Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/wrf5hE7K1tSxtANI1OLIGfXDlsg.roa
File: wrf5hE7K1tSxtANI1OLIGfXDlsg.roa (raw, json)
Hash identifier: dJ+4j6VIV2TVuQ1hjP+M5HNPZ3f6Bdfg+596PXOPxb4=
Subject key identifier: C2:B7:F9:84:4E:CA:D6:D4:B1:B4:03:48:D4:E2:C8:19:F5:C3:96:C8
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 01941F8C6BD70B891BD52FE7FC02943824D6
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/wrf5hE7K1tSxtANI1OLIGfXDlsg.roa
Signing time: Wed 01 Jan 2025 01:48:03 +0000
ROA not before: Wed 01 Jan 2025 01:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206194
IP address blocks: 185.188.188.0/23 maxlen: 23
185.188.190.0/24 maxlen: 24
185.188.191.0/24 maxlen: 24
2a0f:e980::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:6b:d7:0b:89:1b:d5:2f:e7:fc:02:94:38:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Jan 1 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2b7f9844ecad6d4b1b40348d4e2c819f5c396c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ef:8a:af:85:af:ed:40:4f:80:9f:02:12:ef:
03:a0:ca:4d:36:64:5b:15:35:11:9a:59:68:7d:25:
7a:22:a6:89:9b:b7:84:26:ee:30:59:72:4c:51:f5:
77:2d:e1:63:b7:1c:83:28:8b:cb:90:4b:a6:b5:b0:
5b:c8:f7:18:ba:7b:65:71:ea:7c:81:da:a4:99:aa:
99:33:33:09:48:39:d3:72:0e:21:d9:0f:e3:d2:9b:
57:6f:7b:82:b9:99:40:b7:27:0d:c0:c5:fd:6a:db:
3a:91:6e:7b:e9:4c:c9:2b:15:50:86:c5:79:b7:d7:
05:f7:92:e1:7c:5b:51:67:4d:b0:25:37:af:2c:b8:
f6:a9:b4:3c:42:37:d0:d0:ec:b4:bd:52:4c:1d:2e:
89:aa:22:bd:55:e1:8d:36:c1:75:5e:75:7e:31:74:
ef:86:d0:82:17:36:bd:2a:35:e1:db:54:59:25:f7:
e4:87:7d:a5:13:b8:55:cf:eb:b5:dc:98:0b:8b:7b:
a7:bd:a7:08:13:20:d0:85:33:a2:6a:69:54:1c:4d:
33:b9:6a:9f:87:88:e2:22:e1:5d:6f:91:63:90:19:
59:8d:9b:23:a6:45:78:37:56:0d:ff:48:cf:18:e6:
8a:48:cd:16:c7:77:35:98:d4:8f:ad:85:74:74:29:
1c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:F9:84:4E:CA:D6:D4:B1:B4:03:48:D4:E2:C8:19:F5:C3:96:C8
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/wrf5hE7K1tSxtANI1OLIGfXDlsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.188.0/22
IPv6:
2a0f:e980::/29
Signature Algorithm: sha256WithRSAEncryption
4b:f1:32:7f:3e:ea:88:d4:d9:af:89:d1:b7:0b:15:ed:25:85:
1d:1d:63:24:cc:c8:66:cf:8e:0a:d6:9d:a2:1c:d7:64:38:c7:
16:6d:00:d3:34:99:ee:74:bb:70:ec:c4:52:8f:1c:41:cf:39:
e7:04:83:78:2d:6e:f0:65:c5:4b:27:e6:ce:8c:0b:27:21:ae:
b5:9c:c4:90:4b:7b:90:5b:33:f5:a8:87:a0:d0:30:f6:6c:00:
ec:2c:8c:31:c5:63:b2:28:a7:54:4c:31:27:08:c5:47:e4:b1:
e2:32:94:ac:39:75:aa:f4:b4:90:a2:68:58:1a:10:37:db:f2:
96:78:85:d8:cd:4f:e3:d2:7b:ca:e9:1b:ad:0f:8c:2f:df:06:
e2:f6:39:9f:57:a5:9f:0f:04:5e:8a:8b:14:9c:11:8e:5a:bf:
9e:b2:8c:2c:55:be:ae:23:35:15:32:65:e3:2d:77:9b:17:50:
08:05:e1:31:d2:a6:2c:b4:d1:f0:8e:18:08:72:d5:ff:fa:86:
54:b5:fd:66:9e:7d:6f:ca:12:f8:fc:e9:18:72:d8:d1:5c:0b:
d0:ab:1f:84:4b:ee:e4:8d:5f:06:2e:cd:3a:35:c2:60:c7:63:
e4:c2:e0:b9:0c:b0:c7:b8:94:c3:a9:70:db:72:69:09:1f:ec:
a7:c7:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:46:22 2025 by rpki-client