Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/dW_FLnsv0zWikILQzBidDijXgG4.roa
File: dW_FLnsv0zWikILQzBidDijXgG4.roa (raw, json)
Hash identifier: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=
Subject key identifier: 75:6F:C5:2E:7B:2F:D3:35:A2:90:82:D0:CC:18:9D:0E:28:D7:80:6E
Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Certificate serial: 019425FDE8AB5E1B6F00A1B948C77E42A2F2
Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/dW_FLnsv0zWikILQzBidDijXgG4.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202629
IP address blocks: 185.235.28.0/22 maxlen: 24
185.235.28.0/24 maxlen: 24
185.235.29.0/24 maxlen: 24
185.235.30.0/24 maxlen: 24
185.235.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e8:ab:5e:1b:6f:00:a1:b9:48:c7:7e:42:a2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=756fc52e7b2fd335a29082d0cc189d0e28d7806e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:ab:18:04:ea:23:29:ea:57:30:8c:f4:04:
0e:fb:ae:9f:79:c4:f9:09:34:d1:c8:65:0d:0f:68:
4b:dd:bf:66:2d:66:9b:e7:35:3b:16:5d:bc:90:5a:
6c:54:b0:4d:26:4e:d8:9d:c9:20:61:6d:94:68:33:
d0:34:d7:96:34:20:7d:0c:36:a3:57:08:1f:ed:19:
c8:60:d7:14:bb:b4:65:28:9e:03:c2:15:e7:a8:5c:
b4:72:05:dc:0a:d4:7a:6c:26:8a:cf:94:5e:26:79:
3b:77:66:ef:ba:df:9c:75:3e:db:69:2c:2e:43:67:
6b:02:45:a1:e8:57:60:2a:06:71:81:8b:18:06:f6:
b6:85:d4:e1:96:3f:32:d5:ce:67:f5:fb:86:80:fc:
c3:dd:85:75:21:ed:b8:cd:7f:81:78:e0:f5:8e:cd:
b2:cb:8b:39:2c:0c:55:37:4a:b9:26:18:dc:73:3f:
45:eb:55:86:40:58:cb:ec:bf:35:53:54:d8:84:85:
38:c2:14:c1:2b:4a:ae:2f:ae:4c:0d:73:e6:2a:2c:
95:2e:d3:97:6c:1b:99:14:3a:f1:71:c2:2e:a6:2a:
08:ce:f4:a1:c0:65:d9:b9:b6:4b:6b:ba:b5:df:e5:
d4:62:9f:7d:3a:4a:bc:be:de:90:41:9c:95:f3:6b:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6F:C5:2E:7B:2F:D3:35:A2:90:82:D0:CC:18:9D:0E:28:D7:80:6E
X509v3 Authority Key Identifier:
keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/dW_FLnsv0zWikILQzBidDijXgG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.28.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:27:17:46:4d:d0:70:43:75:6a:8a:ae:bf:1c:3b:21:b4:37:
b1:c0:10:e9:c0:9f:69:2e:2a:bb:f8:89:76:46:1d:4e:61:99:
51:16:df:68:70:f1:44:b9:35:8e:b9:3b:37:08:ad:73:8b:73:
9f:fe:67:b6:99:ab:f3:cf:f7:a2:0e:a1:e1:f3:9b:60:d3:14:
7f:2b:58:72:92:96:93:44:40:d4:ff:26:57:1c:c9:a9:c5:a3:
9b:39:f2:31:c5:5c:f7:1f:27:b1:4f:27:ca:2f:7c:4f:b9:5f:
f8:47:3b:c8:95:66:99:b8:db:06:7f:64:08:77:87:43:63:5c:
68:f1:6f:89:ab:2a:a1:8a:d0:f6:c3:9a:c7:c9:a0:27:e2:19:
7a:b5:3b:b4:85:ea:91:e2:5d:06:ee:c8:50:29:0c:58:21:a0:
8a:a8:d2:ff:c6:f5:eb:e7:6c:5d:eb:06:ee:b5:5c:8c:84:3d:
7a:fe:6b:ef:dd:9c:e8:58:2c:df:9b:8e:77:38:13:7a:0a:2c:
9b:a1:ae:97:74:38:64:64:dc:0e:a9:47:e7:e0:22:ab:96:47:
0b:8e:a7:99:96:28:13:62:9a:51:f9:6e:73:bd:c7:53:0f:dd:
3e:b3:2c:41:03:a7:30:7b:08:05:b4:0f:3a:5e:e1:e5:af:63:
97:75:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:58 2025 by rpki-client