Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/wTQvHz6KrEBh22NnZfSVSbP_3L0.roa
File: wTQvHz6KrEBh22NnZfSVSbP_3L0.roa (raw, json)
Hash identifier: FPUhMtrstm1Ac2XI6rl3vCrIvxuS83fDR4A5ahN+U+w=
Subject key identifier: C1:34:2F:1F:3E:8A:AC:40:61:DB:63:67:65:F4:95:49:B3:FF:DC:BD
Certificate issuer: /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Certificate serial: 019423D79BC594675CD5B7209CFE5B9CDA41
Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/wTQvHz6KrEBh22NnZfSVSbP_3L0.roa
Signing time: Wed 01 Jan 2025 21:48:40 +0000
ROA not before: Wed 01 Jan 2025 21:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207236
IP address blocks: 185.162.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:9b:c5:94:67:5c:d5:b7:20:9c:fe:5b:9c:da:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Validity
Not Before: Jan 1 21:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1342f1f3e8aac4061db636765f49549b3ffdcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:52:b9:bb:19:a4:4d:75:d7:90:03:e2:83:
eb:b8:60:19:73:f8:0a:31:85:97:0d:78:cc:a6:84:
e4:e4:c6:21:69:aa:26:81:2b:b1:d7:8a:0e:96:c5:
2d:3e:28:7c:2c:35:9c:a3:05:32:dc:2f:d5:e3:99:
81:5f:22:8e:42:91:b3:88:d6:52:4e:9c:23:2f:4d:
88:45:d3:dd:42:c1:66:fc:1a:04:18:53:db:f0:20:
75:5c:62:6a:5e:96:0e:fe:b6:f8:2a:63:47:82:f1:
a5:b0:3f:33:64:4b:e9:30:31:7a:00:a5:cc:c2:7d:
48:2b:d9:44:74:9d:96:7a:b0:ee:e7:08:29:83:97:
7c:ff:72:9e:b7:62:b8:78:c2:49:0f:a4:0b:76:8e:
2b:2c:db:1c:51:96:e6:89:d5:ab:d4:b6:44:b4:8d:
5c:59:c9:14:f5:5e:3d:db:e2:ba:d9:92:a2:f9:88:
d8:29:ee:6f:fb:ab:f6:57:ae:87:6d:0b:00:75:46:
3f:cd:0a:96:4c:53:79:22:35:72:74:51:e3:e5:0c:
3f:26:24:f3:b0:92:b8:f7:8d:4d:ef:97:bf:f2:93:
f2:a8:18:0e:fd:48:6d:75:89:44:f3:eb:b1:fc:d7:
cd:ca:93:57:2d:04:de:b0:49:f9:99:57:6a:8c:7c:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:34:2F:1F:3E:8A:AC:40:61:DB:63:67:65:F4:95:49:B3:FF:DC:BD
X509v3 Authority Key Identifier:
keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/wTQvHz6KrEBh22NnZfSVSbP_3L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.0.0/22
Signature Algorithm: sha256WithRSAEncryption
67:d7:a3:1d:e1:0a:cd:2a:66:28:dd:62:e7:18:16:d6:65:03:
9d:89:57:67:fa:5b:46:21:92:7c:43:69:ce:02:a5:18:40:b5:
4c:bb:2c:3e:38:5a:72:f0:fd:a7:95:05:5a:e8:37:db:5b:6a:
25:01:48:4e:8e:86:a5:67:56:18:4b:06:2d:38:81:be:4a:3b:
5b:13:b1:e9:06:e7:f9:f2:85:e7:41:34:58:f1:9b:d2:b1:c3:
1c:82:29:8d:2c:d2:a2:19:27:66:07:9c:c5:d1:73:00:29:e5:
bc:4f:96:1d:f8:e0:f4:b5:53:7c:06:01:29:f6:8d:c4:b3:9e:
bf:d0:90:57:43:81:0f:ce:92:5a:b1:e2:ae:13:f9:03:64:3a:
68:0d:0d:00:88:03:c7:1c:12:bb:79:06:29:a1:0b:ba:c1:f2:
05:2a:8b:d0:6c:ad:a3:99:b9:b7:11:a7:29:30:5c:4b:b5:61:
40:17:86:61:06:07:2b:7f:8c:34:6f:d0:e5:f1:0e:26:14:db:
98:9a:cc:8f:a7:d9:20:16:23:c6:02:63:9c:d0:37:8f:32:95:
93:c8:be:16:28:3d:13:bb:ae:34:09:64:d3:fe:9d:f7:e3:2c:
18:47:65:24:13:17:97:e6:4c:9b:56:f8:e4:4b:78:b1:d3:80:
95:66:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:50 2025 by rpki-client