Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/WFV1Z_Q58c4Y83xfLqD0Ovsk_s8.roa
File: WFV1Z_Q58c4Y83xfLqD0Ovsk_s8.roa (raw, json)
Hash identifier: QtYQHFNOLw8Uh9YUaMW2vg5yIleTg1VhoxB5ieKpkDQ=
Subject key identifier: 58:55:75:67:F4:39:F1:CE:18:F3:7C:5F:2E:A0:F4:3A:FB:24:FE:CF
Certificate issuer: /CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Certificate serial: 030BAB
Authority key identifier: DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/WFV1Z_Q58c4Y83xfLqD0Ovsk_s8.roa
Signing time: Tue 01 Feb 2022 09:18:49 +0000
ROA not before: Tue 01 Feb 2022 09:18:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15830
IP address blocks: 185.172.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199595 (0x30bab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc6917645d9d220435f91c7e46c8110cf89acbe4
Validity
Not Before: Feb 1 09:18:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58557567f439f1ce18f37c5f2ea0f43afb24fecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:99:e4:2c:55:4a:fe:49:1d:8b:2d:ee:ee:3e:
cd:9e:77:45:56:3f:11:34:76:3a:8a:de:40:a8:d4:
85:49:bd:5f:b6:00:c4:a1:e4:35:8d:8e:30:7d:d4:
c1:28:9b:26:33:4e:3b:37:16:a4:44:c3:6e:ae:3f:
8b:01:74:2a:00:2e:bd:88:a6:40:cf:83:1b:16:f1:
55:38:d9:a3:8f:8e:aa:e1:ca:27:74:d9:c6:89:58:
27:58:61:fb:0c:cd:b8:e7:f3:47:61:2e:57:13:ef:
b9:2b:de:5f:ea:9a:db:34:6e:4e:d4:30:6e:88:63:
ea:f5:2d:e3:fe:8d:79:8f:99:79:a5:bb:03:7e:ad:
65:da:15:d7:9d:d0:c9:41:46:a6:58:c2:6c:ec:dd:
af:c1:9c:83:e6:6d:e8:3a:74:d3:f0:e1:9f:ad:5e:
64:ae:e3:a8:da:b4:52:1c:88:6c:6c:6d:5a:e7:92:
76:71:60:6c:14:81:25:de:c1:61:05:2e:0d:2c:ee:
6b:e6:50:5d:31:36:8a:45:63:9a:f8:18:36:11:99:
f4:ce:bb:7f:57:46:a6:2a:63:de:fa:f6:fc:e9:bc:
11:d5:6a:10:c9:7e:01:3c:b1:2a:5f:41:6d:61:d6:
73:47:ce:5d:bb:34:16:06:e8:de:d6:19:07:07:f2:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:75:67:F4:39:F1:CE:18:F3:7C:5F:2E:A0:F4:3A:FB:24:FE:CF
X509v3 Authority Key Identifier:
keyid:DC:69:17:64:5D:9D:22:04:35:F9:1C:7E:46:C8:11:0C:F8:9A:CB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/WFV1Z_Q58c4Y83xfLqD0Ovsk_s8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/3544a7-d556-4701-957a-428be9008fba/1/3GkXZF2dIgQ1-Rx-RsgRDPiay-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.227.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b2:ea:c0:2d:c4:67:e8:03:55:c4:14:04:94:62:00:61:57:
14:25:60:23:f6:68:f2:3b:b5:49:e2:2d:9a:e6:8f:1d:03:bb:
25:50:9c:58:ff:ce:c2:de:07:5d:88:50:d2:25:b3:66:87:15:
ef:b6:6c:7f:ae:1d:83:a1:24:35:a7:52:13:14:59:e2:9f:62:
9d:c5:54:5b:71:f4:ec:8c:ea:85:91:54:7b:89:18:ad:43:5b:
71:d4:57:3f:7c:bb:1f:83:22:07:86:e4:6c:fd:31:36:2c:06:
82:dc:67:02:76:a1:9b:2d:af:4b:e7:50:87:68:ec:7f:93:1a:
f5:9c:6d:bb:f7:d1:d0:80:8a:da:4e:fb:ca:59:8e:41:21:3f:
b0:5c:6b:2a:f3:c4:f2:e8:ce:41:27:a7:ff:92:5d:c1:62:90:
57:a5:4d:bb:e5:c6:db:dd:03:9d:02:4a:b5:6e:bd:23:31:11:
55:c3:60:4f:18:4a:d8:4e:b2:76:ac:55:f9:18:d3:ed:36:a2:
f7:26:c7:74:8c:1b:c4:d3:5e:f6:42:31:86:2f:c9:37:be:32:
f9:97:b0:33:d5:57:37:10:10:96:bf:d2:c6:b2:6a:4c:14:17:
b5:f7:d6:22:3b:12:09:9f:00:9f:12:0b:9f:de:32:1e:a8:31:
55:d7:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:17:40 2025 by rpki-client