Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/wNW8TSNNshnU_DMrJF4VdMs-MBk.roa
File: wNW8TSNNshnU_DMrJF4VdMs-MBk.roa (raw, json)
Hash identifier: Jqf7aCTYkkTPu1cBjBWJL/aNY87I89jG0ZEhlUcfUdw=
Subject key identifier: C0:D5:BC:4D:23:4D:B2:19:D4:FC:33:2B:24:5E:15:74:CB:3E:30:19
Certificate issuer: /CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Certificate serial: 011122A9
Authority key identifier: 99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/wNW8TSNNshnU_DMrJF4VdMs-MBk.roa
Signing time: Sat 01 Jan 2022 07:04:10 +0000
ROA not before: Sat 01 Jan 2022 07:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 174
IP address blocks: 185.188.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17900201 (0x11122a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dcbdf0632a101613a8f6c9449b29ed45c1a872
Validity
Not Before: Jan 1 07:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0d5bc4d234db219d4fc332b245e1574cb3e3019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:73:15:a8:6d:f9:d1:94:eb:da:78:72:af:1b:
bf:4a:ac:ec:5b:20:86:a3:e6:41:43:82:94:7f:54:
27:a3:a4:86:1e:93:0a:18:b1:d1:6d:64:3c:c2:46:
89:82:2f:80:9d:0e:c8:d6:ad:c7:e4:22:d2:b7:32:
f6:f4:a9:f2:26:87:4a:25:66:97:04:4d:c5:02:75:
0e:b8:6b:01:89:7a:06:b7:ef:9a:08:25:d7:a1:e3:
e2:35:17:f0:ce:87:f6:3a:06:56:ce:11:ea:02:64:
e6:ee:0a:7c:f7:b8:d6:2b:06:2f:25:bb:86:90:1a:
c7:9f:c5:56:96:c3:90:da:11:b6:a4:07:24:43:f0:
ed:a6:17:6e:8c:e6:49:32:0a:f3:c2:b2:4f:ec:1d:
42:dc:28:8b:00:4b:19:a1:08:63:06:27:50:08:c3:
0c:ca:2b:c3:81:4e:65:93:01:80:e6:53:e8:5e:58:
83:32:0a:79:83:83:c6:57:e2:dc:9b:4a:a7:17:b6:
f9:ac:8b:68:b0:bb:09:8e:89:9e:60:f0:57:7d:b0:
3a:4a:74:f6:4e:dc:93:28:c2:82:73:b8:c2:a5:04:
89:80:83:06:31:40:8a:60:e4:a4:ca:76:6c:cb:19:
06:15:6a:ab:bc:0b:bb:de:69:2a:d0:e5:f4:1b:a1:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D5:BC:4D:23:4D:B2:19:D4:FC:33:2B:24:5E:15:74:CB:3E:30:19
X509v3 Authority Key Identifier:
keyid:99:DC:BD:F0:63:2A:10:16:13:A8:F6:C9:44:9B:29:ED:45:C1:A8:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdy98GMqEBYTqPbJRJsp7UXBqHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/wNW8TSNNshnU_DMrJF4VdMs-MBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4f3d1b-8361-411e-a148-8858a559f251/1/mdy98GMqEBYTqPbJRJsp7UXBqHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.252.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:8a:90:f8:4e:93:5b:f7:62:a6:c8:33:4b:83:79:66:5a:65:
23:36:2f:8b:4f:fa:53:db:a3:74:ea:ae:25:47:df:5b:6f:23:
45:cb:82:bf:52:b9:87:5b:b6:95:b2:e0:2d:c4:de:11:5c:d5:
d7:c2:af:5a:52:bb:9a:cc:20:6e:59:37:5f:37:b1:17:68:97:
15:f0:00:ea:6f:a1:ea:87:ed:d0:d4:11:9e:8f:a0:fb:c5:0a:
9a:35:e1:c6:16:7b:ce:1d:9e:90:25:ba:fa:1f:2b:41:ed:8b:
d8:9b:3a:07:56:d1:d2:4f:08:f6:23:cd:67:aa:fc:00:82:ac:
42:04:99:23:2a:a8:e9:f3:d3:07:22:e4:41:e1:d3:c8:c8:09:
c2:1b:b1:d8:70:46:6e:af:ff:b0:ce:4a:69:0d:4c:1b:dd:f8:
e0:b5:14:3a:7b:2f:5e:50:13:17:f7:e0:bb:75:68:96:3a:f1:
fe:0a:4f:ed:65:39:57:b7:26:d3:7f:ca:23:ec:99:e6:12:56:
88:2f:e4:ff:5c:da:d7:ce:b1:5c:91:e3:75:9a:d5:61:4a:0c:
b9:f2:08:9b:5b:59:90:57:dd:03:f5:a2:e9:c7:67:cf:3a:38:
e3:79:16:49:35:ba:11:27:0f:16:e1:f4:fb:bb:de:6e:5b:0a:
18:6c:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:17:58 2025 by rpki-client