f:a2:be:45:37:7b:b9:81:8f:c5:e5:ac:ec:94:35:c4:d8:
db:80:32:15:18:81:32:29:e2:5b:11:bf:92:a7:8b:45:4b:fd:
61:25:1e:83:c0:f7:d4:80:bb:2c:e8:fe:03:32:e2:92:af:46:
8c:30:32:3b:fe:df:50:5a:7a:32:c5:15:8a:0e:bd:97:2b:0a:
99:d6:1b:bc:30:c8:4d:24:7f:e1:6d:09:5e:e4:08:1c:c1:b2:
a9:70:66:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:54:49 2025 by rpki-client