Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/WvHTHUW2Hu_mDZctFQeVwGysiHE.roa
File: WvHTHUW2Hu_mDZctFQeVwGysiHE.roa (raw, json)
Hash identifier: 0IRIumTzEnldnjuLK5Mty3ubumeenKJPjlLba1MpsmY=
Subject key identifier: 5A:F1:D3:1D:45:B6:1E:EF:E6:0D:97:2D:15:07:95:C0:6C:AC:88:71
Certificate issuer: /CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Certificate serial: 019427B546CCEFA1D8B1066B8579FA3C247A
Authority key identifier: 9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/WvHTHUW2Hu_mDZctFQeVwGysiHE.roa
Signing time: Thu 02 Jan 2025 15:49:39 +0000
ROA not before: Thu 02 Jan 2025 15:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19551
IP address blocks: 185.154.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:46:cc:ef:a1:d8:b1:06:6b:85:79:fa:3c:24:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a94c4eacaf4040a1c30ed1edea8e3000731b6aa
Validity
Not Before: Jan 2 15:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5af1d31d45b61eefe60d972d150795c06cac8871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:8f:24:bd:11:eb:22:d3:c4:c4:54:6a:cb:
78:bd:ab:60:34:28:39:4e:5c:d5:5e:5d:1b:70:ad:
33:1a:af:60:a8:bc:7e:d1:ba:1d:38:fc:74:c6:68:
73:24:3d:22:36:ec:6b:69:07:f5:b3:eb:65:2c:64:
bd:27:20:de:27:8b:3e:65:c7:28:44:69:f2:b7:9a:
3d:9e:3d:7a:35:4a:c0:4c:ad:53:bb:29:57:a0:30:
0b:43:ff:18:b3:2e:08:40:da:22:c6:96:6f:95:d6:
a9:61:f3:ec:c0:47:2d:c4:a1:f5:0e:ea:74:ab:87:
27:88:df:36:b8:6f:8b:26:43:4a:e4:ae:35:6a:dc:
9c:16:34:f1:ee:46:65:26:15:05:e4:15:3c:57:aa:
7e:dc:96:fd:0d:0e:a7:7b:e0:41:4b:ea:1b:09:7d:
18:db:e4:dd:fe:e1:cc:16:a2:18:b5:7e:f3:2a:19:
c8:79:28:90:6e:7a:fe:b4:bc:f1:bb:6a:ad:d8:ad:
4b:71:7b:ec:f5:a2:62:9e:65:72:ee:74:bd:8d:26:
69:aa:6f:5b:7b:2d:b9:bc:47:b2:95:e6:48:1c:a9:
46:97:3a:0e:ac:7e:cf:7c:c1:fb:be:73:2b:11:63:
83:ef:61:95:22:67:7d:80:29:1e:b6:67:b5:86:dd:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:D3:1D:45:B6:1E:EF:E6:0D:97:2D:15:07:95:C0:6C:AC:88:71
X509v3 Authority Key Identifier:
keyid:9A:94:C4:EA:CA:F4:04:0A:1C:30:ED:1E:DE:A8:E3:00:07:31:B6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpTE6sr0BAocMO0e3qjjAAcxtqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/WvHTHUW2Hu_mDZctFQeVwGysiHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9ce15f-559a-43b4-a059-cbd4b4bb6f1d/1/mpTE6sr0BAocMO0e3qjjAAcxtqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.244.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:ea:20:33:ab:26:2d:a3:b0:36:61:fd:4b:7b:ca:0a:5d:26:
97:18:97:52:53:ff:e6:d2:3c:19:20:a6:2a:40:33:2e:f9:66:
e8:3e:97:58:23:dc:9b:2f:f5:0d:87:0c:a1:66:1b:ae:ad:7a:
eb:5e:6b:a7:23:fa:ab:b2:7c:b3:2a:6b:f0:e6:96:60:fd:42:
95:ff:38:ee:4e:17:16:2c:4e:db:70:22:1f:18:5f:e7:36:12:
0a:75:02:79:3a:24:87:3c:f4:fd:3b:cd:54:0c:b0:ce:75:9b:
ef:b0:a7:09:56:f3:ba:56:8a:e5:b4:51:fc:f0:f0:a1:72:e7:
e1:6a:d6:46:e3:1e:05:86:eb:5a:a0:a1:3c:33:91:ac:05:5d:
3c:75:37:77:ba:89:0c:ff:e7:f2:2f:d9:3c:38:a5:e2:39:3a:
b2:95:b4:5d:2a:ae:e6:a6:ca:05:92:d7:a4:0f:54:bb:ad:d7:
8f:97:b5:4a:e7:e0:42:e9:23:94:b9:96:f1:1e:91:b6:04:e0:
25:d7:58:b0:3a:72:ca:50:1f:6f:66:b5:b8:9c:b0:96:11:7f:
20:ca:64:b7:b0:f3:c3:7c:e2:99:39:eb:d6:0a:fd:1f:48:30:
fa:e4:fd:76:62:3f:e0:ac:8a:50:a8:f6:64:0a:a2:0b:bc:f5:
64:4d:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:28:22 2025 by rpki-client