Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/pwilL7-SqvSjL1eQ9sBhk60m91g.roa
File: pwilL7-SqvSjL1eQ9sBhk60m91g.roa (raw, json)
Hash identifier: ejgZF3yeXBMbT88jpXGuK0xjilLQ7ohBrMzR4mxMXq8=
Subject key identifier: A7:08:A5:2F:BF:92:AA:F4:A3:2F:57:90:F6:C0:61:93:AD:26:F7:58
Certificate issuer: /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial: 01856FA70FA574011E9C8BE9DE03B3480136
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/pwilL7-SqvSjL1eQ9sBhk60m91g.roa
Signing time: Sun 01 Jan 2023 23:24:57 +0000
ROA not before: Sun 01 Jan 2023 23:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205517
IP address blocks: 185.194.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:0f:a5:74:01:1e:9c:8b:e9:de:03:b3:48:01:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Validity
Not Before: Jan 1 23:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a708a52fbf92aaf4a32f5790f6c06193ad26f758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:48:30:91:0f:45:cc:07:79:2d:7c:6b:be:4b:
1a:40:ae:3f:39:42:47:7e:76:a9:d0:f1:c8:ef:22:
3b:7d:34:22:12:a0:03:05:49:e0:61:48:f7:51:c3:
6f:f3:9a:b0:89:03:ab:c4:4d:d0:ab:29:ee:13:51:
d0:fd:2f:00:eb:99:76:91:6e:4e:66:11:d9:74:c8:
83:01:48:26:8d:92:e3:b1:ef:c1:36:65:ec:fa:85:
e2:e8:12:97:dd:4c:45:3e:37:e2:26:56:60:42:ad:
50:a2:1b:be:53:68:2f:c9:fe:b8:01:84:11:d3:bf:
77:b3:8d:0e:1a:5f:86:2a:60:ae:2d:67:1d:7a:00:
a9:cd:1d:34:e9:56:cb:c1:e4:a6:3a:a5:d7:b3:0e:
d6:3a:e5:9a:12:99:db:80:bc:e5:50:f8:ab:1e:ad:
9b:a8:77:b1:52:76:c1:26:a3:52:fe:1c:99:91:54:
5f:30:2d:fc:e4:1a:65:96:61:6f:ec:20:54:7c:42:
11:da:7e:e1:c7:32:db:ab:7b:ac:6e:d9:68:b5:3c:
cf:27:7e:b0:08:ae:12:27:7f:30:32:ca:ee:b5:d0:
95:e3:f2:b5:a9:00:95:5d:d8:dc:2a:56:5c:94:5b:
db:91:47:a7:1b:67:2d:ae:74:59:6f:0b:8f:b6:47:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:08:A5:2F:BF:92:AA:F4:A3:2F:57:90:F6:C0:61:93:AD:26:F7:58
X509v3 Authority Key Identifier:
keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/pwilL7-SqvSjL1eQ9sBhk60m91g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.115.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:1c:a5:24:1a:43:bc:f8:0f:33:36:a6:58:49:e3:ec:d2:bb:
25:95:f0:d5:30:b7:26:04:aa:d1:c9:05:15:38:b7:6e:4f:f0:
e0:f6:83:01:80:60:95:27:a3:a5:5d:51:de:94:d7:9a:ab:bb:
e4:04:bd:4b:58:e9:72:c3:9a:2d:ed:c7:7e:da:92:2d:27:ab:
da:4b:fa:f9:4e:1d:12:9b:d9:8a:ba:a3:17:bb:da:89:64:d8:
49:bd:47:13:9d:c7:fe:7a:ff:80:ef:14:49:51:07:4b:97:cb:
48:6b:10:0a:3f:37:d1:89:39:b9:29:f9:0a:f2:6c:ab:d1:b1:
52:6f:14:1e:f7:ec:b3:6b:73:9c:a6:98:ed:e7:b1:13:2c:e7:
9e:ee:a3:04:5c:1b:c9:00:27:28:2a:1a:37:41:ae:48:c1:a3:
2e:96:6a:e6:d1:16:89:3c:ca:26:0c:4b:79:eb:9a:7d:d5:38:
7e:3e:c5:ef:c7:9e:03:8f:c6:7c:8f:36:3d:96:8c:a2:7d:22:
b3:e1:3b:3c:05:a8:0f:23:89:5b:39:1b:c4:94:54:de:cc:04:
32:b7:84:3e:03:3b:09:70:d3:f2:3a:29:3c:fe:11:2c:f0:d9:
1c:e3:a8:82:3a:ef:bc:fc:a9:6e:9e:b1:5f:6d:48:db:a9:45:
d3:b3:f2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:09:42 2025 by rpki-client