Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/W24aSq0hXYyKBRxGgSK_wvMtquQ.roa
File: W24aSq0hXYyKBRxGgSK_wvMtquQ.roa (raw, json)
Hash identifier: /mA3gm7uRv1OkMD/wSE+KpCoA0bfpiymSGACvHhJWKo=
Subject key identifier: 5B:6E:1A:4A:AD:21:5D:8C:8A:05:1C:46:81:22:BF:C2:F3:2D:AA:E4
Certificate issuer: /CN=36ff8d8e02e1d114a4b0a9f7a2296e22d06e1d69
Certificate serial: 01856C4A41B1B22CD5DF7D99BE0859707D74
Authority key identifier: 36:FF:8D:8E:02:E1:D1:14:A4:B0:A9:F7:A2:29:6E:22:D0:6E:1D:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv-NjgLh0RSksKn3oiluItBuHWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/W24aSq0hXYyKBRxGgSK_wvMtquQ.roa
Signing time: Sun 01 Jan 2023 07:44:43 +0000
ROA not before: Sun 01 Jan 2023 07:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61205
IP address blocks: 185.245.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:41:b1:b2:2c:d5:df:7d:99:be:08:59:70:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ff8d8e02e1d114a4b0a9f7a2296e22d06e1d69
Validity
Not Before: Jan 1 07:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b6e1a4aad215d8c8a051c468122bfc2f32daae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:28:d1:48:c4:ec:81:08:cc:4e:4f:c7:7a:
18:a0:ce:e1:24:1b:e4:dc:0b:d7:15:db:61:5a:7f:
a2:30:9e:43:53:f3:d8:84:18:62:cb:7d:e4:20:85:
fa:1c:70:ab:62:fd:4d:9f:70:af:70:3d:d0:08:84:
fb:77:45:fb:b9:8f:e0:2b:92:48:4d:62:51:1a:85:
6d:3d:df:b6:3d:de:3a:f1:f6:bf:79:b7:fe:fb:73:
f3:13:de:88:5a:4c:cf:c8:7b:52:93:31:a3:c1:96:
9e:7b:a8:78:fa:f6:fc:74:f5:17:0a:50:a9:5c:01:
8b:8a:d8:45:7d:b8:ad:cb:28:03:da:c0:68:6c:05:
35:5e:8c:89:f3:dc:5a:ec:9e:b4:c6:9b:d6:fc:1f:
10:b7:e1:2b:fe:92:97:6e:d4:b3:e2:0b:b7:15:ad:
60:e6:f1:6c:9c:1a:87:d7:e4:b9:cb:dd:30:61:e9:
13:ce:d1:4a:b0:d5:6f:ea:dd:e0:15:58:ba:0d:c5:
e2:1a:f1:0f:cb:e0:94:dc:8d:46:0a:be:a0:b7:2d:
76:b7:30:8a:33:91:18:00:d7:2a:ba:b3:e5:fe:8d:
7f:b8:0f:ae:50:f0:46:f2:35:94:a1:69:57:a7:91:
40:1b:4a:c1:28:60:36:b3:9b:cc:21:26:50:c9:a2:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:1A:4A:AD:21:5D:8C:8A:05:1C:46:81:22:BF:C2:F3:2D:AA:E4
X509v3 Authority Key Identifier:
keyid:36:FF:8D:8E:02:E1:D1:14:A4:B0:A9:F7:A2:29:6E:22:D0:6E:1D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv-NjgLh0RSksKn3oiluItBuHWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/W24aSq0hXYyKBRxGgSK_wvMtquQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/f6b06a-e57e-41d2-927a-fb7060d0849e/1/Nv-NjgLh0RSksKn3oiluItBuHWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.196.0/22
Signature Algorithm: sha256WithRSAEncryption
93:6a:48:17:a2:87:84:44:1a:90:dc:aa:86:ff:1d:20:39:08:
2c:16:7a:13:9e:77:8a:75:af:1f:fc:7a:67:d5:37:86:73:25:
2c:db:61:8e:58:4e:24:5c:c5:e9:f6:ff:e9:35:fa:d4:c9:30:
8e:90:a6:5d:b1:76:09:a9:33:c5:a0:3f:99:e1:93:64:c9:ec:
1d:14:f8:a9:d1:8e:8f:c6:15:f7:46:14:04:0a:cf:89:e4:8a:
b6:28:f3:77:1d:90:c1:04:f8:7f:d0:2b:1a:5f:be:eb:14:7c:
bd:dc:f3:5f:4d:52:8d:fd:40:28:43:5a:a7:70:6e:e5:3d:2d:
2b:62:05:19:57:d5:5e:1b:e5:15:2f:ef:0c:b7:c9:eb:d7:f9:
81:18:64:6c:a1:02:bf:02:a3:8b:15:40:d0:cc:99:18:be:0b:
37:61:6d:b2:92:c5:3d:ca:1b:d4:1e:39:bc:7c:da:67:30:59:
7d:b8:07:76:17:60:64:4f:fe:2e:25:42:6d:87:74:51:a5:bd:
ea:54:b0:60:80:b9:4e:79:1c:04:84:9e:a2:06:6d:1d:f3:9b:
a0:5e:62:1b:0d:22:b1:73:19:5d:d0:4c:15:40:cf:b8:ab:fb:
22:70:b4:78:5f:a8:a8:12:47:33:cf:a3:1c:83:60:9c:9c:aa:
73:1d:a1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:15:52 2025 by rpki-client