Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/WMejWLM-fXx9J5hQgJ4TNGxlL40.roa
File: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (raw, json)
Hash identifier: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=
Subject key identifier: 58:C7:A3:58:B3:3E:7D:7C:7D:27:98:50:80:9E:13:34:6C:65:2F:8D
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 0195CD54893B6737F0D4FE86302F824B782C
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/WMejWLM-fXx9J5hQgJ4TNGxlL40.roa
Signing time: Tue 25 Mar 2025 12:43:44 +0000
ROA not before: Tue 25 Mar 2025 12:43:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 185.24.172.0/23 maxlen: 23
185.24.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cd:54:89:3b:67:37:f0:d4:fe:86:30:2f:82:4b:78:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Mar 25 12:43:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58c7a358b33e7d7c7d279850809e13346c652f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:63:82:a4:ad:56:d7:87:e5:e1:66:5f:04:
ec:cd:ad:01:75:49:17:de:13:6e:0f:7a:b3:b1:a9:
bc:55:24:3b:d9:a0:a5:c6:72:a2:c6:53:9d:d4:49:
00:ce:25:43:c2:91:69:37:34:84:07:c4:fa:6e:1f:
9c:0d:7d:4f:53:8e:fb:4b:5f:90:50:f7:7c:06:09:
a4:a7:f4:42:e5:2a:7e:af:79:c2:5f:a3:67:c9:1c:
61:3c:7e:1a:fe:9b:ef:2f:27:d5:91:fc:35:7e:fb:
f5:8a:62:78:b3:36:85:ee:be:56:6c:fe:44:63:25:
1a:ec:4a:88:03:18:8f:7f:36:90:3e:c2:4e:60:ad:
1c:b8:f0:aa:39:c8:f8:3b:ac:e3:53:db:2f:43:57:
36:b1:66:16:7e:77:f1:b3:2a:29:a3:ab:c2:85:0d:
7b:39:c0:02:a3:c3:08:48:a5:77:08:ee:bd:e8:c9:
c3:ba:f0:83:59:50:a1:1c:04:f3:4d:e6:95:e8:34:
a0:e2:f5:93:ee:4f:7b:5d:40:0a:6f:63:ba:c7:78:
67:9b:b0:9e:63:8d:63:02:d1:a5:06:6f:68:c2:24:
fa:c2:c3:92:c5:1a:0a:e6:ea:1f:76:65:c2:f5:b5:
3f:c8:ee:7b:da:47:15:f7:11:01:42:ac:f4:bd:f3:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:A3:58:B3:3E:7D:7C:7D:27:98:50:80:9E:13:34:6C:65:2F:8D
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/WMejWLM-fXx9J5hQgJ4TNGxlL40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.172.0-185.24.174.255
Signature Algorithm: sha256WithRSAEncryption
8b:10:f3:3b:90:bc:4e:88:21:d0:59:52:30:3b:71:41:0c:f7:
d4:5b:0f:2b:71:10:89:c6:d6:29:c1:98:80:aa:ad:3b:6b:a3:
66:01:1e:c0:cb:55:ee:37:27:4b:2f:2c:14:72:69:c9:b3:f8:
c1:7d:23:67:9d:59:f1:6f:ea:33:8f:f0:e1:fb:5e:8c:cb:5c:
86:6e:68:08:d6:4f:72:90:b5:99:2b:0c:45:6f:0b:ed:fd:0e:
b0:f7:72:6d:1d:ec:ee:fe:65:87:7e:1a:52:43:b9:99:8c:b7:
c0:12:86:ae:18:3f:b3:49:2d:74:ee:1f:cf:56:3b:95:8d:1e:
f7:ef:ce:b5:ad:66:b9:68:cf:ae:be:f5:be:9e:13:c1:1d:7a:
da:3e:69:9b:ea:c0:d0:f9:c1:b9:47:93:2c:85:72:4b:cf:fa:
53:ed:e0:a7:d1:04:11:49:6e:85:be:5b:d0:e2:7b:8d:e0:93:
5a:ce:50:ff:ca:66:bb:12:0b:a1:89:51:a6:d9:34:3b:93:77:
bc:ee:40:01:0d:eb:6e:61:35:04:dc:4b:2a:0b:b5:25:bf:9b:
74:af:75:be:1a:4d:a3:f4:c4:9b:4c:86:c6:82:f7:14:b9:b7:
51:36:7a:03:bf:df:71:94:b5:87:01:d7:b1:3d:64:fb:90:6c:
15:33:68:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:21 2025 by rpki-client