Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/WNjqy0FgRRCyOWxVzgXNorqJYrk.roa
File: WNjqy0FgRRCyOWxVzgXNorqJYrk.roa (raw, json)
Hash identifier: 62bQgP8v+KM25N0XtPo5Azu964RjBCka+UQdXSRZuGA=
Subject key identifier: 58:D8:EA:CB:41:60:45:10:B2:39:6C:55:CE:05:CD:A2:BA:89:62:B9
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE42531BA8566F268107A3F9C4674
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/WNjqy0FgRRCyOWxVzgXNorqJYrk.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207537
IP address blocks: 185.133.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e4:25:31:ba:85:66:f2:68:10:7a:3f:9c:46:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58d8eacb41604510b2396c55ce05cda2ba8962b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:98:da:b1:66:85:10:3a:63:19:6d:e4:73:
bd:fc:3e:48:ac:62:bf:12:fa:97:33:d1:83:d8:62:
d9:ae:de:c0:d5:40:b5:0d:a0:35:ab:cf:0b:9c:fc:
88:f2:d7:1e:ac:95:84:90:40:22:9e:ea:22:22:8a:
0f:7e:db:8e:83:77:66:5c:ee:0e:93:80:04:c2:d3:
b0:59:cc:f4:fd:06:8d:4e:0f:89:a2:70:44:62:62:
a9:88:b4:2a:e0:53:43:c3:37:1b:75:8f:2b:87:48:
f5:b5:0f:4f:64:f0:44:ff:38:ba:c1:e4:cc:6c:46:
f3:20:00:2c:46:f8:de:ae:c5:ce:99:ef:70:64:e5:
a8:f2:e9:43:ee:2e:02:f3:1d:15:2d:21:a7:c0:65:
24:a3:52:4f:6a:bc:0c:46:82:d6:79:c0:55:d4:ba:
8b:11:62:7d:8b:15:95:0c:b1:72:c2:91:80:47:13:
49:59:e2:c2:3e:99:74:14:1f:72:71:70:35:da:bf:
a9:44:ea:c5:52:f8:00:3e:d0:7a:a5:4c:bb:29:5a:
ec:b4:68:dc:54:08:95:73:1d:6c:11:15:a1:14:18:
f2:9c:83:70:d2:d3:25:98:c7:ad:69:78:66:20:d6:
d4:10:a1:8a:7b:e5:33:be:6a:42:9f:16:93:4e:cb:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D8:EA:CB:41:60:45:10:B2:39:6C:55:CE:05:CD:A2:BA:89:62:B9
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/WNjqy0FgRRCyOWxVzgXNorqJYrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.211.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:44:9e:90:aa:18:f6:61:55:5a:f0:b9:c7:ea:1d:3e:ab:4c:
a3:00:a3:0f:36:4a:95:a6:fd:6a:9d:a8:37:25:7f:be:9d:92:
2a:d2:af:57:1e:68:87:33:92:ba:fa:6a:96:09:60:c9:78:3d:
54:33:b1:7d:13:2d:2f:93:e2:6f:1b:1d:c1:ed:40:b4:0d:26:
45:fa:25:3a:c2:4a:2f:48:b0:1c:a3:26:d9:4e:f4:01:79:df:
90:df:58:b1:aa:6d:00:75:f1:d2:3d:be:9d:53:d7:21:d7:13:
53:ce:f9:13:3a:54:12:0e:3a:29:af:06:5a:28:de:84:b1:92:
5f:d4:1a:d6:f9:1a:8d:61:de:8c:ab:e8:25:9f:0d:a9:62:df:
55:cd:b0:93:68:e4:3b:c3:cd:fa:0d:de:3b:93:5b:8f:23:ae:
a3:73:3a:31:6b:ff:1f:5b:44:2d:a7:75:a9:55:07:05:91:95:
df:d2:2a:10:5e:93:57:fe:43:39:72:e1:04:2c:b3:a2:90:4a:
47:95:cf:e9:17:93:f8:b1:2c:f6:17:4a:ce:04:c8:53:26:19:
f6:49:a3:d3:c1:f5:b0:9c:5a:4a:2d:2e:64:f9:61:79:bb:b0:
33:c5:ca:b2:54:e4:a7:98:b2:dc:28:cd:fc:ae:13:51:46:20:
51:6c:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:09:02 2025 by rpki-client