Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/wNYo9e0wPq2CxY7rdH8zqXBMIXk.roa
File: wNYo9e0wPq2CxY7rdH8zqXBMIXk.roa (raw, json)
Hash identifier: yJ/nXN8GTVFcMRuBfjvQvRWBV77e5jvV0eD33OIeQW8=
Subject key identifier: C0:D6:28:F5:ED:30:3E:AD:82:C5:8E:EB:74:7F:33:A9:70:4C:21:79
Certificate issuer: /CN=5a15823b86adc7eebeee7a2d8b70e12dc9bbf5b5
Certificate serial: 01920F33D8EA26CBAA98DD132E25F89340FC
Authority key identifier: 5A:15:82:3B:86:AD:C7:EE:BE:EE:7A:2D:8B:70:E1:2D:C9:BB:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/wNYo9e0wPq2CxY7rdH8zqXBMIXk.roa
Signing time: Fri 20 Sep 2024 11:31:48 +0000
ROA not before: Fri 20 Sep 2024 11:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12541
IP address blocks: 185.224.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:33:d8:ea:26:cb:aa:98:dd:13:2e:25:f8:93:40:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a15823b86adc7eebeee7a2d8b70e12dc9bbf5b5
Validity
Not Before: Sep 20 11:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0d628f5ed303ead82c58eeb747f33a9704c2179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:3f:98:cc:55:01:46:ce:a1:c2:b6:af:ab:
b8:a5:6a:d1:a5:0f:8a:76:52:a0:f9:d7:6e:30:b1:
1d:ee:5b:3a:8c:54:9c:15:03:ab:94:b9:96:5f:ae:
97:f1:41:2e:6c:83:e6:53:ff:67:ee:8c:1a:21:03:
4f:c9:ce:63:47:ae:3f:51:5a:7b:61:4b:4c:32:eb:
63:3d:4f:82:3d:60:f1:05:87:39:e7:7b:c9:31:cf:
05:1e:76:20:44:51:89:0f:71:df:e6:b3:f7:fc:0c:
be:12:70:0c:f3:23:3a:8a:c0:5c:a8:6f:69:ad:61:
47:9e:1f:8b:10:c8:72:9b:5d:31:7f:05:9d:a8:85:
50:93:b7:4b:3e:89:96:f0:e8:55:db:f1:5e:7a:ba:
48:06:99:9f:c0:bd:ad:b1:af:07:a0:97:12:99:51:
4d:e4:98:30:e1:94:48:9d:f8:08:08:00:fa:16:50:
f2:91:7e:27:1b:92:1f:a4:08:46:c1:b2:67:5d:04:
b6:4b:a4:c4:96:d9:3a:fb:5c:f2:24:84:46:f4:cb:
e7:73:0a:25:28:24:10:79:2d:fb:ac:43:3d:ae:44:
b8:90:ed:9d:37:93:38:ea:02:15:b3:5b:f8:cb:54:
0d:9b:9c:34:c5:a2:77:64:13:54:94:1c:0d:3e:1c:
93:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D6:28:F5:ED:30:3E:AD:82:C5:8E:EB:74:7F:33:A9:70:4C:21:79
X509v3 Authority Key Identifier:
keyid:5A:15:82:3B:86:AD:C7:EE:BE:EE:7A:2D:8B:70:E1:2D:C9:BB:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhWCO4atx-6-7noti3DhLcm79bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/wNYo9e0wPq2CxY7rdH8zqXBMIXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6ef4b9-5e35-423c-bbc4-0a2ebfc2c850/1/WhWCO4atx-6-7noti3DhLcm79bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.76.0/22
Signature Algorithm: sha256WithRSAEncryption
94:c9:ea:64:15:e9:ba:31:8f:2c:c9:97:e9:97:11:53:60:d2:
d7:19:da:3c:0e:03:be:55:ba:d5:9f:16:ac:73:26:1b:0b:6c:
0f:47:fa:da:30:a9:1d:4f:f3:ae:6b:96:da:e9:c3:0b:f7:01:
90:f2:5d:c6:d3:fb:b4:a6:13:63:c2:b7:f8:9c:dd:2f:13:6e:
6d:61:9c:4d:e1:90:84:da:58:a7:81:d0:39:95:ad:01:e4:1f:
7b:c3:80:d7:a0:33:92:e9:ac:cf:dc:11:d3:d5:c5:0c:bc:74:
c3:88:93:f2:14:9f:d1:32:89:4f:ec:7b:c2:74:d0:10:aa:e5:
12:e0:eb:d3:15:2c:4d:01:04:94:c4:d2:23:03:7a:f4:9c:9f:
ca:36:c4:1e:5f:7d:e0:3a:51:dc:f6:c8:76:96:0b:00:7f:e0:
56:3f:76:0c:58:73:28:46:ff:88:19:db:6c:0a:fc:b9:95:23:
0c:44:95:4a:2e:ca:e0:1b:3d:d7:67:1b:a0:7b:dd:9a:98:ad:
ed:c8:64:87:dc:5a:25:4d:b0:42:70:26:ed:32:b2:f9:ba:11:
b2:5e:2b:23:b7:8d:af:ab:93:65:84:55:08:4a:68:fa:fe:81:
86:27:95:7b:6a:32:3f:a7:3c:9e:7e:c9:fb:df:46:7d:5e:58:
43:7a:b8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:20 2025 by rpki-client