Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/wLU7Avpjwwyht_SeRmMxUJPBxKU.roa
File: wLU7Avpjwwyht_SeRmMxUJPBxKU.roa (raw, json)
Hash identifier: qyTPwsJWIqpmw5jM+jwATaIOl6TIhuH+//rg/QLmAbQ=
Subject key identifier: C0:B5:3B:02:FA:63:C3:0C:A1:B7:F4:9E:46:63:31:50:93:C1:C4:A5
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 01942144626DB578DAE67ED703529ADF7857
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/wLU7Avpjwwyht_SeRmMxUJPBxKU.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203063
IP address blocks: 185.145.0.0/24 maxlen: 24
185.145.1.0/24 maxlen: 24
185.145.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:62:6d:b5:78:da:e6:7e:d7:03:52:9a:df:78:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0b53b02fa63c30ca1b7f49e4663315093c1c4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3b:13:3a:50:de:81:34:7b:2e:2f:84:26:d6:
04:87:6a:c8:1e:4d:60:5a:55:57:55:d9:e7:cd:80:
b8:3c:20:68:2c:82:90:c2:4e:1a:cf:01:84:f0:89:
a1:88:f6:11:06:f9:f9:00:80:58:f6:71:52:8c:1a:
9e:3b:dc:0e:d9:06:1e:a4:bc:be:ac:ed:7b:76:ae:
33:8c:c0:62:50:e7:18:14:e2:5d:07:78:4e:4f:6e:
08:c7:dc:0b:24:12:a6:9e:96:c4:0d:98:d6:8b:62:
37:1d:6a:d2:e3:2a:ff:8c:3f:3b:1a:0d:e8:9b:e0:
2c:60:16:f2:c5:91:05:7a:fa:53:a7:14:6d:4c:bc:
f4:dd:b3:e2:73:d8:72:d9:b2:8a:a7:28:f4:6d:54:
13:fd:b5:3c:00:9b:5c:56:14:b6:e2:d9:60:10:dd:
1a:e3:40:ef:77:df:69:80:e1:16:83:a7:d4:d2:66:
b7:96:97:60:3a:b8:81:2f:5b:b0:cb:5b:20:1e:32:
a8:77:bc:38:43:3a:5d:f8:8c:cc:90:52:5a:a5:12:
ac:f6:c1:0a:05:91:aa:8f:9e:8e:8e:d0:94:7a:cc:
b3:f3:f4:73:2c:78:17:64:ea:8e:67:2a:bf:24:81:
0f:7d:34:6d:83:a6:50:5d:a6:6d:34:66:d8:e0:dc:
3d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:3B:02:FA:63:C3:0C:A1:B7:F4:9E:46:63:31:50:93:C1:C4:A5
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/wLU7Avpjwwyht_SeRmMxUJPBxKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.0.0-185.145.2.255
Signature Algorithm: sha256WithRSAEncryption
d0:10:86:86:73:bb:c7:a4:80:68:f2:d0:5f:76:84:4a:e4:dd:
f8:8c:54:04:31:d5:f2:45:cd:bf:ba:34:c0:9c:ea:28:d3:22:
67:d9:9b:d7:e2:e8:24:64:41:31:d2:c3:56:47:41:08:e0:9e:
1f:bf:07:06:33:15:a9:a7:a1:08:45:03:0e:58:51:a3:82:e7:
f2:48:89:d0:4d:07:2b:76:eb:1b:2b:05:2f:34:9a:d5:48:d5:
f3:93:6c:e1:4d:5d:de:1b:1d:d7:9d:bf:d0:e5:0b:8a:74:77:
eb:24:3e:56:3a:1b:c8:ec:d2:1b:d1:71:b0:d0:dd:a9:f9:82:
7e:9a:bd:4d:3c:a7:c6:f5:2b:26:75:2e:ba:77:a5:9f:ff:f7:
ca:e8:b7:bb:04:9b:e1:24:a2:db:44:f3:9b:59:f2:a0:cc:08:
6b:91:6e:48:60:6c:8d:45:00:c1:34:7b:a5:57:65:05:8e:95:
f0:a8:bd:69:f0:b1:34:8d:6c:08:da:72:e9:f1:d7:6f:b5:b8:
09:2a:e3:51:69:5a:90:68:65:14:9a:05:ed:de:b1:2d:f4:a6:
d9:bd:d3:0a:bc:c1:64:96:d0:3e:43:b2:a3:bc:56:f9:5b:f8:
dc:21:1e:6a:fd:78:16:93:c3:ca:7f:e3:d7:ac:3d:38:51:dd:
8e:3b:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:44 2025 by rpki-client