Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/wCMVD4s-MzexAEYCNnm0u-lWVks.roa
File: wCMVD4s-MzexAEYCNnm0u-lWVks.roa (raw, json)
Hash identifier: 1CzqXOjbHH5Z0NSEWz+9Qkw44w+rWwhDlrc+ZZXhbB0=
Subject key identifier: C0:23:15:0F:8B:3E:33:37:B1:00:46:02:36:79:B4:BB:E9:56:56:4B
Certificate issuer: /CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Certificate serial: 019425FCC86246D7BBF2BC00CCB0E161F46E
Authority key identifier: B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/wCMVD4s-MzexAEYCNnm0u-lWVks.roa
Signing time: Thu 02 Jan 2025 07:48:30 +0000
ROA not before: Thu 02 Jan 2025 07:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 185.73.72.0/24 maxlen: 24
185.73.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:c8:62:46:d7:bb:f2:bc:00:cc:b0:e1:61:f4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f4be41054eaf787eaa3833ffcae8f1ed7faa80
Validity
Not Before: Jan 2 07:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c023150f8b3e3337b10046023679b4bbe956564b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:9a:50:74:89:90:fb:a1:ec:ac:10:14:aa:
59:98:bc:67:83:88:49:2e:e1:3c:7a:d8:24:ac:d2:
42:f4:f5:32:37:78:3a:d0:77:db:46:cb:03:8a:5e:
9a:1a:a0:6d:85:42:34:cc:8f:7c:57:69:37:c6:5d:
f2:7c:c2:8a:0e:0b:94:fe:2a:c9:e7:4a:4a:2a:0b:
66:4c:7b:61:7d:c7:d5:cf:4c:2d:62:76:1d:58:7c:
60:43:c4:e7:d5:87:78:e6:ad:7a:d8:54:15:61:4e:
0a:a8:e2:a9:68:a8:80:fc:07:2b:a3:47:08:79:1f:
fd:f1:df:0c:8f:89:49:4f:d3:f5:d3:bc:35:d6:6f:
08:e3:14:c3:0f:8b:41:45:3e:10:78:57:12:d2:a6:
81:9e:ff:d9:f8:75:21:1b:ee:22:79:25:34:ad:0b:
44:16:60:7c:33:69:8c:19:2f:20:41:70:7e:73:62:
b7:da:11:ad:f0:29:04:88:8b:3f:8e:33:20:ce:f8:
af:c2:68:c4:42:06:0e:e5:f0:82:58:3f:c0:10:19:
ad:51:66:d0:00:81:2d:9d:66:5e:2f:98:9f:5b:96:
5d:93:e2:57:ad:d9:81:f1:13:c1:1b:34:18:2f:5b:
25:f1:9d:06:9a:2c:f0:59:61:a1:86:8d:49:67:29:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:23:15:0F:8B:3E:33:37:B1:00:46:02:36:79:B4:BB:E9:56:56:4B
X509v3 Authority Key Identifier:
keyid:B8:F4:BE:41:05:4E:AF:78:7E:AA:38:33:FF:CA:E8:F1:ED:7F:AA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPS-QQVOr3h-qjgz_8ro8e1_qoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/wCMVD4s-MzexAEYCNnm0u-lWVks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/16a12e-8b5a-4649-a03c-71cd6af072a5/1/uPS-QQVOr3h-qjgz_8ro8e1_qoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.72.0/24
185.73.74.0/24
Signature Algorithm: sha256WithRSAEncryption
39:94:12:7e:83:64:a6:f2:1d:4d:46:41:f8:48:98:f0:e6:a1:
a7:c1:1e:db:f6:02:90:10:85:c5:41:b2:6b:11:98:2b:5c:28:
45:70:6b:2f:53:83:44:c4:31:54:7d:53:73:e1:95:55:2a:75:
94:7c:ed:7b:c7:93:f6:15:82:eb:52:d6:6d:7d:6e:30:2f:e7:
67:a9:cc:4a:41:71:8a:41:0b:19:ae:65:bf:c7:2e:f5:08:b8:
90:39:80:dd:01:24:98:fd:c1:9a:06:5d:2c:80:52:dc:48:28:
ef:87:41:8c:5a:59:0c:bf:80:55:8e:9a:e2:44:f1:4b:50:5e:
2f:e5:2d:01:58:6a:25:53:0c:0a:f3:01:bd:d1:9c:f0:17:8c:
bb:f1:76:76:99:3a:ed:25:1a:a8:65:8f:47:7d:f2:6a:c8:1b:
2c:37:cd:2b:cc:d0:f6:20:b9:1b:16:b1:a3:62:09:b4:3c:cb:
c8:89:85:0c:1a:d8:9e:af:fc:41:d4:55:c3:d0:c9:05:b8:ad:
fc:7e:48:a3:ea:11:c2:de:cc:b0:db:29:d0:d5:32:30:3c:31:
b7:1c:75:d5:06:71:33:81:da:10:29:2d:88:1e:1f:94:29:f9:
fe:82:2b:8e:4d:8a:32:ea:78:9d:eb:ae:b6:99:3e:c6:61:aa:
f0:15:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:01:06 2025 by rpki-client