Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/wczF6RhOkPJNWwYJ_phb7iZuDt4.roa
File: wczF6RhOkPJNWwYJ_phb7iZuDt4.roa (raw, json)
Hash identifier: edNLlD3qbOh39DxevC9iFL+lMoE1+tSbPWNytrUaeOE=
Subject key identifier: C1:CC:C5:E9:18:4E:90:F2:4D:5B:06:09:FE:98:5B:EE:26:6E:0E:DE
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 0194266B15B4887E76CD99DC7D3C35557320
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/wczF6RhOkPJNWwYJ_phb7iZuDt4.roa
Signing time: Thu 02 Jan 2025 09:48:59 +0000
ROA not before: Thu 02 Jan 2025 09:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215771
IP address blocks: 185.214.236.0/24 maxlen: 24
185.214.239.0/24 maxlen: 24
2a0b:af40:1::/48 maxlen: 48
2a0b:af40:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:15:b4:88:7e:76:cd:99:dc:7d:3c:35:55:73:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Jan 2 09:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1ccc5e9184e90f24d5b0609fe985bee266e0ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:99:f6:f5:e0:ad:ad:4b:e6:46:78:f3:c7:b7:
0c:3e:0c:0c:bd:b9:15:db:f0:72:08:66:8a:92:52:
1d:8e:b0:53:53:bf:f8:9a:dc:20:db:a4:c0:3e:ff:
1b:56:f2:f3:21:b8:aa:84:98:06:fc:01:64:09:45:
34:24:8a:5f:25:22:fa:10:0c:5e:fe:d8:55:30:42:
1c:1a:d1:41:19:03:52:39:66:f4:b1:59:c4:bf:2d:
e0:cf:41:4f:35:13:2b:77:21:16:4f:b6:42:99:a1:
34:d3:72:01:0d:9c:61:27:84:bd:d0:89:0f:0f:cc:
2f:9d:22:b4:61:ab:d9:bb:51:f0:04:b1:3e:26:86:
80:24:78:0e:01:42:16:30:dd:ab:8a:23:03:48:83:
a9:ea:01:e3:56:dd:de:9b:c6:92:8e:1b:e4:01:ff:
a1:11:6a:46:98:d6:95:c4:f4:2a:03:d9:3f:59:87:
75:b0:91:bf:96:1f:e4:33:e4:4c:1f:a7:a4:55:9a:
7e:d8:e1:35:f9:f9:af:35:15:99:ac:4b:f6:b1:db:
24:09:c3:42:f2:18:54:a0:13:a5:1e:ac:4c:39:f3:
ae:1b:96:37:16:cc:00:bf:e8:55:c0:49:f1:c8:8e:
6c:cc:3a:f0:84:cf:b2:6f:d2:cc:38:05:79:61:1f:
e7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:C5:E9:18:4E:90:F2:4D:5B:06:09:FE:98:5B:EE:26:6E:0E:DE
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/wczF6RhOkPJNWwYJ_phb7iZuDt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.236.0/24
185.214.239.0/24
IPv6:
2a0b:af40:1::/48
2a0b:af40:2000::/36
Signature Algorithm: sha256WithRSAEncryption
0a:17:ce:d0:df:ae:8a:91:f9:42:53:02:8a:f5:21:c5:36:18:
78:df:94:ca:43:a5:8a:6e:66:36:ca:6e:f2:1c:ed:8f:d5:28:
85:df:f7:53:de:c0:54:9b:b3:ed:4f:ce:00:8c:71:6b:3a:d1:
0a:13:9c:7a:ec:38:72:21:81:66:10:88:ca:c9:fc:7f:0b:53:
19:b7:71:05:32:6a:2d:91:8b:12:ab:c1:7a:a9:53:75:7a:43:
81:40:eb:86:e0:f5:69:67:3a:9f:cc:a8:7c:3e:4f:36:50:d6:
88:65:ff:aa:ca:59:80:df:45:74:3a:ff:f4:2e:73:80:1d:9e:
a8:f4:ec:e4:e5:1a:8b:92:37:f5:91:77:cf:bf:7f:bd:50:52:
6c:62:77:d8:0b:ae:77:54:4f:0e:71:3d:6d:5b:fc:4b:b4:15:
3d:d7:3e:ac:64:2a:ea:12:00:ff:77:04:1b:f5:f7:e9:f0:1f:
05:c5:4a:f7:4a:be:86:5a:ba:18:af:f4:58:8f:ef:0f:e4:d3:
e2:1b:29:6e:76:02:1d:58:84:27:79:46:61:08:2e:62:cd:97:
e5:86:d7:a7:d2:20:56:21:b6:a4:98:06:02:bf:0f:b7:ed:ae:
e3:8c:f6:40:08:71:74:6c:c7:43:61:e8:29:3d:f3:6c:97:16:
6b:c0:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:45:54 2025 by rpki-client