Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/wYKtXFaCTvrrAK9ghn3IBzNri6U.roa
File: wYKtXFaCTvrrAK9ghn3IBzNri6U.roa (raw, json)
Hash identifier: 5muPxdtSfl2kG91ragur7xX35YNdygE6/Y4gC4KO/cg=
Subject key identifier: C1:82:AD:5C:56:82:4E:FA:EB:00:AF:60:86:7D:C8:07:33:6B:8B:A5
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 0194274636796EECCC08233DCC878A924063
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/wYKtXFaCTvrrAK9ghn3IBzNri6U.roa
Signing time: Thu 02 Jan 2025 13:48:20 +0000
ROA not before: Thu 02 Jan 2025 13:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212000
IP address blocks: 185.244.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:36:79:6e:ec:cc:08:23:3d:cc:87:8a:92:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 2 13:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c182ad5c56824efaeb00af60867dc807336b8ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:d2:af:65:60:f3:c3:08:89:54:ed:57:e7:
8c:ef:65:26:0c:7f:4e:a4:1a:2e:05:02:da:d0:e5:
e9:88:95:4e:3e:3d:2b:2a:8f:36:5d:de:42:89:69:
75:d7:54:4e:ec:4f:62:05:93:43:85:ce:ae:0f:d6:
a9:37:fd:d9:92:e3:2d:f8:f0:98:a7:f8:8f:36:eb:
4c:e8:0b:26:2e:bd:9c:6e:59:4c:05:e6:c4:55:a3:
88:ba:af:d8:36:4c:38:75:dc:4e:13:6d:7e:9b:d0:
1b:1a:86:6d:06:27:96:db:1f:6e:cc:53:3f:00:ba:
6d:73:36:6d:59:0c:b4:0a:2d:63:78:13:79:45:96:
87:6b:37:23:c6:ca:57:58:ac:b5:5e:47:91:7b:d9:
0e:e6:b5:f2:d9:99:93:52:f0:29:23:3b:93:45:78:
28:81:5e:b9:84:af:58:f9:fc:68:d1:ed:40:38:a1:
81:4e:b3:24:73:bb:f6:97:2e:87:29:44:7a:ef:7e:
bf:ba:9d:ad:01:88:81:ed:dd:9a:c9:4d:95:fb:e3:
39:45:34:38:4c:c4:5a:05:18:14:f1:ba:19:10:05:
bc:a1:07:92:31:b4:d0:8d:bd:b7:e7:95:4c:fb:7b:
39:a0:8c:42:83:7d:51:24:0f:49:78:2a:81:a8:72:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:AD:5C:56:82:4E:FA:EB:00:AF:60:86:7D:C8:07:33:6B:8B:A5
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/wYKtXFaCTvrrAK9ghn3IBzNri6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c0:da:93:db:0b:be:f4:a0:11:78:29:ab:f3:b6:e8:62:dd:
a7:e2:02:b2:45:19:b2:a8:b1:b7:f6:25:ce:08:81:d3:18:0f:
78:78:b4:ee:97:ba:7f:19:d8:72:3c:74:bc:de:ae:50:60:80:
b6:78:f6:ee:5d:0b:7f:dd:b8:88:22:e8:3a:cb:f9:da:75:3f:
7d:92:77:0f:a6:9b:c6:46:bb:77:d1:c8:c6:26:f8:fa:03:47:
45:06:fe:4c:ad:1a:0f:88:1b:3e:7f:49:4f:04:ee:76:29:f1:
28:80:bb:b3:28:0e:2a:c1:2b:2d:b2:47:20:9d:be:8d:f2:8c:
14:7b:0b:19:33:8d:42:a8:34:15:51:a3:8c:91:a5:96:41:8a:
38:f8:92:28:79:fb:58:21:ee:3e:bc:7c:53:e4:8f:c8:cb:f1:
96:77:e3:5f:48:cd:21:8b:0b:42:64:8e:8c:96:51:78:79:77:
db:04:37:d8:ae:cb:86:f5:8b:99:fb:65:1e:58:07:70:54:24:
2f:8e:24:15:4b:d2:54:62:c7:55:23:96:0b:1e:fb:a3:cf:b6:
74:ff:3f:b4:83:23:ea:41:c9:8a:24:86:99:b9:1e:e2:0d:4c:
03:5b:08:80:53:11:42:3a:d8:fc:1e:42:84:f0:84:23:18:26:
d2:4e:f8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:14 2025 by rpki-client