Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/WAG2qq9xXL_mi1vRwMMQFkJAPcs.roa
File: WAG2qq9xXL_mi1vRwMMQFkJAPcs.roa (raw, json)
Hash identifier: A7PXb35I2RnZWLFsHtoXQ+ztXn6FxmFNf02+TqG4HWo=
Subject key identifier: 58:01:B6:AA:AF:71:5C:BF:E6:8B:5B:D1:C0:C3:10:16:42:40:3D:CB
Certificate issuer: /CN=843d8aa1269d1a3f3321335860c67c7e08677dc5
Certificate serial: 0190FA28EEA979ADBE15CD26DEFFEA4A74C8
Authority key identifier: 84:3D:8A:A1:26:9D:1A:3F:33:21:33:58:60:C6:7C:7E:08:67:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/WAG2qq9xXL_mi1vRwMMQFkJAPcs.roa
Signing time: Sun 28 Jul 2024 16:25:04 +0000
ROA not before: Sun 28 Jul 2024 16:25:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 185.173.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:28:ee:a9:79:ad:be:15:cd:26:de:ff:ea:4a:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d8aa1269d1a3f3321335860c67c7e08677dc5
Validity
Not Before: Jul 28 16:25:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5801b6aaaf715cbfe68b5bd1c0c3101642403dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ce:78:86:a1:24:c9:cf:b9:c6:68:d5:c6:06:
4b:5e:0b:5a:92:a3:9a:e8:1d:1c:19:15:bf:85:b8:
b1:55:78:ce:04:a1:8c:4b:e7:39:f7:b1:55:c6:77:
44:72:2b:1c:4f:be:96:4d:d9:e4:76:ad:ca:f3:31:
10:0a:99:ce:8e:07:4d:e2:9c:22:7d:5e:b9:d0:36:
d9:6a:be:97:ae:e7:fe:5f:58:6d:5e:58:20:eb:0f:
6c:d4:b7:bf:8f:2a:c1:12:2d:df:b3:c3:38:38:d0:
f4:8a:50:80:e6:ee:2a:1b:41:7f:37:5b:09:76:8e:
7e:3f:2e:7d:94:e0:35:ba:4d:5c:f4:90:e8:98:33:
15:4d:6b:65:f8:1e:82:06:bf:f1:3f:d7:3d:ff:3d:
93:39:9f:0a:e3:1e:78:5f:9d:24:6f:af:8b:96:1a:
b0:ff:fb:dd:6a:b2:6b:4b:7a:a6:0a:3e:5d:ee:d1:
8e:e9:2c:fc:19:19:ef:80:cb:68:c2:25:3b:86:73:
97:46:e9:b5:20:c7:da:f5:0f:ac:fa:fc:75:20:27:
5a:a2:a4:bf:b7:6e:23:e4:4e:41:fc:5e:bb:2a:ec:
06:5b:9a:07:1a:e7:d3:25:b2:1a:bf:74:48:85:ba:
05:71:bc:86:f4:d5:0d:43:e4:8f:d4:82:c9:cb:f2:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:B6:AA:AF:71:5C:BF:E6:8B:5B:D1:C0:C3:10:16:42:40:3D:CB
X509v3 Authority Key Identifier:
keyid:84:3D:8A:A1:26:9D:1A:3F:33:21:33:58:60:C6:7C:7E:08:67:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD2KoSadGj8zITNYYMZ8fghnfcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/WAG2qq9xXL_mi1vRwMMQFkJAPcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c54e32-705a-4e7a-9513-b978bfc752ab/1/hD2KoSadGj8zITNYYMZ8fghnfcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.44.0/22
Signature Algorithm: sha256WithRSAEncryption
88:c5:01:ab:e4:e7:0c:5b:8c:68:86:62:81:8b:5a:4c:e2:a0:
cf:f4:f1:b7:f9:ab:93:60:44:8d:a5:28:21:29:20:52:a6:0c:
12:48:ca:bf:27:1b:13:73:7d:10:47:ce:6d:9f:0d:ed:ac:4a:
2a:ab:4c:48:63:5a:7f:02:68:55:5c:a6:9e:c8:d6:83:30:d7:
73:5d:a8:27:5a:40:46:da:4d:70:dd:67:42:9c:fb:a1:87:07:
4c:47:fb:c0:da:da:8c:d4:5a:82:f3:e8:43:68:09:2a:a0:a3:
44:a6:59:65:dd:17:89:ce:38:62:14:34:ae:15:6b:64:9f:dc:
ac:fe:78:de:fd:73:e2:31:91:b0:b4:2a:b2:ff:97:52:56:8c:
fb:5e:8c:d6:c1:5e:71:6a:c7:fa:a1:0d:8c:16:75:82:09:33:
fa:f1:09:5b:c4:00:a8:b3:d1:bc:78:f3:29:2b:17:c8:5e:96:
cc:36:a2:58:5b:c4:24:f8:4d:7f:8c:a5:64:97:0c:0b:d4:5d:
91:5d:a9:c7:e7:65:68:1c:38:96:5f:60:27:ea:e1:7b:74:11:
04:89:df:42:60:3c:ec:9b:99:04:0d:26:d1:18:ec:a5:00:a0:
32:e1:a0:09:db:f2:3d:6a:b1:8a:81:67:45:cd:6f:68:64:75:
48:d1:66:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:24 2025 by rpki-client