Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/wtArtEIccN6iqlckxB_l43WbSRQ.roa
File: wtArtEIccN6iqlckxB_l43WbSRQ.roa (raw, json)
Hash identifier: DxTEH2611XSvC7obCoOkQHBKDn3ca1nCKnz9kZ1Rq5g=
Subject key identifier: C2:D0:2B:B4:42:1C:70:DE:A2:AA:57:24:C4:1F:E5:E3:75:9B:49:14
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 03363AA9
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/wtArtEIccN6iqlckxB_l43WbSRQ.roa
Signing time: Sat 01 Jan 2022 05:03:14 +0000
ROA not before: Sat 01 Jan 2022 05:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.229.200.0/22 maxlen: 24
185.213.240.0/22 maxlen: 24
185.130.60.0/22 maxlen: 24
185.244.94.0/23 maxlen: 24
185.111.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53885609 (0x3363aa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 05:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2d02bb4421c70dea2aa5724c41fe5e3759b4914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:5a:20:2d:e4:00:65:3a:86:52:e3:d2:84:
d5:3e:df:30:e7:34:94:28:e7:53:97:e5:dd:6c:a2:
d4:c4:a3:9e:b2:fb:14:ba:f3:e4:6a:f6:77:aa:87:
e4:10:cb:74:cd:c2:44:c6:ea:20:0a:e0:d9:d6:81:
52:8e:04:8d:79:20:4d:2e:66:5d:fb:aa:15:3a:56:
31:db:3b:96:78:98:28:a9:46:a1:6c:ad:fb:f3:b7:
8b:67:0b:21:4a:49:04:7a:17:59:4e:94:aa:85:7e:
b3:be:ec:4c:7b:cf:e5:26:79:1b:07:79:0f:1c:28:
7b:5c:a9:a8:17:74:63:e2:73:a1:00:cc:70:07:7a:
c9:b6:37:a6:93:00:a6:68:42:64:a5:cb:25:b2:b8:
84:2a:35:0a:94:a9:5e:38:65:3c:16:ec:9d:ba:9c:
c0:41:e7:f2:8c:29:e3:49:45:e5:5c:08:e3:c2:ea:
23:c7:ad:0e:5f:af:3b:48:f3:87:6c:d0:b7:fb:8e:
36:a2:d7:16:68:0a:97:bf:43:8f:c4:3d:3e:3e:02:
d3:45:73:83:b8:f1:a8:b6:7f:8c:c3:5c:19:71:14:
63:e4:b6:33:0a:df:e1:39:02:3d:30:9e:ea:89:d1:
22:a2:02:f0:0d:65:45:a7:d5:2e:32:36:f2:42:cd:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:2B:B4:42:1C:70:DE:A2:AA:57:24:C4:1F:E5:E3:75:9B:49:14
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/wtArtEIccN6iqlckxB_l43WbSRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
185.130.60.0/22
185.213.240.0/22
185.229.200.0/22
185.244.94.0/23
Signature Algorithm: sha256WithRSAEncryption
69:c3:fb:d9:49:94:6a:f4:5a:b9:89:90:6b:1b:45:55:b8:68:
c9:da:01:ee:ca:51:18:8e:b5:03:82:70:e7:90:2b:f3:4a:01:
3d:89:57:f4:b9:cc:b4:91:d5:9f:9b:05:d0:21:34:c5:dd:4c:
fa:74:fc:ba:b0:24:f3:da:89:03:a6:3d:82:0e:f8:7e:02:1b:
41:ab:6e:b7:21:fa:f6:99:d8:ca:e7:76:7e:59:5e:bf:77:58:
e7:34:af:46:58:fb:6e:b1:c9:87:c2:cc:5f:0a:09:09:f4:f5:
63:81:e9:36:f6:b6:90:92:30:a9:a0:99:8a:e2:ad:93:02:a2:
18:da:96:8b:b4:11:29:22:a2:76:d9:6b:f6:c4:92:ff:2d:7f:
ab:7c:2c:4b:dc:2d:8e:5c:0d:2d:ce:92:29:fb:11:24:29:9c:
8f:4c:cf:9e:dd:00:e6:7e:40:73:4a:84:4c:d7:82:6e:55:e5:
ad:4e:62:b0:f8:cd:21:2b:cb:63:bc:05:03:83:80:8f:c9:5e:
d8:0c:85:58:4b:75:71:15:88:3b:d6:ec:8f:67:6b:6e:13:6c:
f7:3c:39:af:0c:93:e2:f2:9c:98:ea:9a:a9:08:1b:b9:8f:76:
42:3a:40:b2:2d:43:86:a9:e0:b4:78:8c:53:d6:7a:95:51:7a:
62:4a:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:58:50 2025 by rpki-client