Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa
File: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (raw, json)
Hash identifier: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=
Subject key identifier: 5B:63:2F:24:16:74:C3:1B:4B:A8:97:58:95:80:3F:D1:DF:0A:F0:94
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 0194228DF89E23D0AA8E6435E5C0743CC94F
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa
Signing time: Wed 01 Jan 2025 15:48:37 +0000
ROA not before: Wed 01 Jan 2025 15:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34663
IP address blocks: 85.159.96.0/21 maxlen: 21
185.94.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f8:9e:23:d0:aa:8e:64:35:e5:c0:74:3c:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jan 1 15:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b632f241674c31b4ba8975895803fd1df0af094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:81:f8:a2:22:27:d7:f3:6b:78:d4:84:9f:3e:
67:1f:90:3f:a9:61:36:56:5f:48:c9:3e:0e:ad:5d:
36:6e:8a:1f:22:9c:dc:c8:f7:bb:7b:ec:39:9f:cb:
24:41:56:8d:c4:b7:8c:24:e3:9d:92:49:e0:72:21:
5c:b7:6b:1d:33:80:2c:3d:5d:95:cb:0d:5a:a5:db:
75:9e:e1:df:13:d2:9e:dd:e4:2f:87:ef:d2:e2:bd:
c8:bc:91:6d:ca:3a:0f:28:5c:a9:5b:da:17:83:e6:
4f:1c:bc:0b:92:cd:51:06:c5:2c:5b:c2:3e:a3:e6:
8d:a1:be:1d:dc:b0:60:bd:68:ae:7f:7e:06:20:6b:
90:7d:a0:89:d5:0c:83:8d:94:06:1d:2d:59:f6:70:
a2:42:67:1e:8a:c1:c3:03:12:d1:85:33:47:5f:ea:
cc:87:db:07:35:40:0c:79:fd:7d:be:da:b4:8d:62:
e3:42:e8:9c:cc:e8:38:34:28:6e:4d:4a:7d:26:e2:
1d:44:77:2d:fe:00:ec:d4:de:77:3f:15:26:bb:e6:
f7:e5:ad:24:10:d4:b6:09:27:da:67:ac:bc:12:ef:
a3:20:25:0f:e5:89:96:ff:05:5f:6c:50:91:f4:59:
32:f7:3c:ca:0c:d0:70:77:e1:1e:64:a0:c3:0b:bf:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:2F:24:16:74:C3:1B:4B:A8:97:58:95:80:3F:D1:DF:0A:F0:94
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.96.0/21
185.94.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:8e:a6:f6:6e:24:c5:a7:81:70:15:0f:be:b6:81:cc:34:05:
a3:71:b5:e9:0a:95:43:c0:9e:d3:93:15:9e:1f:88:cf:08:20:
ca:2a:47:f0:05:90:17:7e:66:71:88:0a:9e:73:3d:3d:e2:a4:
65:01:f3:50:d9:52:9a:89:5a:e7:d0:74:b6:8c:60:b7:19:4f:
6e:3f:28:45:df:03:82:cc:08:72:e3:e0:de:3e:bd:5d:f9:6c:
c5:72:2a:34:bd:c5:e4:64:91:1c:dc:8e:51:4e:60:6b:c5:e5:
e7:88:09:08:f6:8a:cd:6f:fe:c4:40:8f:22:67:7c:1f:2c:00:
e3:a9:28:9f:ab:c2:3a:f4:f9:a1:f4:54:ff:62:70:6b:98:af:
fa:59:b4:18:78:22:21:5a:14:71:3c:0a:15:e5:d7:b0:52:22:
87:13:04:ce:19:f0:7e:42:2f:6b:6b:d5:9a:9d:43:35:32:55:
9e:ae:76:13:11:2b:4b:72:56:bb:01:9d:8b:5e:04:51:bd:62:
d9:10:2f:8a:43:4d:07:fd:d9:17:40:fb:fc:22:31:5c:5a:70:
93:2b:17:0c:a8:08:92:46:50:64:ab:e3:9a:fd:bd:30:85:e9:
e9:a6:f3:2a:76:04:bf:1d:61:e2:6f:18:af:2b:c0:4a:d6:ea:
42:5a:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:02 2025 by rpki-client