Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/WMOOVbk7Uebp-iaKkKyYnBiO2pM.roa
File: WMOOVbk7Uebp-iaKkKyYnBiO2pM.roa (raw, json)
Hash identifier: shY40U0YGGXazGAleAZcB0VSaW+qjHKVi//G/l3HNTg=
Subject key identifier: 58:C3:8E:55:B9:3B:51:E6:E9:FA:26:8A:90:AC:98:9C:18:8E:DA:93
Certificate issuer: /CN=31fa64addcb0f86580c388912341cc47c39c4aed
Certificate serial: 0193B30B9A55AA137F9060E485B55C343745
Authority key identifier: 31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/WMOOVbk7Uebp-iaKkKyYnBiO2pM.roa
Signing time: Wed 11 Dec 2024 00:08:22 +0000
ROA not before: Wed 11 Dec 2024 00:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202334
IP address blocks: 185.85.255.0/24 maxlen: 24
185.243.136.0/24 maxlen: 24
185.243.137.0/24 maxlen: 24
185.243.138.0/24 maxlen: 24
185.243.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b3:0b:9a:55:aa:13:7f:90:60:e4:85:b5:5c:34:37:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fa64addcb0f86580c388912341cc47c39c4aed
Validity
Not Before: Dec 11 00:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58c38e55b93b51e6e9fa268a90ac989c188eda93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:77:ef:d4:98:dd:69:8b:56:ce:a7:59:d3:
f8:52:23:07:3b:39:2d:91:16:c9:8a:35:04:d7:ef:
6e:f0:c9:d9:94:5a:8c:2e:b7:5e:34:5f:16:6e:3d:
08:cc:db:78:6a:8e:9b:7b:99:b0:dc:8e:3b:33:12:
0a:36:96:2f:59:20:8b:82:97:9f:68:73:c9:97:00:
a3:86:83:06:ad:9c:52:b9:4e:cb:f0:22:ff:89:d9:
6e:a8:54:c4:c7:b2:d5:61:25:d7:05:78:1b:57:65:
ef:2e:e7:6e:18:20:53:ea:94:22:8d:26:f1:b7:91:
dd:a7:44:27:6d:c7:b8:5b:87:5b:d4:ba:19:d2:a6:
55:1c:62:b4:fa:d7:e0:17:11:68:f1:74:93:a9:97:
12:c6:8d:1f:13:ff:91:a6:11:33:60:bd:c4:6e:e3:
5f:49:14:42:81:9c:70:4d:bf:3c:94:17:c7:e0:2d:
4a:4b:f2:7b:77:9a:79:dd:52:87:bb:f3:49:81:1c:
ac:2a:19:4b:76:8d:aa:e2:2f:f3:45:d9:f8:81:44:
9f:c3:c2:27:9f:37:28:a0:e9:46:8b:7f:2f:3d:52:
2b:d8:59:6f:5e:bf:da:12:43:03:3c:e7:e9:ed:bb:
73:57:67:27:79:51:56:ee:0c:f4:92:0b:4c:1c:6d:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:8E:55:B9:3B:51:E6:E9:FA:26:8A:90:AC:98:9C:18:8E:DA:93
X509v3 Authority Key Identifier:
keyid:31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/WMOOVbk7Uebp-iaKkKyYnBiO2pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.255.0/24
185.243.136.0/22
Signature Algorithm: sha256WithRSAEncryption
53:4d:40:11:d7:1f:00:5b:2a:47:79:58:b6:a8:17:71:6b:72:
4c:00:38:43:9b:c1:00:85:1c:99:3d:ff:0e:0d:ea:f3:04:2b:
e4:1e:c3:70:4f:c0:24:64:af:26:1f:c4:5d:34:e7:e1:0c:5c:
1d:96:c6:6d:97:94:01:15:2d:8c:96:2e:78:e9:5f:1c:08:be:
f7:e2:5b:18:65:54:5c:b1:a5:4c:58:ce:b4:da:2d:e5:c4:d9:
bd:19:36:fb:fa:2f:b3:4c:6a:bd:96:7d:15:64:a8:ec:ee:67:
f1:ea:f5:45:b6:67:e2:73:f0:93:c2:21:bb:86:a5:45:59:16:
6c:c0:ad:c2:fd:b5:28:f4:6e:3e:f6:f0:0e:5d:a0:b4:c0:ae:
f7:2b:cd:14:62:ec:a2:09:bf:cc:14:d4:2c:bb:bf:03:53:49:
9e:a5:22:68:4b:61:c0:db:a7:d0:dd:88:32:e3:f3:0c:46:f5:
5b:c3:fb:8f:88:ac:25:e1:1c:7a:e1:0e:9d:1a:99:28:7a:89:
50:6e:9b:3a:87:4b:93:62:b8:ee:e4:65:06:a3:d8:f9:9f:14:
59:7d:43:25:4d:92:01:9d:ff:74:cf:91:fa:a5:53:53:c7:b2:
f6:4a:ee:fc:a8:07:d8:e0:67:a4:f5:0f:a5:e8:a4:e9:eb:58:
61:66:25:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:08 2025 by rpki-client