Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa
File: Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa (raw, json)
Hash identifier: 0aRSdpBzh4xSW9RCKPtMxwA4FTF50Xso2kHVHvgf+yc=
Subject key identifier: 5A:A8:3D:85:9F:70:B9:66:16:6A:A0:BC:4C:5F:C4:7A:0F:C0:11:F7
Certificate issuer: /CN=36b55fb34d29f962545132a025b52644fdffbf6f
Certificate serial: 019423D7FAB9CD0162C40EE0082AB0CF75AD
Authority key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.206.123.0/24 maxlen: 24
2a10:ca00:1::/48 maxlen: 48
2a10:ca00:2::/48 maxlen: 48
2a10:ca00:3::/48 maxlen: 48
2a10:ca00:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fa:b9:cd:01:62:c4:0e:e0:08:2a:b0:cf:75:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aa83d859f70b966166aa0bc4c5fc47a0fc011f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:a4:1b:90:10:3e:1c:4a:0d:d5:bd:e5:b9:
0b:ab:d6:a1:f6:e3:52:2c:fd:56:e6:53:95:0b:1f:
56:ce:1b:71:c1:01:7f:73:7d:7a:f3:a5:c5:99:6d:
6c:48:ee:32:4b:ed:48:47:4b:9b:97:ed:55:c5:14:
84:57:69:98:e4:b3:d4:a2:a0:91:24:4a:dc:7c:6e:
38:d6:6a:57:a0:e0:e0:b5:c0:1f:09:58:3f:1f:e6:
af:60:6c:ed:53:76:3f:d7:3b:f8:ab:d8:79:4f:b7:
39:d2:dd:40:0d:2d:b8:8a:a2:4f:ca:6e:a2:f4:53:
2e:97:3d:1b:f6:38:d3:2a:49:b6:a7:de:68:2c:08:
1c:12:bc:4c:f9:74:c1:08:d3:89:12:19:1e:96:09:
7a:98:44:e2:50:b4:4c:97:51:54:d5:01:7b:3f:0a:
92:dd:9a:7c:18:e9:e6:24:b2:ae:0c:32:f3:37:f8:
2f:ed:fd:e6:26:e5:18:f8:9e:d9:4d:a3:b3:33:0a:
1d:8d:a0:c1:da:9d:0e:4e:da:fc:a3:8e:1d:ee:db:
b4:a6:19:61:40:ca:46:ac:b5:df:c0:58:e8:9c:25:
7a:70:c8:b6:fb:d0:24:3f:00:57:7b:6d:1d:2a:50:
c8:f7:7c:00:f4:bd:6f:bf:30:1c:f7:4d:34:9d:b6:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A8:3D:85:9F:70:B9:66:16:6A:A0:BC:4C:5F:C4:7A:0F:C0:11:F7
X509v3 Authority Key Identifier:
keyid:36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/Wqg9hZ9wuWYWaqC8TF_Eeg_AEfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.123.0/24
IPv6:
2a10:ca00:1::-2a10:ca00:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
93:5f:85:91:3b:f3:4e:39:85:9d:5c:7e:ab:bd:79:3f:7a:49:
4b:a2:f2:c2:7b:e8:20:24:e7:d0:de:fc:94:20:d5:df:5a:df:
4e:39:48:4b:11:ea:20:94:21:ea:3a:fd:dd:50:71:bc:86:8c:
6c:f1:c4:47:16:62:95:50:51:c8:ae:f7:9c:f5:06:8d:c5:44:
48:e9:de:d9:34:0f:15:be:2e:e3:4e:bc:3f:1d:8d:81:6a:43:
94:95:de:6c:23:7a:1d:5a:90:70:0f:99:4d:c8:2e:5b:35:23:
08:3b:d8:01:42:e0:3e:c6:3d:0f:a4:1b:9e:d3:f0:99:a5:ee:
03:f4:6f:80:56:13:39:65:c2:a5:a2:a2:7e:cc:04:07:24:5d:
5f:7c:27:19:f2:dd:5d:62:0a:47:d3:5f:c3:81:fa:da:67:dc:
d4:e3:d2:80:d0:0a:47:f7:3a:61:b5:73:60:62:65:a2:e9:d0:
3c:8a:88:d7:35:2c:db:9a:42:35:89:21:28:a0:a2:fc:3d:ca:
2b:c1:8c:d2:0e:5c:85:c5:b7:13:3a:2a:d4:e6:ce:fd:9e:0f:
95:00:af:fd:bc:2f:f7:3a:b3:af:f1:e7:1c:42:7b:57:2b:59:
96:95:f0:8d:aa:21:6e:1a:67:b7:23:a6:a1:2d:50:80:c3:fe:
13:54:f5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:02:59 2025 by rpki-client