Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa
File: WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa (raw, json)
Hash identifier: uBIazeW9ZJrIEfawzpjRmH4sNuGdOT1AiFSbiZsPXDU=
Subject key identifier: 5A:1B:5C:B8:92:74:35:25:AC:8A:8F:1F:F2:B4:0D:31:BA:AA:78:3F
Certificate issuer: /CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Certificate serial: 01942825D820A54A9280ABD8235C7D6F221A
Authority key identifier: A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa
Signing time: Thu 02 Jan 2025 17:52:36 +0000
ROA not before: Thu 02 Jan 2025 17:52:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34741
IP address blocks: 185.174.240.0/24 maxlen: 24
185.174.241.0/24 maxlen: 24
185.174.242.0/24 maxlen: 24
2a07:f100::/36 maxlen: 36
2a07:f100:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d8:20:a5:4a:92:80:ab:d8:23:5c:7d:6f:22:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d32269302e1cbccbaac0e0e5af8a864498a135
Validity
Not Before: Jan 2 17:52:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a1b5cb892743525ac8a8f1ff2b40d31baaa783f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:e7:15:ff:f1:fa:a8:fc:76:8b:bb:08:24:
be:a5:65:fa:0a:62:1f:1d:30:c4:6b:1b:a2:04:06:
c4:03:7b:e6:ef:2c:03:4b:af:be:16:23:5e:b5:22:
2c:cb:df:a7:f8:d0:34:38:88:51:d1:7a:fb:c1:e5:
ec:3c:bd:cc:44:c2:33:d2:bf:a2:93:d7:05:e5:dd:
d9:bb:8e:bd:31:ff:74:1d:e9:72:da:0b:8a:40:71:
e1:70:db:3c:50:52:df:2b:eb:30:1a:ef:4b:a2:64:
2c:f2:91:dc:19:b7:bd:6b:7d:39:7d:f2:26:47:80:
d6:ea:3f:7f:28:fc:ba:16:b7:2d:f2:90:2b:a5:e9:
c5:50:5b:8d:b1:6e:2b:b3:b7:96:c6:8a:59:aa:74:
58:0a:01:73:bb:c1:61:7f:db:79:32:cf:6b:a8:52:
0f:dc:67:69:fc:1a:68:da:38:16:e6:5e:38:9c:5f:
c1:9b:9e:e5:51:53:0c:8d:36:d2:76:88:96:d7:34:
93:b3:c3:1f:cf:4b:d4:8f:52:2a:07:14:6e:62:58:
42:12:2d:b4:ae:07:73:c3:e1:a6:e6:8c:39:ad:12:
60:6f:0d:7b:88:6e:96:f6:a0:07:65:c1:8f:f4:cf:
0f:b7:07:5e:77:34:95:39:ca:3d:d9:26:04:1f:33:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1B:5C:B8:92:74:35:25:AC:8A:8F:1F:F2:B4:0D:31:BA:AA:78:3F
X509v3 Authority Key Identifier:
keyid:A4:D3:22:69:30:2E:1C:BC:CB:AA:C0:E0:E5:AF:8A:86:44:98:A1:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNMiaTAuHLzLqsDg5a-KhkSYoTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/WhtcuJJ0NSWsio8f8rQNMbqqeD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9616ee-381d-4afe-890c-6ee514b29115/1/pNMiaTAuHLzLqsDg5a-KhkSYoTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.240.0-185.174.242.255
IPv6:
2a07:f100::/35
Signature Algorithm: sha256WithRSAEncryption
94:cc:42:cd:bd:55:99:46:ca:e6:d4:a1:3c:91:6e:42:87:16:
28:ed:73:34:a1:f0:8a:40:84:a0:75:9e:61:28:b4:e0:73:03:
96:fc:72:1b:4a:25:9f:89:26:73:4a:1a:4d:74:32:43:9d:63:
4e:0c:ee:22:e5:96:62:ad:ab:30:8b:59:85:54:57:ae:37:59:
e7:16:22:3f:47:3e:bb:2f:71:eb:38:8e:30:43:35:b3:0a:98:
e2:39:30:76:37:0c:65:dc:c8:c6:ba:26:1e:de:d3:d1:d3:ce:
6e:06:12:13:ea:0d:1c:aa:93:31:9b:e2:6b:43:24:e7:43:d9:
58:2f:0d:f3:29:06:0e:5c:98:6f:a1:dc:3c:e0:ed:8a:bf:b1:
12:c0:98:2a:94:de:fc:3c:70:3c:d6:f9:b5:2a:ca:46:25:f4:
eb:7a:6b:f1:a0:8d:0c:47:f8:7a:25:02:17:22:42:cd:fa:20:
d6:64:80:48:0c:55:c7:44:a2:65:c5:89:64:2e:6a:c7:ad:4f:
ec:5d:33:19:25:40:fc:ff:83:13:fc:22:a5:45:3c:ac:c3:8b:
66:c3:56:f7:89:f3:57:36:81:55:d3:20:b8:36:e4:c2:03:87:
23:9b:21:28:be:89:07:69:7b:1a:12:d1:37:af:cf:94:4c:e0:
6e:a9:aa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:13 2025 by rpki-client