Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/WjZvJNFzkAFJshNkNzR_PwlwlJ4.roa
File: WjZvJNFzkAFJshNkNzR_PwlwlJ4.roa (raw, json)
Hash identifier: 0GYksu6Vr/OGyx6LNhcX2+yFLlpO1lTSynlOp91Lrlw=
Subject key identifier: 5A:36:6F:24:D1:73:90:01:49:B2:13:64:37:34:7F:3F:09:70:94:9E
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 01856FF946CE999D35F60CBA6F6C9739DD90
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/WjZvJNFzkAFJshNkNzR_PwlwlJ4.roa
Signing time: Mon 02 Jan 2023 00:54:45 +0000
ROA not before: Mon 02 Jan 2023 00:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 185.130.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:46:ce:99:9d:35:f6:0c:ba:6f:6c:97:39:dd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 2 00:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a366f24d173900149b2136437347f3f0970949e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:c6:5c:9b:b2:e2:ed:92:ee:cd:ef:63:7b:
f7:73:7d:f7:38:f4:89:75:f2:2a:b1:05:fb:8c:04:
ee:7a:59:c3:08:2a:c3:b4:5d:ad:b8:ee:3a:6f:56:
b1:50:9d:70:e0:c6:fe:d5:04:0e:4f:0a:1a:88:f0:
fe:21:04:78:a2:8a:73:e1:9f:62:9a:83:d6:d7:fb:
54:af:f6:79:80:ac:9a:06:81:16:7e:99:bf:0f:87:
15:31:db:9b:44:81:43:75:fb:49:e7:38:72:2e:e2:
68:0b:b4:78:bf:a4:f4:bd:be:14:a0:da:bd:26:ff:
d7:98:07:69:44:6d:83:a6:b5:6c:1b:07:78:29:5b:
fc:15:cc:8a:c3:52:f7:e8:d7:a5:c2:ae:04:04:19:
1a:60:86:7b:2a:b6:93:e2:d6:3b:1e:0f:2e:88:0d:
7d:0f:d7:49:ee:1f:88:b6:54:69:e0:1b:bb:4a:21:
a8:b7:67:e4:d7:45:5b:17:03:79:c5:b1:a5:6c:8b:
a7:70:fc:e0:d0:d0:27:cc:e6:84:98:72:f5:20:00:
c1:09:79:c1:7f:ff:63:97:2d:ba:65:43:8d:e0:42:
98:9e:37:8c:e5:d1:37:2c:d8:2a:b9:74:88:80:c0:
c8:52:3a:03:79:84:c0:79:a9:b2:46:18:a6:08:6a:
5a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:36:6F:24:D1:73:90:01:49:B2:13:64:37:34:7F:3F:09:70:94:9E
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/WjZvJNFzkAFJshNkNzR_PwlwlJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3a:81:a0:9d:da:a9:68:81:a2:6b:25:20:26:88:59:e7:c4:
7a:42:5e:9a:39:b7:ba:26:b6:2d:bc:91:7d:7d:a7:46:7f:e1:
d8:a7:e6:d7:4c:e9:44:52:59:0b:4e:4f:f6:65:13:1e:ea:03:
af:b3:dd:cc:ee:f2:5f:a3:ce:96:89:a5:2c:56:23:fa:d0:84:
c5:81:34:f5:e2:5b:c2:d3:1b:96:57:50:6e:3c:e4:60:1e:c0:
b9:e3:c1:5c:07:51:df:77:e2:70:eb:a4:74:67:2b:14:69:f3:
ff:45:f9:7d:49:9f:51:0c:b0:e3:c4:9e:12:d6:74:9c:03:bd:
91:28:9a:4b:8c:fa:fb:8e:45:09:b4:22:d0:0b:b8:16:1d:8e:
32:8f:37:42:91:57:14:74:c7:7a:86:d7:5d:ad:f0:3f:b3:b8:
4d:56:6d:34:2e:3a:c7:6d:96:e4:84:dd:d0:2e:d7:06:e8:e9:
28:a4:58:84:fe:70:c7:d3:38:71:cc:40:01:67:29:b3:f5:71:
2a:79:74:a4:2a:e2:98:75:18:a7:e8:47:ca:ba:a9:60:ba:a7:
50:b4:d5:bf:d3:ff:45:ca:24:1d:c0:53:a6:75:57:06:18:ab:
2d:f0:42:c0:13:19:8e:af:6d:b6:84:58:e5:c0:f0:63:5f:83:
05:12:e6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:46:16 2025 by rpki-client