Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/wbXeB63VhLi_7WMIhOdMpk0lCW4.roa
File: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (raw, json)
Hash identifier: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=
Subject key identifier: C1:B5:DE:07:AD:D5:84:B8:BF:ED:63:08:84:E7:4C:A6:4D:25:09:6E
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 019420D6302839EE72FD80EA4019DC26424B
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/wbXeB63VhLi_7WMIhOdMpk0lCW4.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.142.144.0/24 maxlen: 24
185.142.145.0/24 maxlen: 24
185.142.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:30:28:39:ee:72:fd:80:ea:40:19:dc:26:42:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1b5de07add584b8bfed630884e74ca64d25096e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:33:bb:74:7a:0c:51:0c:d7:90:de:d6:0a:
50:52:0b:f4:88:89:83:65:62:1d:01:e8:56:08:9b:
98:15:6b:0c:04:c6:c8:a1:71:f5:95:90:c9:1b:c4:
e8:e1:15:30:80:83:3f:23:37:40:2c:4a:52:f8:db:
c9:6f:ae:ea:4d:71:d7:48:77:a7:28:21:84:27:93:
34:81:f4:a1:f0:cd:4a:48:54:36:79:0a:e1:a3:eb:
32:12:6f:a5:d5:2e:94:74:e2:c0:4e:48:14:9e:67:
05:3c:4e:3b:42:4a:4d:fd:4d:15:60:49:a7:37:0f:
51:45:3a:59:fb:26:7a:8b:20:f7:90:95:34:95:11:
23:e1:37:45:4c:69:63:55:c0:86:02:a1:3e:ac:94:
e0:b5:ee:40:1f:61:8f:a2:ee:90:67:a2:fe:a0:ff:
a7:cf:ec:71:a3:cc:82:a7:be:69:55:b4:fa:81:b6:
5c:78:95:79:20:80:08:25:72:6f:28:ec:da:01:cf:
0f:09:dc:46:02:5f:06:90:c6:cd:97:60:a5:bc:38:
0b:75:0d:62:b4:dc:df:d9:d5:29:4d:52:c4:50:f6:
82:bc:2e:4c:ee:36:f2:ec:21:af:9f:7d:69:ad:8f:
8b:8a:8e:4f:3e:b3:5c:30:5d:34:4c:9f:84:f8:15:
c3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B5:DE:07:AD:D5:84:B8:BF:ED:63:08:84:E7:4C:A6:4D:25:09:6E
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/wbXeB63VhLi_7WMIhOdMpk0lCW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.144.0-185.142.146.255
Signature Algorithm: sha256WithRSAEncryption
a1:b3:c7:7e:1e:19:e9:a3:14:07:42:88:20:3e:66:98:bb:ba:
98:2e:90:58:58:20:b6:0d:cb:8f:c5:d9:44:9a:f9:c6:6f:f7:
d4:76:5a:f4:21:95:36:4b:2e:29:9c:4a:71:18:9e:b4:04:79:
33:aa:14:6e:81:2f:38:32:1f:27:a1:ab:29:6d:2a:32:ec:62:
8b:44:cb:74:15:51:29:6f:68:69:2f:d3:07:e7:74:e8:80:cd:
e2:3a:3c:16:ee:43:9d:e5:0f:e0:74:9e:35:20:5a:da:0a:01:
ab:35:36:75:67:dc:77:fa:5b:57:97:79:44:de:11:18:69:aa:
e4:34:21:a1:a2:dc:90:48:0e:24:0e:fd:db:43:a1:3f:b7:15:
57:e6:4d:bf:7c:87:f2:4e:b0:63:03:0a:9f:a1:51:55:37:c3:
b8:0d:0b:d7:ad:a6:e1:d9:8b:32:c2:d7:40:24:d4:74:da:21:
3a:4b:b1:66:2d:11:95:a1:d2:a0:28:71:88:e8:93:75:82:a4:
d7:33:e9:32:e8:e8:3d:16:e4:6d:c0:a2:9b:ae:89:82:da:1d:
d1:6f:8e:3b:f8:30:8a:15:da:c9:8c:d9:3e:a3:d8:20:4b:ea:
e0:d3:29:c4:ff:71:d6:9d:02:c3:99:80:81:67:e7:9c:3a:d2:
2f:f1:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:58 2025 by rpki-client