Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa
File: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (raw, json)
Hash identifier: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=
Subject key identifier: C2:35:C1:39:07:16:43:E1:59:7C:D3:AF:B1:74:35:17:89:4F:94:6C
Certificate issuer: /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial: 0194258E8FC41ABEA6058D193B4A47B2E309
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa
Signing time: Thu 02 Jan 2025 05:48:07 +0000
ROA not before: Thu 02 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 185.15.8.0/22 maxlen: 22
2a02:fb00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:8f:c4:1a:be:a6:05:8d:19:3b:4a:47:b2:e3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Validity
Not Before: Jan 2 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c235c139071643e1597cd3afb1743517894f946c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:9b:ea:f1:2c:19:62:56:26:88:ff:19:25:
54:7c:00:96:6a:ce:77:f2:47:f0:b4:71:67:61:ec:
2b:25:be:7f:cc:f4:28:5f:4f:1b:64:66:91:b9:ae:
c3:81:e2:37:cc:5a:e9:cf:f1:75:14:48:ae:20:52:
ad:78:a7:42:4f:f4:ec:d0:11:21:a7:21:7c:aa:24:
72:01:d6:f6:ef:aa:3b:da:2e:9b:ad:1a:47:5f:d2:
7e:3d:7d:c6:97:18:64:1e:5a:1d:b5:cc:9c:d0:7d:
5f:64:e6:26:d6:79:37:ed:04:3d:72:75:9b:d4:29:
f9:e8:76:c0:f8:a6:28:36:09:d7:48:46:94:fa:41:
e1:d9:03:1d:1b:31:f7:61:7b:25:fb:a1:ef:64:52:
6a:89:e6:ab:26:13:c5:7c:82:2b:ee:ed:20:7b:ba:
bf:09:72:8e:f0:d0:75:2b:68:ea:04:a3:f2:b3:77:
3e:1f:39:2b:7f:5a:ac:4c:8b:fd:27:bc:53:79:53:
d7:90:be:41:fb:cc:23:80:45:b8:41:ae:dd:c2:fc:
a5:13:74:81:c8:ff:ab:26:de:97:76:17:43:5c:8e:
5e:97:ce:c4:f0:92:08:c6:02:31:d7:3b:4f:94:8a:
4d:85:8e:74:8f:f6:2e:b7:39:08:17:ed:ff:ed:ff:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:C1:39:07:16:43:E1:59:7C:D3:AF:B1:74:35:17:89:4F:94:6C
X509v3 Authority Key Identifier:
keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.8.0/22
IPv6:
2a02:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
64:2f:b4:76:15:10:49:cc:b6:6f:03:18:22:0b:6c:83:39:eb:
a8:a0:0f:db:ac:d7:9c:c0:ee:02:1c:ba:3a:35:94:ee:f9:21:
41:24:14:b9:6a:4a:9a:ac:a9:eb:4a:a1:0d:a4:c3:46:f2:69:
bf:3a:ca:0c:30:55:4b:48:42:d8:6a:b0:c5:50:c8:5d:eb:d8:
2d:45:45:dd:16:14:dd:ae:0b:00:55:dc:c2:85:61:0e:72:16:
c8:7a:a8:1b:72:5c:14:52:98:bd:a5:ef:02:0e:c8:d4:72:c6:
d1:90:87:58:91:1d:3a:48:77:dd:c2:92:a3:39:77:c8:f5:35:
8d:7a:ee:0e:ef:d6:bf:7e:c2:48:68:27:f7:d2:f3:a8:2b:11:
86:59:cd:26:05:43:74:c8:7f:c7:9d:1e:f1:0f:36:10:5d:7f:
e4:84:a9:98:a8:52:4a:68:3d:f7:57:e9:a0:1a:93:ae:55:a5:
a2:b6:e3:25:57:fa:bd:76:22:58:85:7d:49:6f:29:bf:c8:7e:
24:bc:ff:bb:9d:a8:94:42:38:96:97:39:37:1a:ca:a2:d5:b3:
62:a8:d5:6d:15:56:c3:96:88:12:ac:df:65:d5:78:6d:17:10:
52:41:eb:7a:5c:6d:78:7e:06:f8:db:41:02:fe:d2:f8:84:78:
3f:f3:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:52 2025 by rpki-client