Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wOsf5_YOiqUMROpVbJEf3o7jfA4.roa
File: wOsf5_YOiqUMROpVbJEf3o7jfA4.roa (raw, json)
Hash identifier: QdADhbZNLmHZbqqBBd4uzw23qbhlhRtnteRcHUSgzTQ=
Subject key identifier: C0:EB:1F:E7:F6:0E:8A:A5:0C:44:EA:55:6C:91:1F:DE:8E:E3:7C:0E
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194F189652C57093EACCD1BC53A76EB1CFE
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wOsf5_YOiqUMROpVbJEf3o7jfA4.roa
Signing time: Mon 10 Feb 2025 20:25:00 +0000
ROA not before: Mon 10 Feb 2025 20:25:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209474
IP address blocks: 185.249.202.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:89:65:2c:57:09:3e:ac:cd:1b:c5:3a:76:eb:1c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Feb 10 20:25:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0eb1fe7f60e8aa50c44ea556c911fde8ee37c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:87:a9:37:e6:75:08:a3:5e:d6:72:c0:60:
59:71:4d:0f:fe:c7:da:d2:d7:8e:a7:7a:69:67:d9:
3a:c3:d1:af:e6:7d:0b:d0:5b:56:48:1d:05:c1:85:
9c:90:ea:90:69:0f:3e:69:e3:a7:14:6e:6e:e3:29:
30:13:f7:c5:43:8a:84:b7:65:31:95:59:24:fd:d7:
78:5d:a1:fa:c7:9b:9d:9e:9e:22:8b:04:89:3e:1e:
6c:64:df:be:63:3f:6d:6e:45:b0:fb:0b:b4:ca:0c:
fd:29:89:38:a5:47:76:68:6a:58:73:2f:0f:e9:93:
b5:22:ab:2c:9e:79:50:05:17:9a:66:cc:4e:aa:60:
f9:eb:46:55:ad:72:6f:4e:66:de:8d:05:f8:bb:ea:
33:6a:1e:79:9a:11:7a:63:e9:2d:fb:e6:6e:bd:bc:
d9:84:e4:48:53:53:0d:dd:4f:89:ee:23:18:7f:d3:
26:11:09:b4:f7:a8:3a:eb:8f:e1:2a:e5:e2:f4:84:
d6:05:f6:bc:bf:b4:f1:f3:3b:e2:fd:26:15:42:28:
bb:fb:f7:0a:df:2f:ba:18:d9:35:86:d6:a4:05:36:
74:06:61:b2:36:f1:09:55:dd:0b:cc:66:21:67:98:
92:10:8b:ed:27:76:44:cf:64:94:30:0e:dc:be:8d:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:1F:E7:F6:0E:8A:A5:0C:44:EA:55:6C:91:1F:DE:8E:E3:7C:0E
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/wOsf5_YOiqUMROpVbJEf3o7jfA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.202.0/24
185.254.239.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3d:20:99:24:31:b5:0e:ef:0d:90:26:8d:19:4f:f6:5e:8e:
5d:1e:0b:73:ac:63:64:69:29:3f:86:28:d2:68:bc:1c:a9:70:
37:16:df:17:3f:29:b9:df:96:3b:0c:93:18:7a:be:96:61:44:
3b:3f:8f:82:96:50:5d:aa:91:a8:79:48:d3:af:ae:3a:1e:03:
83:fa:da:0a:eb:7c:18:5c:49:8d:0e:d9:0a:90:e3:99:ae:bf:
ca:01:38:63:4e:48:90:bc:dc:86:5c:fb:7e:17:5f:f4:04:8c:
8e:26:29:38:5e:86:48:2b:47:98:bd:4f:f6:0f:59:20:b2:64:
be:63:17:ae:48:57:95:9d:77:64:bc:c2:b9:a8:fd:08:01:92:
9a:1a:34:a5:bb:21:9c:b5:9b:24:67:4d:09:aa:f2:51:c6:42:
a9:63:03:29:84:4b:de:14:36:d5:40:60:a7:91:4f:9d:d2:9a:
3c:c3:9d:97:59:3f:5a:ab:f3:16:e2:a0:37:1f:7e:73:32:91:
1e:77:16:62:70:a1:bc:d3:8c:0f:c2:02:6b:5b:4e:50:91:18:
b7:f8:01:b2:9a:15:7e:40:af:7b:c0:de:d3:36:d0:a7:80:13:
e4:99:8c:0c:4d:45:73:53:03:0b:25:a9:b8:38:f1:15:45:b3:
b5:b1:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:03 2025 by rpki-client