Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/WJSWv9D0fpEKkeaelKd0lRBHB4E.roa
File: WJSWv9D0fpEKkeaelKd0lRBHB4E.roa (raw, json)
Hash identifier: jyk1XZGCI1XlQx2mxEZ8EZjtebeTz7ouBQK15hakI/Q=
Subject key identifier: 58:94:96:BF:D0:F4:7E:91:0A:91:E6:9E:94:A7:74:95:10:47:07:81
Certificate issuer: /CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Certificate serial: 018513344E99690AD61A5DAB470FFE9E18CE
Authority key identifier: 70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/WJSWv9D0fpEKkeaelKd0lRBHB4E.roa
Signing time: Thu 15 Dec 2022 00:34:33 +0000
ROA not before: Thu 15 Dec 2022 00:34:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21245
IP address blocks: 185.155.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:34:4e:99:69:0a:d6:1a:5d:ab:47:0f:fe:9e:18:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Validity
Not Before: Dec 15 00:34:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=589496bfd0f47e910a91e69e94a7749510470781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b8:29:3a:df:1c:22:79:a4:7c:b4:ee:7a:b6:
37:ec:b5:ab:f0:0f:d2:33:c9:e9:7e:ba:33:49:2b:
e5:b9:0d:06:a2:bb:99:e2:2e:65:f1:de:df:22:32:
56:e3:ee:30:49:20:01:ff:ec:3d:03:4a:03:60:a7:
97:63:20:6a:35:3b:6e:d7:8b:d3:40:48:e7:56:5e:
0d:54:99:c5:6d:33:4b:a1:f5:41:c2:09:ca:93:19:
5f:e3:83:21:0e:54:64:44:1a:8f:e4:f7:ab:6b:80:
99:94:0c:a9:de:15:fa:af:56:83:d0:28:12:cb:0d:
e4:8a:a5:01:c1:c2:d8:57:95:7b:28:7f:61:87:99:
8c:bd:4b:c8:02:2e:01:58:ad:aa:89:1a:30:57:79:
6e:50:f9:74:87:9f:a0:2a:25:22:2d:84:57:b8:04:
ec:be:00:30:03:db:43:12:ab:9a:5f:7a:15:4c:9b:
2f:b6:cb:ae:23:90:c9:23:01:33:50:d4:59:de:3b:
74:19:dd:c6:0c:dc:5a:e9:f5:6e:5a:7a:73:01:92:
cb:48:97:76:38:fc:1c:08:14:43:74:7e:e6:e6:fe:
cc:a0:21:4f:e0:a7:c7:95:26:ad:c7:00:78:a1:86:
17:40:0a:e6:40:84:b1:f5:c8:21:f0:ea:43:bc:42:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:94:96:BF:D0:F4:7E:91:0A:91:E6:9E:94:A7:74:95:10:47:07:81
X509v3 Authority Key Identifier:
keyid:70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/WJSWv9D0fpEKkeaelKd0lRBHB4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.102.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a4:0c:19:66:0f:37:9d:a3:55:79:1b:27:0f:d9:c3:73:ed:
f9:7b:c5:16:57:cd:c2:83:d6:59:58:22:e3:72:ec:06:66:e4:
b9:ec:75:16:53:22:a7:63:f7:fc:35:84:4a:e4:df:9d:84:a1:
79:31:85:ed:2e:27:7e:a1:52:52:9b:da:cd:3d:5d:9c:b3:94:
47:86:0e:54:5a:9e:e6:90:bd:fb:fc:fa:bf:13:0e:69:87:19:
33:5e:22:26:25:dd:94:4c:48:f8:56:66:25:e9:6d:ee:10:f9:
0e:21:d2:33:2a:56:3e:7d:11:b8:70:43:e4:de:f7:d7:c2:65:
f9:0a:19:cc:cb:09:5f:60:d9:24:21:90:f5:9a:d1:89:d0:e5:
57:73:08:4b:f8:ba:55:d6:29:0d:1c:0c:54:b6:2e:b5:4e:ce:
66:ce:f6:d9:31:5e:6a:83:15:31:76:36:90:cc:2a:9c:f6:7f:
42:20:76:6d:fc:7a:c5:bf:59:29:29:03:7f:49:0f:f1:3d:91:
e9:b1:19:e0:20:e4:7a:d4:69:87:f7:78:d1:01:91:44:c1:4b:
6c:02:1a:49:0f:0b:bb:64:0e:e7:3e:d5:09:bd:8a:00:77:17:
34:c5:0a:90:b3:3b:05:c9:6b:27:5a:44:8c:4f:58:06:42:b5:
96:e2:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:46 2025 by rpki-client