Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WCa02rex0sd9sPiC2XX_JjOTVXw.roa
File: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (raw, json)
Hash identifier: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=
Subject key identifier: 58:26:B4:DA:B7:B1:D2:C7:7D:B0:F8:82:D9:75:FF:26:33:93:55:7C
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 0194274889391E238D9589F3F23632E67E18
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WCa02rex0sd9sPiC2XX_JjOTVXw.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47869
IP address blocks: 185.165.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:89:39:1e:23:8d:95:89:f3:f2:36:32:e6:7e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5826b4dab7b1d2c77db0f882d975ff263393557c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:48:36:4f:b5:de:b4:35:c2:48:72:76:c0:
84:29:6b:29:0b:56:9f:4c:fc:4c:0c:4d:aa:8d:28:
7d:ae:25:34:1e:4e:47:ab:72:6f:70:bb:63:8a:91:
3a:f5:4f:b3:4b:8c:82:6f:cb:e6:2f:eb:88:3a:2f:
47:51:1c:f0:1c:aa:39:33:70:c6:02:ef:d6:35:00:
22:7f:e6:b1:fe:f8:e5:8d:bc:18:4c:c7:90:46:ee:
2e:c9:92:2f:26:11:1b:a1:1e:d1:46:ef:7c:a0:bc:
0a:59:2b:8a:8b:02:e5:a4:a4:ed:65:f1:3d:f0:f3:
f8:5c:a6:ea:d4:3b:7e:d4:3f:bc:55:17:e8:5a:c0:
82:1d:63:1f:bf:68:a3:cc:71:27:99:75:46:53:5f:
0f:7c:36:f1:14:e9:37:f2:e1:9c:36:d9:b0:26:af:
4a:d1:69:b4:f3:29:93:91:b4:b5:b4:91:f6:a6:cd:
12:30:fa:42:2e:31:98:86:74:8a:25:3d:b9:93:87:
6e:ab:0d:1c:89:56:46:94:27:6d:9c:51:ed:01:d5:
e4:14:fb:92:98:e9:1d:df:5b:e6:ba:96:35:ec:29:
89:36:d7:67:71:77:17:1c:da:30:91:d1:35:7f:b5:
4d:d1:f1:cd:e3:10:c1:d7:13:3a:02:a1:c8:06:cb:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:26:B4:DA:B7:B1:D2:C7:7D:B0:F8:82:D9:75:FF:26:33:93:55:7C
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WCa02rex0sd9sPiC2XX_JjOTVXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.237.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b0:08:33:85:d6:60:09:d3:69:57:00:cc:9b:1a:b7:0a:ed:
be:24:f6:01:48:a4:0c:8f:58:4c:0e:15:32:aa:eb:9a:08:68:
3f:37:1c:cf:ec:bb:95:05:59:b5:bb:cf:20:52:3c:bc:e1:b6:
95:95:be:c7:67:40:b4:bb:29:c7:59:00:51:d1:cb:fd:26:82:
c3:5c:e5:fd:e4:0d:61:ab:49:8a:42:63:48:8b:39:ab:13:0d:
b0:4a:5b:3c:65:25:14:c4:ed:d1:bf:f2:69:18:1c:62:b0:d4:
a9:a2:26:18:04:75:31:15:5c:5d:47:4c:aa:8b:71:5c:90:63:
90:e8:fc:b9:bf:ec:98:14:66:b3:36:6e:56:20:ca:6b:32:c4:
80:b6:75:78:08:af:53:54:8d:b2:bb:95:88:89:7e:6a:5f:58:
b0:5b:90:7c:1e:1a:c3:1e:f6:85:d5:25:b5:e0:01:4f:b8:21:
7e:26:cd:4a:69:2d:68:53:47:09:c0:69:9a:74:e2:44:51:61:
66:7c:f2:6f:3d:4f:a1:5c:b0:77:79:76:96:d5:be:cd:f4:35:
5b:4c:e8:f5:af:2e:97:e3:39:b7:2b:e0:f5:fa:17:d8:bf:22:
4b:42:dc:53:71:ec:ff:ae:bb:eb:4b:2b:ee:3a:65:a8:fb:f6:
14:a7:71:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:20 2025 by rpki-client