Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/wMG4w9uOn61cljP-qNjeEZGUwwk.roa
File: wMG4w9uOn61cljP-qNjeEZGUwwk.roa (raw, json)
Hash identifier: HqXX/Ra1vF/x/d826M43hJ5A8k+zB4kBn5HcqZ0geiA=
Subject key identifier: C0:C1:B8:C3:DB:8E:9F:AD:5C:96:33:FE:A8:D8:DE:11:91:94:C3:09
Certificate issuer: /CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Certificate serial: 0194266C30C09A4E4D9BE85EFE23E272A1B5
Authority key identifier: 14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/wMG4w9uOn61cljP-qNjeEZGUwwk.roa
Signing time: Thu 02 Jan 2025 09:50:12 +0000
ROA not before: Thu 02 Jan 2025 09:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62024
IP address blocks: 185.50.96.0/24 maxlen: 24
185.50.97.0/24 maxlen: 24
185.50.98.0/24 maxlen: 24
2a01:a3e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:30:c0:9a:4e:4d:9b:e8:5e:fe:23:e2:72:a1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c51262fe87f4e295ef9e7f87a1f9e49f57c300
Validity
Not Before: Jan 2 09:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0c1b8c3db8e9fad5c9633fea8d8de119194c309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:db:40:e9:20:b9:46:e6:9e:47:da:83:a2:
67:3f:b5:3d:d7:b5:33:de:7c:cc:af:26:15:0e:be:
9d:4c:03:a0:8e:d5:20:5d:28:13:76:05:d3:32:d3:
8e:94:11:bc:11:99:ff:74:02:9d:ec:44:73:3d:dc:
6b:6a:1a:80:e8:2a:cf:b7:6e:52:86:75:e0:5f:97:
a9:6d:95:40:46:2e:7f:f7:b1:9a:26:76:62:b8:61:
5c:7e:17:f4:78:e9:1d:cf:c0:a8:72:be:d7:42:ea:
54:ab:07:96:bc:b6:9e:1f:75:0b:61:bf:dc:d4:21:
71:0e:7f:71:cb:1c:9e:89:96:55:2f:45:b2:a8:ac:
44:91:05:77:3c:b8:3e:f2:22:78:c0:45:52:a5:d4:
a0:2c:da:25:75:39:a1:1c:f1:83:b2:f8:c3:ab:aa:
08:c6:ba:ab:b5:b0:dc:8f:1a:51:92:6a:6d:63:4e:
cf:8e:11:d7:73:ee:7d:51:50:6f:7e:01:5c:8f:b8:
e1:e6:4b:3c:f9:9a:d2:69:a3:6e:52:19:c4:38:c4:
61:e6:75:39:8b:5f:6c:3b:7a:55:06:41:4f:ca:cf:
ce:e9:43:dc:92:71:4d:1c:ea:ea:50:47:fd:14:8d:
59:4d:52:e7:cc:0c:c4:52:55:5e:ff:20:b2:42:bc:
bf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C1:B8:C3:DB:8E:9F:AD:5C:96:33:FE:A8:D8:DE:11:91:94:C3:09
X509v3 Authority Key Identifier:
keyid:14:C5:12:62:FE:87:F4:E2:95:EF:9E:7F:87:A1:F9:E4:9F:57:C3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMUSYv6H9OKV755_h6H55J9XwwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/wMG4w9uOn61cljP-qNjeEZGUwwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bdfd19-201a-444d-8d88-6ef4c7c7470b/1/FMUSYv6H9OKV755_h6H55J9XwwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.96.0-185.50.98.255
IPv6:
2a01:a3e0::/32
Signature Algorithm: sha256WithRSAEncryption
06:ef:92:b6:7b:ae:bd:8a:d1:c1:63:5a:5c:1d:23:75:c4:34:
28:66:49:2f:9e:7e:44:aa:d3:aa:2e:ed:4b:3f:09:8a:9f:71:
2d:49:f1:fa:90:39:46:1c:68:d3:c1:76:26:af:94:18:88:de:
6d:2b:3b:d0:4a:57:0e:89:89:1d:1b:f9:86:10:ca:98:bc:b4:
cd:93:18:c9:c6:7e:a6:60:5b:c8:b1:50:0f:a4:a6:cd:db:fb:
3e:cb:3c:a7:43:eb:62:2f:46:1e:5b:52:6a:1a:9d:43:38:2c:
47:19:fb:62:ca:ff:71:76:14:89:49:2b:83:bf:43:b5:6f:2b:
be:df:ba:5b:83:d5:52:bc:38:d9:42:cc:29:c4:c5:e5:f9:00:
8a:4a:ba:9b:f8:e0:16:d0:34:5f:23:fb:85:fe:38:98:1e:24:
b0:3b:e0:dc:3b:97:2b:76:75:e1:5e:a1:fc:21:c4:f8:3c:b9:
7e:cd:fe:d6:fa:f7:0d:c5:6d:c8:70:f2:57:47:64:7a:09:4c:
e6:d9:cf:33:10:3a:03:11:a0:4e:a5:64:b2:f3:53:65:37:9b:
1b:5a:8a:c6:ae:a9:47:f0:f6:c2:73:0c:5a:bb:17:53:ed:dc:
3c:b1:48:99:74:93:9d:f5:e0:1c:06:98:ea:ee:db:84:56:04:
08:9d:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:59 2025 by rpki-client