Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wZigKiFSFg2jf4ybn-aNCM9AUoc.roa
File: wZigKiFSFg2jf4ybn-aNCM9AUoc.roa (raw, json)
Hash identifier: 7ZXKjf9bxY5hwxObMzg74iYfXa92Z7QeLKS7Y869myY=
Subject key identifier: C1:98:A0:2A:21:52:16:0D:A3:7F:8C:9B:9F:E6:8D:08:CF:40:52:87
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 019425FDA6EEED213C4B97D964DBC6173571
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wZigKiFSFg2jf4ybn-aNCM9AUoc.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198651
IP address blocks: 185.220.176.0/24 maxlen: 24
185.220.177.0/24 maxlen: 24
185.220.178.0/24 maxlen: 24
185.220.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a6:ee:ed:21:3c:4b:97:d9:64:db:c6:17:35:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c198a02a2152160da37f8c9b9fe68d08cf405287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:42:a4:f1:fe:74:ab:ab:75:fd:c7:1b:c6:
46:86:4a:2b:84:5f:3d:fc:44:82:e5:71:cb:6b:19:
3c:09:53:61:bf:cb:80:2d:20:f0:26:66:8b:72:db:
5d:05:c4:d7:78:53:72:44:59:9d:86:b8:50:4d:25:
76:31:ff:ac:1d:d8:f9:86:9b:64:da:fc:69:26:19:
4e:5c:28:d7:49:6b:47:27:58:a4:41:65:76:e4:47:
18:b4:b0:46:b7:89:ec:26:44:bb:3f:65:ce:e0:78:
7c:db:74:96:be:d7:53:37:6a:90:b7:4e:3f:7a:04:
95:c8:40:12:4e:ef:92:72:84:b8:14:8f:ed:a1:88:
21:fd:29:fb:e1:0f:b7:43:3b:53:3e:fc:65:71:36:
93:f3:b7:5d:ef:e1:fe:dd:83:d3:32:d2:e6:d9:17:
96:d8:32:68:61:d2:95:b4:68:2f:a8:06:1b:01:e2:
6d:33:61:c5:fa:99:31:99:04:70:06:68:12:04:09:
25:03:6e:8b:2d:d8:82:be:04:47:c9:16:c8:ca:f8:
00:c5:9e:6a:aa:60:f5:e4:7e:f1:04:31:58:50:8b:
65:72:15:bf:a4:7d:7d:ad:cd:32:69:8d:24:16:7d:
8e:79:fa:36:98:34:ec:f7:71:71:1b:50:84:a7:48:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:A0:2A:21:52:16:0D:A3:7F:8C:9B:9F:E6:8D:08:CF:40:52:87
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wZigKiFSFg2jf4ybn-aNCM9AUoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:99:08:3d:1d:79:b0:ff:56:ed:78:75:33:da:4e:54:e6:56:
31:3d:73:23:ab:d7:b0:08:0a:8e:f7:71:31:47:d4:06:a2:d8:
35:8f:b9:38:c2:1f:ba:bc:7e:06:ea:85:99:bf:f8:f5:40:0e:
44:36:b6:9a:54:62:18:0c:11:fc:d6:6f:a4:33:0c:95:a6:e6:
47:a5:60:6e:eb:87:f0:bc:0e:bf:f6:c3:21:dd:33:93:08:ad:
2c:31:f0:6d:52:ba:74:33:3d:99:64:e9:03:0a:e6:a2:0d:9e:
79:12:83:bf:b2:e9:e3:c2:c0:c1:10:75:20:c6:ce:31:16:c4:
9b:fb:9b:0f:fb:58:c7:81:ba:e4:f3:87:9b:2a:74:b7:81:2e:
e3:12:60:93:71:03:7f:8c:f9:84:b6:c6:7c:65:48:14:a1:9c:
5c:8c:68:25:f3:fb:ad:83:e6:d2:ab:d9:2a:0e:d8:71:8a:67:
4a:f6:53:64:d2:d1:2d:dd:b0:1f:33:1c:95:ef:ee:61:27:dc:
6e:e7:a8:a0:86:e7:f3:fd:15:5b:9d:96:d3:a9:07:21:8d:43:
75:d7:c2:72:d3:05:f4:ef:cc:db:08:f3:cf:57:ae:2d:1b:7a:
05:7f:17:76:59:ad:54:69:f7:41:b2:e7:9a:fd:1b:54:ed:39:
76:f4:1d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:25 2025 by rpki-client