Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/WEjiaezvCp67a8VdIXtCgpmjCTE.roa
File: WEjiaezvCp67a8VdIXtCgpmjCTE.roa (raw, json)
Hash identifier: VdLmtt6UOp+ei3zZsBeyOCNLs8+BNigfRHC6RWotaZk=
Subject key identifier: 58:48:E2:69:EC:EF:0A:9E:BB:6B:C5:5D:21:7B:42:82:99:A3:09:31
Certificate issuer: /CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Certificate serial: 0186D4E6143F770A68F138CF7E53CA17E03D
Authority key identifier: CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/WEjiaezvCp67a8VdIXtCgpmjCTE.roa
Signing time: Sun 12 Mar 2023 08:18:13 +0000
ROA not before: Sun 12 Mar 2023 08:18:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203916
IP address blocks: 185.135.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d4:e6:14:3f:77:0a:68:f1:38:cf:7e:53:ca:17:e0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Validity
Not Before: Mar 12 08:18:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5848e269ecef0a9ebb6bc55d217b428299a30931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:87:cc:0a:e0:8b:4c:27:ca:f2:01:26:6f:
c1:d7:b5:19:9f:2e:4b:28:c3:40:66:9f:12:8d:c3:
d6:10:20:05:e7:4e:e6:31:47:34:d0:2f:99:18:88:
a0:39:f0:f2:e4:01:5b:f4:3c:fd:2c:b3:15:a7:2b:
d3:c8:ef:cf:32:f2:61:d1:52:19:b3:b1:6e:c3:bd:
17:31:2c:7c:61:fe:92:9e:06:a4:54:8f:59:7a:dd:
10:bf:99:03:5c:9c:37:47:35:63:1c:d8:c3:de:c1:
9c:4e:7a:8c:70:d0:54:ce:56:2d:e6:ba:eb:ee:0d:
c7:1f:db:24:d8:85:cb:fd:75:bf:84:bc:bd:f7:fa:
ee:4c:3e:14:c6:ea:a1:92:d3:00:bf:06:83:f5:b2:
f4:04:c6:ca:90:3e:9c:f6:df:e8:82:0a:15:a6:31:
74:2b:cf:3f:30:de:ad:4a:07:e5:89:5b:ee:97:c8:
46:b0:f9:fe:35:43:35:57:22:e7:c0:aa:4d:90:d3:
dc:52:fb:47:f9:a8:5d:39:bd:54:43:d4:1f:6b:45:
64:da:0a:88:4b:a0:d6:4b:b2:42:88:d1:99:54:ca:
ac:8c:a8:ee:5c:ba:12:21:b6:90:1e:0d:aa:2e:94:
3b:eb:80:1c:7e:db:20:3e:87:ea:d6:24:42:fe:b8:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:48:E2:69:EC:EF:0A:9E:BB:6B:C5:5D:21:7B:42:82:99:A3:09:31
X509v3 Authority Key Identifier:
keyid:CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/WEjiaezvCp67a8VdIXtCgpmjCTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.47.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5e:1e:07:ee:0b:e3:49:77:e5:34:0e:4c:47:29:d8:94:b2:
bb:7d:01:ca:56:53:24:1b:ac:da:cc:04:0a:12:98:59:a1:15:
cf:b3:24:27:d7:01:07:c1:3c:b1:88:c7:a0:2c:3d:36:52:69:
b7:c7:53:ae:82:f4:e9:d9:17:2e:63:8d:1f:68:41:61:0e:c8:
9f:f7:a0:10:0c:66:bb:7e:a6:77:d2:84:46:d9:7e:4e:5f:dc:
ea:11:b2:a0:32:ff:67:22:bd:bb:dc:93:37:bb:0e:84:be:a4:
da:da:c1:f4:86:2b:89:a2:04:6b:e6:79:d7:c4:9a:b7:18:35:
b0:9a:df:b3:27:64:11:ea:91:96:82:ac:e5:ee:8c:97:93:ef:
f1:22:33:40:99:16:84:d8:19:3e:35:96:33:c5:16:c8:31:e9:
b4:f1:0c:4d:b5:db:d7:81:27:1c:de:c2:3a:da:82:ab:00:a3:
10:d5:7d:47:30:8c:25:7a:61:cc:a8:30:03:1a:55:30:54:a5:
b3:e9:2c:fe:a6:0b:c5:d8:86:9a:07:31:5e:29:81:10:6b:87:
3d:21:51:8c:64:53:ca:a8:0d:8e:43:39:62:bc:6e:7e:be:fb:
d0:9f:f0:87:0e:fc:6f:a9:f6:08:c4:19:42:d4:53:c0:03:f3:
24:1f:1c:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbU5hQ/dwpo8TjPflPKF+A9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYmI4NjMzODBhM2Q0ZTBhYzg2MDdjOWJlYzIzODlmNzVk
ZDczYzUwHhcNMjMwMzEyMDgxODEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODQ4ZTI2OWVjZWYwYTllYmI2YmM1NWQyMTdiNDI4Mjk5YTMwOTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKeHzArgi0wnyvIBJm/B17UZny5L
KMNAZp8SjcPWECAF507mMUc00C+ZGIigOfDy5AFb9Dz9LLMVpyvTyO/PMvJh0VIZ
s7Fuw70XMSx8Yf6SngakVI9Zet0Qv5kDXJw3RzVjHNjD3sGcTnqMcNBUzlYt5rrr
7g3HH9sk2IXL/XW/hLy99/ruTD4UxuqhktMAvwaD9bL0BMbKkD6c9t/oggoVpjF0
K88/MN6tSgfliVvul8hGsPn+NUM1VyLnwKpNkNPcUvtH+ahdOb1UQ9Qfa0Vk2gqI
S6DWS7JCiNGZVMqsjKjuXLoSIbaQHg2qLpQ764AcftsgPofq1iRC/rgyswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhI4mns7wqeu2vFXSF7QoKZowkxMB8GA1UdIwQY
MBaAFM+7hjOAo9TgrIYHyb7COJ913XPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejd1R000Q2oxT0NzaGdmSnZzSTRuM1hkYzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xODYzMzMtYjFmNi00Y2U2LWFmY2It
ZGNjMjVhYTE2YzY5LzEvV0VqaWFlenZDcDY3YThWZElYdENncG1qQ1RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xODYzMzMtYjFmNi00Y2U2LWFmY2ItZGNjMjVhYTE2YzY5
LzEvejd1R000Q2oxT0NzaGdmSnZzSTRuM1hkYzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYcvMA0G
CSqGSIb3DQEBCwUAA4IBAQAUXh4H7gvjSXflNA5MRynYlLK7fQHKVlMkG6zazAQK
EphZoRXPsyQn1wEHwTyxiMegLD02Umm3x1OugvTp2RcuY40faEFhDsif96AQDGa7
fqZ30oRG2X5OX9zqEbKgMv9nIr273JM3uw6EvqTa2sH0hiuJogRr5nnXxJq3GDWw
mt+zJ2QR6pGWgqzl7oyXk+/xIjNAmRaE2Bk+NZYzxRbIMem08QxNtdvXgScc3sI6
2oKrAKMQ1X1HMIwlemHMqDADGlUwVKWz6Sz+pgvF2IaaBzFeKYEQa4c9IVGMZFPK
qA2OQzlivG5+vvvQn/CHDvxvqfYIxBlC1FPAA/MkHxyh
-----END CERTIFICATE-----
Generated at Sun Apr 13 06:55:48 2025 by rpki-client