Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/wUKqgXn8I6QyKCOZp1fOP55CVHY.roa
File: wUKqgXn8I6QyKCOZp1fOP55CVHY.roa (raw, json)
Hash identifier: ZYh1IRJkBN+fN6othjda/ZeToNDoNn/k0haPoeVnCVQ=
Subject key identifier: C1:42:AA:81:79:FC:23:A4:32:28:23:99:A7:57:CE:3F:9E:42:54:76
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0194D9EEFFC9FF657CB7902F332F5A44972E
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/wUKqgXn8I6QyKCOZp1fOP55CVHY.roa
Signing time: Thu 06 Feb 2025 06:25:06 +0000
ROA not before: Thu 06 Feb 2025 06:25:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10103
IP address blocks: 185.125.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d9:ee:ff:c9:ff:65:7c:b7:90:2f:33:2f:5a:44:97:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Feb 6 06:25:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c142aa8179fc23a432282399a757ce3f9e425476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:ff:fc:79:f1:53:78:00:e3:40:23:68:6e:
09:e0:c7:09:5b:7a:a5:73:94:82:c9:26:c2:56:e4:
f5:a6:8f:44:d6:d3:5d:1d:38:6c:aa:32:12:5c:0c:
53:93:f4:2b:12:ee:fd:06:1d:57:ee:a0:8b:14:7b:
d1:54:25:3c:d4:ff:a8:0a:9e:4c:33:dc:59:79:7a:
c6:4a:3d:0c:a0:10:b9:af:f6:8b:41:93:4b:4f:e0:
00:23:22:3e:66:52:b7:e3:28:c0:dc:84:af:69:ed:
ed:f0:1d:e5:82:02:61:66:2b:8c:60:12:37:68:97:
c4:87:49:9a:5f:f2:59:38:2e:46:8a:5e:e3:9d:b1:
d5:76:70:74:bf:f9:64:87:0a:65:91:b9:9a:fe:7c:
1c:1a:fe:60:d0:b7:a0:ca:14:08:a8:38:14:0e:85:
6c:19:35:15:44:03:a9:eb:3a:1c:6d:a2:6f:97:ec:
8b:c9:2e:29:de:4b:ea:95:01:da:31:40:1a:8e:31:
1f:c9:35:db:ad:92:d0:2b:32:56:88:76:8f:29:ac:
af:02:00:0f:72:4d:6c:d1:1b:8d:0d:72:d4:3b:88:
1a:ac:c5:2a:19:04:e1:89:95:9a:8c:fd:c1:2e:53:
71:f8:c5:49:4b:19:80:47:f0:30:ea:49:0a:ba:7a:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:AA:81:79:FC:23:A4:32:28:23:99:A7:57:CE:3F:9E:42:54:76
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/wUKqgXn8I6QyKCOZp1fOP55CVHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:2c:62:22:af:01:bf:ba:a7:11:32:b1:51:9f:db:0e:e0:22:
e5:4d:65:85:ea:3f:83:14:48:09:f2:10:5a:56:e9:ed:86:52:
fd:93:ca:f4:cd:db:93:39:00:62:38:22:25:49:ec:11:9d:05:
6f:30:5e:57:41:d5:8e:7d:66:ae:e8:67:93:1a:4f:70:48:7b:
be:33:3e:d8:0a:db:53:0f:f0:07:58:35:fb:3a:24:ec:b8:6e:
22:6e:d5:64:ac:2b:de:8d:19:d6:a3:63:81:75:c9:7c:75:27:
f3:61:21:a8:ab:0f:1e:e4:ac:b5:8d:66:8f:a7:11:6a:0d:55:
2c:22:3f:2b:01:5f:07:a3:cc:e5:b8:f1:13:a3:03:66:df:3c:
66:9a:48:ba:43:95:e2:72:50:be:f0:ce:0c:b7:7e:fb:0a:f9:
32:a1:07:26:45:db:f5:19:de:8c:c9:21:de:88:61:87:5f:2a:
fa:91:75:4e:9a:1c:ad:65:2c:53:09:b8:6a:d8:a7:19:b9:8d:
1a:5c:4f:ea:05:11:19:2d:b0:f3:ad:41:5e:d7:52:f5:ac:60:
78:fc:f4:15:b0:ac:41:72:4b:4f:3c:38:e5:27:57:4d:5f:db:
25:ed:b7:be:cb:c2:33:3e:e9:f0:91:6e:77:76:76:e1:67:12:
6d:78:cb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:20 2025 by rpki-client