Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/wvgG4XNzprZc-SP8U3kROkE5LVw.roa
File: wvgG4XNzprZc-SP8U3kROkE5LVw.roa (raw, json)
Hash identifier: Lg/WHk5WmLXAyr0795AgtlMYaM1VC+PkwBi/Zegus2s=
Subject key identifier: C2:F8:06:E1:73:73:A6:B6:5C:F9:23:FC:53:79:11:3A:41:39:2D:5C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424452A90E66901C7EA295C54CD761C51
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/wvgG4XNzprZc-SP8U3kROkE5LVw.roa
Signing time: Wed 01 Jan 2025 23:48:20 +0000
ROA not before: Wed 01 Jan 2025 23:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64432
IP address blocks: 185.46.175.0/24 maxlen: 24
185.161.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2a:90:e6:69:01:c7:ea:29:5c:54:cd:76:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2f806e17373a6b65cf923fc5379113a41392d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:6f:26:1f:26:78:cb:0d:18:e8:9b:af:f5:
95:97:ea:26:a5:84:c2:4a:89:2d:e9:aa:ce:15:12:
27:1e:e4:5f:55:b0:1c:dc:5f:d1:d9:86:12:fa:7e:
90:ed:7a:4b:6f:20:45:1d:ac:1a:08:30:fc:a9:c3:
97:c4:e7:5b:2d:e7:1a:a1:b4:e4:7e:cb:82:a2:76:
cf:80:bb:ad:dd:a7:ed:03:7b:b8:4d:b0:1e:e6:6b:
ea:3d:4f:a9:fc:c3:a5:d9:05:99:01:e7:6d:2a:c5:
0b:31:7a:72:ac:bd:d5:41:0f:88:0c:3e:ee:c0:80:
cf:f0:d5:2b:b6:52:6e:80:5f:29:5b:76:bb:28:30:
90:d7:1b:82:6d:62:5e:0e:ef:1d:ea:92:69:a5:c8:
cd:e0:d3:a7:bf:62:88:b0:f0:56:20:bd:57:7a:23:
41:44:e6:8a:25:37:09:1a:1c:05:1c:57:61:33:40:
a9:ba:da:e2:c1:c6:bd:7a:d9:4b:b0:09:d3:9a:80:
e0:86:88:9f:68:f4:b8:2b:2e:21:60:3d:5d:86:1e:
28:da:a9:36:3a:0f:aa:38:aa:07:df:4b:be:b8:3a:
f0:64:fc:1a:60:65:2e:1a:65:5a:ad:79:90:b0:a6:
bc:32:42:65:04:88:34:71:b1:e1:ea:cc:68:68:a0:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F8:06:E1:73:73:A6:B6:5C:F9:23:FC:53:79:11:3A:41:39:2D:5C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/wvgG4XNzprZc-SP8U3kROkE5LVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.175.0/24
185.161.79.0/24
Signature Algorithm: sha256WithRSAEncryption
39:77:16:76:b2:49:f3:19:b6:f2:e6:fb:03:a7:3b:aa:68:c0:
e5:46:32:63:c9:25:08:bb:20:62:13:71:62:51:b9:0e:1c:26:
4b:cd:fd:21:19:8f:8e:90:84:cd:1c:20:45:f9:f2:10:b7:7e:
dc:a3:c9:f6:22:36:74:f6:6a:0c:e0:fa:a0:7b:7e:5a:db:ea:
88:1c:a9:69:9e:87:a8:26:4e:c7:3d:72:c8:87:74:62:95:e1:
01:c8:1d:2c:0d:a2:38:d2:cd:6a:3b:97:e4:ea:74:63:44:55:
88:8f:76:15:0a:95:0c:0f:52:17:38:05:2e:16:f0:97:73:f1:
70:94:da:b2:34:59:14:8d:33:ed:72:8c:38:b1:82:38:66:c9:
be:19:c2:27:02:ca:bb:9c:25:73:ba:ad:96:ae:78:00:46:35:
c1:90:d5:39:2e:8e:68:33:2a:36:35:e6:1f:1d:17:ce:fa:3b:
fc:02:03:98:a4:eb:77:50:d0:fc:eb:97:7e:5d:e2:39:e3:9f:
a6:cd:a5:0e:ee:72:a5:d8:c5:1d:8e:bf:d6:14:ce:29:c3:3f:
2e:9a:d6:00:ac:6c:bb:b4:7e:6c:4e:ca:c9:df:5b:c7:3b:cb:
77:e0:8f:32:f5:41:bf:f7:5c:7c:7a:c3:94:3c:3d:da:35:81:
7c:96:0f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:26:25 2025 by rpki-client