Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/wcsDDpIECof4gYQpcY1U5LHTweA.roa
File: wcsDDpIECof4gYQpcY1U5LHTweA.roa (raw, json)
Hash identifier: c2ZY6b4okxtA5QTRmqHi5xnSL16Fb+O7xziL88kNAXY=
Subject key identifier: C1:CB:03:0E:92:04:0A:87:F8:81:84:29:71:8D:54:E4:B1:D3:C1:E0
Certificate issuer: /CN=f73a6daf6522f29555519afd142d4a035c7492b8
Certificate serial: 0188480D80F8E6E63474A97BCF3E74738E83
Authority key identifier: F7:3A:6D:AF:65:22:F2:95:55:51:9A:FD:14:2D:4A:03:5C:74:92:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zptr2Ui8pVVUZr9FC1KA1x0krg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/wcsDDpIECof4gYQpcY1U5LHTweA.roa
Signing time: Tue 23 May 2023 10:00:24 +0000
ROA not before: Tue 23 May 2023 10:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56883
IP address blocks: 185.211.43.0/24 maxlen: 24
2a12:af80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:0d:80:f8:e6:e6:34:74:a9:7b:cf:3e:74:73:8e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73a6daf6522f29555519afd142d4a035c7492b8
Validity
Not Before: May 23 10:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1cb030e92040a87f8818429718d54e4b1d3c1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:a0:78:e2:ed:e8:bf:fb:19:9b:64:f0:3f:
04:74:e6:ca:ce:06:c0:29:aa:76:7a:a1:ef:f1:8a:
74:91:f8:54:66:d1:1f:8c:ca:f7:aa:88:07:60:2a:
cf:7e:9d:09:07:dc:32:13:41:44:1e:95:bf:8d:8a:
3f:5a:2d:52:11:d8:65:ca:6b:fe:00:b5:90:83:22:
0b:9e:1c:fb:cd:33:b7:62:a1:b1:06:8c:a0:23:f8:
4f:3f:ec:6e:45:e1:6c:e6:28:c8:f6:13:73:c3:22:
16:cc:5a:d9:69:0f:80:b9:6c:4a:e3:b6:dc:d0:18:
ce:b8:80:09:91:d0:cd:e8:b8:28:0f:fe:2a:3a:54:
51:77:cb:f3:3b:97:b7:c4:a8:6e:05:f6:f8:a6:2d:
89:c7:77:a3:f8:74:91:9e:5e:66:f6:70:ca:5a:61:
d9:f4:84:6f:2b:6b:a5:e1:0e:8c:29:21:93:14:79:
9c:a4:3a:fb:f7:ac:4d:bb:a2:eb:44:e0:cd:7e:e7:
95:5b:b1:14:27:48:a0:c0:96:a0:18:8b:a8:5a:9d:
38:24:94:79:8e:41:19:ca:26:af:81:99:92:3e:b0:
0f:d7:d1:cb:4b:ba:93:db:5b:46:80:c9:9a:00:1f:
54:ee:40:b7:21:46:95:56:43:76:51:39:f3:ea:d3:
c0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CB:03:0E:92:04:0A:87:F8:81:84:29:71:8D:54:E4:B1:D3:C1:E0
X509v3 Authority Key Identifier:
keyid:F7:3A:6D:AF:65:22:F2:95:55:51:9A:FD:14:2D:4A:03:5C:74:92:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zptr2Ui8pVVUZr9FC1KA1x0krg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/wcsDDpIECof4gYQpcY1U5LHTweA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0a48d8-12fc-4741-b53e-2429b3e3def9/1/9zptr2Ui8pVVUZr9FC1KA1x0krg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.43.0/24
IPv6:
2a12:af80::/32
Signature Algorithm: sha256WithRSAEncryption
3c:47:73:0f:92:b5:56:9e:d2:40:5d:65:85:84:d7:85:09:df:
4d:12:2b:8a:d7:5d:f6:c5:35:fc:a7:cd:b3:c6:57:5a:2f:52:
38:62:ff:e2:63:7e:0d:43:f6:04:ad:18:7d:58:e6:fb:8b:5f:
cf:fe:b2:6d:72:24:a5:01:42:7d:81:2d:13:e2:50:4d:fc:42:
83:37:6a:2a:15:8f:a0:60:5d:34:82:79:d6:23:29:8d:48:75:
73:c0:30:08:04:cd:32:9f:fd:c5:92:f8:92:c3:b0:a0:5f:7b:
8c:79:56:3e:22:17:85:9b:90:81:85:8d:06:30:0f:75:cf:1d:
89:17:f4:f4:61:c2:95:91:05:09:0d:fa:c3:ff:43:8b:10:f4:
26:be:8c:d6:9c:7b:4e:04:ca:f5:52:a0:d4:f4:73:4c:4a:5f:
0c:05:23:8f:f4:23:94:49:49:24:ea:c6:e4:07:2e:47:be:78:
0a:74:9b:0f:7c:e6:64:e1:4b:7d:f4:b7:00:31:8b:d5:aa:c0:
1a:c0:ca:94:a7:a0:35:6b:3c:8c:aa:e7:7e:fa:8d:6b:22:0c:
1b:3a:c9:af:06:22:3c:47:e3:85:7b:00:93:ee:8a:3c:14:7f:
d5:da:0d:a3:59:41:ff:97:f0:e2:6f:df:e8:1a:0c:ef:9c:26:
9c:e1:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:17:07 2025 by rpki-client