Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/cwaiRcH6LRLUh09osLpojc94YOQ.roa
File: cwaiRcH6LRLUh09osLpojc94YOQ.roa (raw, json)
Hash identifier: uVgFX9CUcXLZ1bqPeQL94N7UhfYQgF63+f9YF1QPF3U=
Subject key identifier: 73:06:A2:45:C1:FA:2D:12:D4:87:4F:68:B0:BA:68:8D:CF:78:60:E4
Certificate issuer: /CN=b9762db1282ffd084761232038f81f5d29e640d5
Certificate serial: 019426D8FD66806A8072B682270E35654EC3
Authority key identifier: B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/cwaiRcH6LRLUh09osLpojc94YOQ.roa
Signing time: Thu 02 Jan 2025 11:49:02 +0000
ROA not before: Thu 02 Jan 2025 11:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215015
IP address blocks: 185.139.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:fd:66:80:6a:80:72:b6:82:27:0e:35:65:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9762db1282ffd084761232038f81f5d29e640d5
Validity
Not Before: Jan 2 11:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7306a245c1fa2d12d4874f68b0ba688dcf7860e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:25:92:79:11:a0:f8:bd:01:74:b5:e6:88:
af:3d:80:39:72:8b:e1:16:4f:c8:72:2b:73:9a:d1:
2e:6a:c1:f2:17:d3:55:eb:5a:24:1b:bd:e9:ee:8b:
35:2a:34:e8:f5:6b:78:ef:70:3b:78:91:a5:cd:5e:
ac:9f:66:fb:c0:8d:1e:2c:75:a6:3a:40:0d:c2:d9:
47:f2:84:c8:17:24:cd:1e:a3:95:a4:1b:e7:38:bc:
61:7a:47:98:60:9d:b5:bc:f7:61:14:69:fd:e7:e3:
94:4b:ab:56:85:d1:e9:a5:9a:01:99:42:50:8a:b6:
97:6c:8c:b6:52:5d:ad:1e:ec:c2:cf:91:06:27:94:
b1:d6:51:77:80:ac:57:0e:06:f5:58:30:d3:50:68:
e7:93:72:d0:c7:03:b4:51:b4:75:2f:44:ad:84:ad:
69:d5:cf:32:5c:cd:ab:03:00:b1:3a:3c:cc:5d:d9:
7c:60:af:d4:47:a1:7f:24:a4:bd:17:37:31:e2:be:
12:f5:06:e4:e4:13:b7:e7:f8:1c:29:42:77:5d:2f:
2e:5c:30:76:ee:5b:89:db:dc:b5:9c:50:79:36:68:
c9:e9:f8:78:db:ad:3a:81:ad:9b:db:4f:90:75:e7:
0b:0b:20:76:38:cc:23:e6:45:96:00:67:58:a5:47:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:A2:45:C1:FA:2D:12:D4:87:4F:68:B0:BA:68:8D:CF:78:60:E4
X509v3 Authority Key Identifier:
keyid:B9:76:2D:B1:28:2F:FD:08:47:61:23:20:38:F8:1F:5D:29:E6:40:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXYtsSgv_QhHYSMgOPgfXSnmQNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/cwaiRcH6LRLUh09osLpojc94YOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f81915-405e-4b54-9cb4-70a556ba8a11/1/uXYtsSgv_QhHYSMgOPgfXSnmQNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f0:84:f5:63:3b:74:86:07:b5:82:6b:27:f3:0c:87:5e:be:
33:d6:2d:a4:d6:d9:dd:a1:16:1c:ca:d5:3c:ac:a1:bf:99:0c:
6a:70:ec:f4:8c:b2:02:30:3d:68:3f:79:cb:48:34:9c:24:99:
d3:e0:1e:1d:59:cb:75:55:3a:6d:38:bb:33:a1:e6:17:4e:bc:
34:0c:fb:1d:4c:7a:03:19:a8:78:39:08:fc:c0:27:ed:80:d7:
50:1f:03:28:23:ce:e3:48:a1:be:76:bf:5b:c1:75:45:af:5f:
e0:45:97:5a:41:e5:bc:6a:f1:0c:1d:24:3d:11:1a:c7:d4:a2:
15:1c:e9:53:c5:12:1b:b0:65:7d:51:3c:20:c6:3a:c7:ae:5c:
56:e8:8f:bd:7e:fe:34:80:35:d7:18:8c:8b:11:d8:c6:dc:9d:
a7:c0:ae:4a:bf:d2:c9:ef:cc:72:6f:34:f5:cd:6e:6f:4d:bd:
43:e5:a7:a5:97:3f:87:a9:89:eb:fc:80:8f:bf:8d:e4:be:bd:
6f:d7:b4:46:e3:65:b4:97:ae:d8:00:86:a5:b4:24:f0:56:cf:
e6:1e:16:05:14:94:5f:72:19:d3:02:d4:98:d2:89:16:0d:62:
b5:59:d7:7f:a3:d8:2b:29:68:39:b5:fd:44:5f:23:3f:8c:9c:
80:f5:4e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:26 2025 by rpki-client