Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/WYEKXhWarkIaMX3EUO00ulkHiOE.roa
File: WYEKXhWarkIaMX3EUO00ulkHiOE.roa (raw, json)
Hash identifier: U2QqWXZG6O8oPXfv5PztqHfihktp5N8jfu2uMFAxqk4=
Subject key identifier: 59:81:0A:5E:15:9A:AE:42:1A:31:7D:C4:50:ED:34:BA:59:07:88:E1
Certificate issuer: /CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Certificate serial: 01942144189C29AB1A00AFB23C464CEE2BAC
Authority key identifier: 53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/WYEKXhWarkIaMX3EUO00ulkHiOE.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198247
IP address blocks: 185.12.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:18:9c:29:ab:1a:00:af:b2:3c:46:4c:ee:2b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5380cd8ad2f84e14e9b5b64238937b6d4207e221
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59810a5e159aae421a317dc450ed34ba590788e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:6e:ef:ce:17:05:a0:75:93:b2:26:29:c8:
c8:64:20:a8:c7:57:93:07:26:cb:fb:fb:1b:ea:98:
a6:10:3e:f9:be:94:1e:57:5a:36:22:89:20:f9:bc:
5e:26:c9:69:c5:a9:b0:dd:f8:65:1b:2c:60:3b:1f:
df:c2:ba:b6:e2:4e:24:3d:e2:d8:ed:78:b6:10:11:
36:2f:29:f1:cd:a8:23:f8:80:a1:2f:e2:76:06:28:
6b:b2:5b:3a:1d:ac:f5:17:93:49:c7:c8:fe:be:e0:
df:d4:a5:fa:7b:aa:8a:40:14:36:63:00:3e:f9:54:
52:51:e6:c7:48:e3:01:f0:3c:07:0a:bd:9e:72:10:
8a:9a:2f:5e:6d:c5:54:95:a7:30:95:48:ee:33:b4:
d4:e3:24:ba:95:d2:8a:9c:7a:f5:fc:5d:81:90:48:
8e:7d:48:f0:e8:d6:10:32:21:5c:74:57:ca:54:b3:
8b:88:d9:a6:91:19:f5:34:5a:4f:d2:95:98:da:14:
90:19:80:f1:e5:26:e9:95:3b:db:05:b7:f1:3e:6a:
b2:5e:c9:27:3a:04:8b:dd:92:e6:75:f6:cb:d1:ae:
1a:ef:f6:9c:73:b6:25:94:f0:af:c7:08:7d:e7:1f:
3d:ca:19:dc:ea:a5:01:f3:21:02:f7:9a:70:9c:8d:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:81:0A:5E:15:9A:AE:42:1A:31:7D:C4:50:ED:34:BA:59:07:88:E1
X509v3 Authority Key Identifier:
keyid:53:80:CD:8A:D2:F8:4E:14:E9:B5:B6:42:38:93:7B:6D:42:07:E2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4DNitL4ThTptbZCOJN7bUIH4iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/WYEKXhWarkIaMX3EUO00ulkHiOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2fcc92-c967-4a65-a434-5e36d1b0825e/1/U4DNitL4ThTptbZCOJN7bUIH4iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.25.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f9:e2:d1:22:2d:5d:eb:08:0f:f7:68:14:8a:29:9e:ac:95:
6c:26:50:f1:0b:8d:cb:ca:81:ff:bd:9b:e5:db:8e:ac:9e:87:
43:69:f0:68:69:d4:19:01:7a:74:64:26:eb:9d:07:5b:ea:f9:
48:81:aa:9b:af:9b:fa:ef:ef:59:ad:22:6f:d6:ed:d7:8d:32:
55:51:61:5b:30:52:83:0d:86:07:58:b2:09:04:aa:b7:ba:23:
5a:69:a0:f4:2a:8c:a4:73:15:de:c0:62:da:54:58:ef:c5:a3:
e6:5a:cb:66:b1:9e:e3:8f:8b:ba:c9:da:16:e7:dd:a1:6a:a3:
b5:0c:ec:04:bf:54:95:09:ee:25:19:61:5c:93:37:2d:62:67:
d6:8c:c6:ad:f1:f3:c4:19:58:45:da:e4:74:09:e6:cc:79:f1:
a6:39:74:67:b2:4b:6a:75:a2:38:77:f3:43:6a:b8:86:36:d3:
c1:cf:98:cf:02:fb:f6:25:12:e9:92:4f:35:68:66:4f:fe:f6:
75:33:a9:2d:ae:d8:74:45:20:8e:14:3f:21:b6:a8:23:c9:9d:
49:77:71:84:a7:49:8d:4e:8b:96:95:e1:c5:cc:4d:b7:84:6f:
20:32:53:20:3b:e5:2e:43:55:72:88:d6:bd:54:e2:7d:bc:7d:
e4:4f:9a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:47:31 2025 by rpki-client