Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/wmxHtvcKqJtTUqnf5sR3cyCPMeg.roa
File: wmxHtvcKqJtTUqnf5sR3cyCPMeg.roa (raw, json)
Hash identifier: /EPsVJFiMZ3O3IoH+IOAZdQSfyIhjr2V/FlxWvt6e5c=
Subject key identifier: C2:6C:47:B6:F7:0A:A8:9B:53:52:A9:DF:E6:C4:77:73:20:8F:31:E8
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 019426D94919806F67BB59CC5E2E2BACCB24
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/wmxHtvcKqJtTUqnf5sR3cyCPMeg.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60721
IP address blocks: 185.193.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:49:19:80:6f:67:bb:59:cc:5e:2e:2b:ac:cb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c26c47b6f70aa89b5352a9dfe6c47773208f31e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:fd:4d:0f:91:dd:8f:87:11:b4:37:a2:d9:
90:5e:51:1e:cf:7d:47:70:f8:e7:f2:01:1e:c6:18:
f3:b5:8d:5c:2f:7e:09:6c:68:47:27:2e:d1:95:62:
19:77:e2:dd:cf:61:91:21:72:80:62:19:be:c0:80:
08:c9:81:77:58:60:e6:99:73:53:83:37:30:ac:7e:
be:82:34:61:31:e4:b6:53:d1:ad:ae:c5:61:fb:cc:
fd:10:66:fb:c2:ca:39:61:e9:a7:f1:65:1b:41:14:
f4:21:9f:6b:27:77:de:5c:12:1c:51:49:05:0a:b6:
3f:7d:21:43:9d:13:a4:2e:07:36:f1:43:cf:49:ee:
b3:0e:e0:e5:c9:39:6f:b4:26:b1:77:36:8c:7f:3c:
6c:17:a2:7e:a2:f8:0e:b3:01:f2:52:0c:8e:8c:41:
91:3d:b9:47:4c:ba:12:dc:1d:53:1f:f5:bf:c1:6a:
b4:fc:21:ea:15:aa:18:8c:40:43:7c:8a:e8:34:43:
93:8e:9b:22:59:f2:ad:43:ce:04:e8:d2:a3:df:0e:
71:29:55:12:53:2f:86:bd:ed:11:05:79:d0:da:73:
b7:d2:2f:6f:9c:c6:07:1b:2d:91:b6:b5:92:17:ba:
f2:38:79:48:6b:68:a5:fd:ea:60:31:48:49:93:76:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:47:B6:F7:0A:A8:9B:53:52:A9:DF:E6:C4:77:73:20:8F:31:E8
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/wmxHtvcKqJtTUqnf5sR3cyCPMeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.165.0/24
Signature Algorithm: sha256WithRSAEncryption
93:c6:66:ad:06:14:31:69:41:ba:ad:22:ab:5d:12:ba:eb:74:
9b:67:0a:1b:5a:5f:07:06:f2:aa:53:23:7f:09:0b:a9:a6:8e:
9f:a0:43:d9:05:86:3f:39:a4:c6:80:f4:91:84:0c:e9:e8:f0:
23:07:e7:b3:04:96:36:d4:63:ff:cd:70:c4:13:1f:42:4c:48:
49:31:e7:99:d7:82:3a:9e:cf:8f:15:c7:ad:aa:e4:c0:0c:ba:
a8:51:6f:e5:e6:ef:2f:57:72:5e:09:28:e0:3f:c7:ba:4e:c3:
51:29:e5:20:71:af:ea:c4:d7:97:66:0b:d4:32:34:b3:27:6c:
9b:ec:cf:00:2c:5e:07:37:8e:f2:bf:25:17:6d:2f:40:50:bf:
8e:0e:71:43:3a:18:9e:b7:7d:f3:5f:5d:b9:03:ac:30:6d:d9:
24:7e:ea:cc:7f:42:76:b3:80:b4:13:bc:40:d5:e7:4a:aa:4b:
a0:c7:83:32:b0:81:21:1d:77:e5:66:bc:2c:b9:db:3b:aa:49:
dc:f9:a4:57:94:f4:fc:44:4b:c5:b0:22:f5:56:3c:db:e1:ef:
3b:e1:6c:97:c5:7d:ea:c0:0d:93:8d:fa:f2:85:34:50:51:99:
b8:28:b6:81:54:30:e6:bd:e1:98:6b:3c:4e:eb:c9:24:1d:f6:
55:e9:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:50 2025 by rpki-client