Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/WdMCPBRF3SYVyusOAvLG3Px1q0o.roa
File: WdMCPBRF3SYVyusOAvLG3Px1q0o.roa (raw, json)
Hash identifier: 0pYw3BfMJddkmV2iZ0Sn1GwTLycumrvuPn+XFayO/cA=
Subject key identifier: 59:D3:02:3C:14:45:DD:26:15:CA:EB:0E:02:F2:C6:DC:FC:75:AB:4A
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 0194236A145EF32EA498FB821DAE50FE02DC
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/WdMCPBRF3SYVyusOAvLG3Px1q0o.roa
Signing time: Wed 01 Jan 2025 19:49:02 +0000
ROA not before: Wed 01 Jan 2025 19:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 185.250.186.0/24 maxlen: 24
185.250.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:14:5e:f3:2e:a4:98:fb:82:1d:ae:50:fe:02:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Jan 1 19:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59d3023c1445dd2615caeb0e02f2c6dcfc75ab4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:fb:a5:ef:d9:ad:f2:50:38:24:1f:e1:b7:
13:9d:2e:26:02:27:dd:20:59:f9:39:34:2f:7d:b4:
c2:83:f8:17:95:02:e3:09:e1:26:3f:ec:db:55:b2:
6f:b6:70:e9:23:50:00:ee:b1:bf:ca:eb:ac:e7:1a:
94:a1:c9:8b:d7:16:9b:72:2e:ea:6a:e7:69:72:ae:
dd:8c:e9:dc:23:9f:7f:21:a6:03:1d:d1:0b:67:66:
b8:bf:dd:23:dd:93:5a:06:0e:ed:19:55:7c:a5:ce:
e1:0d:b0:dd:27:83:dc:94:49:a5:71:3b:76:58:82:
2b:d9:88:c1:21:81:d6:f4:37:ee:be:2b:34:49:95:
1b:1a:a3:ff:38:eb:44:d8:74:61:9a:a1:69:04:2e:
3e:cf:fe:8f:b6:f9:ca:1e:ea:c7:75:32:ae:00:94:
b0:b1:7b:95:7a:29:dc:0f:bd:9c:6f:e1:94:16:ba:
6b:9c:04:d9:ca:73:16:dd:03:08:6e:41:9a:13:42:
a0:6b:7a:bd:ba:bd:7c:22:a9:dd:3c:a2:0f:29:57:
0d:71:11:8d:4b:ae:28:2a:05:a0:22:73:0a:f2:cb:
60:77:1a:9f:b1:fd:1c:36:1e:9f:23:74:b4:14:2e:
84:5e:89:46:29:32:bc:59:ae:c8:da:ea:e4:f1:ee:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D3:02:3C:14:45:DD:26:15:CA:EB:0E:02:F2:C6:DC:FC:75:AB:4A
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/WdMCPBRF3SYVyusOAvLG3Px1q0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.186.0/23
Signature Algorithm: sha256WithRSAEncryption
24:bc:a7:b6:e2:3c:7e:12:41:80:7a:7c:d8:26:e1:0f:3e:20:
51:52:8f:14:e6:8f:84:a4:02:e5:07:d7:30:95:a5:0a:94:b2:
37:55:4e:af:7c:da:85:c2:fd:63:5f:fc:0f:b5:f0:9b:74:23:
44:ee:2b:9a:a6:0b:e4:b0:68:6e:6b:fd:85:89:be:c5:7e:18:
e0:88:73:46:29:e4:39:ea:20:3e:33:9a:5e:11:91:46:d8:43:
c4:e6:cc:4f:b9:c0:f9:bd:fe:f9:b4:c5:ed:06:4f:80:8b:a5:
58:c0:55:46:13:05:d8:82:cf:9d:0f:6d:72:07:f0:7a:aa:75:
8c:dd:52:cb:7e:a2:81:0a:08:9b:16:1f:4e:18:e4:53:3d:4e:
eb:3a:e9:89:13:bd:40:23:a2:d2:21:45:b8:04:3d:4b:c5:dc:
ec:95:22:a3:b7:d8:dd:e7:a0:77:57:af:2a:5f:f3:f5:4d:d6:
f7:94:53:bb:71:01:17:e0:59:af:1a:e5:2e:fa:05:a6:49:b2:
7f:ac:88:f1:04:1b:6e:d7:8c:9f:68:f1:34:95:e7:b5:12:b5:
93:66:a0:b8:42:a7:ff:90:5f:da:94:61:a7:2f:53:df:e6:0a:
df:fe:0f:66:14:68:e1:e7:bb:5c:96:27:af:de:79:14:ad:67:
31:54:b0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:52:08 2025 by rpki-client