Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/WcaArMIWniZbqFVhXIRxlpzv1vU.roa
File: WcaArMIWniZbqFVhXIRxlpzv1vU.roa (raw, json)
Hash identifier: ZiR2LlBJ+GA11tU8/141o7z/KcFUOSAh6HCNLIX7b9M=
Subject key identifier: 59:C6:80:AC:C2:16:9E:26:5B:A8:55:61:5C:84:71:96:9C:EF:D6:F5
Certificate issuer: /CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Certificate serial: 0186C5B5D4596514B3F9F36549A32CF800CA
Authority key identifier: CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/WcaArMIWniZbqFVhXIRxlpzv1vU.roa
Signing time: Thu 09 Mar 2023 09:31:13 +0000
ROA not before: Thu 09 Mar 2023 09:31:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.135.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:b5:d4:59:65:14:b3:f9:f3:65:49:a3:2c:f8:00:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfbb863380a3d4e0ac8607c9bec2389f75dd73c5
Validity
Not Before: Mar 9 09:31:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59c680acc2169e265ba855615c8471969cefd6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:d3:ee:48:bf:46:a0:14:8e:23:da:e3:3b:
7c:07:cd:a7:98:f1:a4:b4:22:ea:d0:7d:f8:e1:19:
ea:e5:bb:6e:70:0c:89:d5:28:97:be:e3:b6:fc:bb:
f0:7f:ec:d3:7d:d9:28:2e:80:65:58:5d:95:5f:53:
dc:bc:a0:08:04:05:e2:f0:92:ed:5d:3a:05:9c:1f:
d2:0a:1e:1d:1f:d1:fd:31:3b:04:db:a2:33:50:58:
3c:4c:54:12:ae:3f:78:54:dc:0e:af:f9:51:02:30:
b8:a4:be:09:b7:2b:6b:ee:f0:d2:d9:2a:70:2c:0b:
52:e4:34:ac:29:16:02:2f:72:cd:8f:49:1e:bb:91:
64:e4:8e:2d:7d:ea:1c:f9:69:6b:b7:12:dc:af:08:
3b:56:b6:46:a0:ee:19:97:b1:76:f3:98:24:3f:38:
97:65:be:b1:0a:3d:2b:cb:ff:a8:e7:4a:eb:e1:79:
bf:12:c5:94:27:e9:b4:a1:3b:d4:59:4a:1f:49:8d:
a2:67:87:e7:7a:57:96:9a:45:c5:72:d8:ac:ee:15:
ed:e1:b1:0f:f2:6f:0e:38:5a:7d:9d:bd:39:fd:7a:
05:58:36:4c:04:69:93:5a:e2:5e:92:55:4d:8e:59:
bc:30:38:a8:7f:f8:29:c7:3f:6c:83:02:1a:a9:46:
28:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C6:80:AC:C2:16:9E:26:5B:A8:55:61:5C:84:71:96:9C:EF:D6:F5
X509v3 Authority Key Identifier:
keyid:CF:BB:86:33:80:A3:D4:E0:AC:86:07:C9:BE:C2:38:9F:75:DD:73:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/WcaArMIWniZbqFVhXIRxlpzv1vU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/186333-b1f6-4ce6-afcb-dcc25aa16c69/1/z7uGM4Cj1OCshgfJvsI4n3Xdc8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.47.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1c:4f:22:81:2d:8d:04:2e:9d:e0:51:6a:96:25:8c:d6:f0:
f4:7c:4a:74:ef:70:2f:65:3a:2d:95:a4:4a:c5:8b:0f:c7:3a:
34:2f:76:f8:36:26:17:b6:9c:0b:65:fe:f3:ea:3e:6e:25:85:
02:dc:87:45:d7:7c:27:c6:ad:13:4b:ef:d9:10:cc:a6:88:4f:
d7:ea:3f:61:96:aa:e8:9f:51:c0:14:84:b7:7a:42:14:39:44:
bf:73:13:b8:73:7d:8a:09:19:56:2e:6e:af:56:91:b4:02:6e:
29:f3:7a:fd:ec:79:f5:7e:69:b0:92:77:84:e5:0a:28:18:cf:
85:3a:72:d7:d2:20:08:0b:1d:7f:3a:6d:7f:f8:b3:28:01:08:
b2:e7:c7:29:87:e9:ef:24:8d:90:10:12:a5:bc:df:4c:f0:f1:
4e:af:23:f3:ad:aa:d0:0c:f1:a8:2c:e7:07:c1:89:2e:11:e2:
14:86:af:f8:3c:85:2d:25:6c:fb:de:71:8b:e2:c1:cd:00:4d:
ad:f4:f2:da:27:b6:ec:cb:3e:c1:58:20:e9:fd:ab:f7:ad:67:
9e:41:0a:19:40:55:82:f7:d3:f6:33:64:72:8f:9e:c7:67:dd:
95:9b:8a:f4:2c:f2:cb:71:5e:5a:a7:22:2b:eb:22:a0:22:f2:
9e:81:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:50:52 2025 by rpki-client