Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/WLsZoJk1GhdrOKGFUIiUvyUQlNo.roa
File: WLsZoJk1GhdrOKGFUIiUvyUQlNo.roa (raw, json)
Hash identifier: 8Vq8lEK7GzLT23acma9bFcmYTV08obPFWVCWLWeW0lg=
Subject key identifier: 58:BB:19:A0:99:35:1A:17:6B:38:A1:85:50:88:94:BF:25:10:94:DA
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 03870A42
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/WLsZoJk1GhdrOKGFUIiUvyUQlNo.roa
Signing time: Fri 04 Feb 2022 07:35:01 +0000
ROA not before: Fri 04 Feb 2022 07:35:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207895
IP address blocks: 185.130.60.0/22 maxlen: 24
185.244.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59181634 (0x3870a42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Feb 4 07:35:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58bb19a099351a176b38a185508894bf251094da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:2b:03:2e:51:94:5c:bf:4c:e9:7c:6b:54:
5d:26:ad:cf:9c:dc:a6:b8:32:42:60:81:5a:6b:c1:
c5:93:5f:81:26:b9:22:85:ec:ed:d4:fd:32:69:41:
a0:81:d9:14:62:aa:46:a7:5d:9b:00:f2:b5:db:b2:
b7:a7:39:79:1f:f6:61:de:b9:df:a4:cc:38:83:43:
58:7d:fa:be:d4:70:39:82:4a:23:1f:d6:8c:c9:db:
be:e0:06:e9:7b:d8:8b:36:53:10:e8:8a:c1:84:f9:
20:01:e0:a3:6b:c3:43:45:bc:81:0e:a3:92:5b:7c:
2b:15:e8:44:26:7f:50:1d:47:5d:ea:cb:20:2e:0b:
0b:ce:c9:db:fa:c6:cd:82:23:e7:cc:70:b6:f9:3e:
b5:1d:43:35:cc:62:f3:57:0c:d5:37:bc:65:6d:7e:
f2:0a:c9:fc:f1:fc:d9:cc:01:cc:cd:80:0f:eb:96:
be:1f:d5:06:a4:17:23:c5:96:c5:74:d6:7a:90:1f:
3b:43:b2:27:04:e4:e9:e2:c6:d9:05:b7:38:dd:78:
29:55:e1:fd:a8:9a:f2:f2:60:07:36:ed:be:7e:3c:
22:47:cd:dc:92:93:87:aa:a8:15:5b:e2:62:b4:c4:
cb:4b:c0:d9:a5:57:f4:22:24:8e:03:10:8b:27:76:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:19:A0:99:35:1A:17:6B:38:A1:85:50:88:94:BF:25:10:94:DA
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/WLsZoJk1GhdrOKGFUIiUvyUQlNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.60.0/22
185.244.94.0/23
Signature Algorithm: sha256WithRSAEncryption
66:35:06:86:28:33:2c:52:92:68:9a:53:34:4a:4f:50:73:ba:
9a:84:ff:c2:f1:91:4e:9d:a3:6a:ce:3e:da:21:fd:c5:f0:8a:
00:33:71:6a:5f:97:12:bf:a7:a1:72:e6:fc:09:62:e4:c3:98:
eb:33:ac:1e:68:b7:c3:4d:d0:04:78:df:14:bd:1f:74:4a:62:
72:66:a9:d0:f1:6a:83:05:0b:d1:c1:a2:bd:f1:bd:57:55:51:
60:f9:24:3e:2f:59:6f:46:2d:98:56:36:38:82:3e:20:f4:4c:
16:70:06:ea:72:66:f4:7f:4c:fe:63:fd:eb:ba:3f:08:ac:81:
39:b3:f5:f6:16:99:62:4a:cf:72:9f:ac:2a:fd:c4:73:82:69:
a7:99:25:74:f7:eb:85:d1:22:76:7e:01:70:d3:df:fb:29:9b:
77:7f:bf:77:cb:02:96:6b:a8:a2:07:7c:4a:b3:bd:7d:12:41:
2d:7c:5a:e5:10:65:a4:65:d5:28:af:74:7d:a4:6d:c9:45:62:
c0:64:0e:7c:ae:15:2d:2a:7c:28:09:58:39:7e:e1:16:e7:b6:
75:f5:0e:74:cc:c4:15:5d:f9:29:c3:80:32:a4:b1:5f:af:88:
5f:15:4f:38:db:e0:9b:cc:74:a7:d1:c8:4b:45:0a:32:ef:d2:
96:b2:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:54:01 2025 by rpki-client