Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/wKK7G2MHPuX5XUlcdyAwN4unQro.roa
File: wKK7G2MHPuX5XUlcdyAwN4unQro.roa (raw, json)
Hash identifier: YUI2lsFSw5prWm8V2x+DQgGXeyHwVRifsKI4CxdT0ng=
Subject key identifier: C0:A2:BB:1B:63:07:3E:E5:F9:5D:49:5C:77:20:30:37:8B:A7:42:BA
Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Certificate serial: 03B12CAC
Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/wKK7G2MHPuX5XUlcdyAwN4unQro.roa
Signing time: Sat 01 Jan 2022 01:00:45 +0000
ROA not before: Sat 01 Jan 2022 01:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60680
IP address blocks: 185.27.89.0/24 maxlen: 24
185.27.88.0/24 maxlen: 24
2a00:9120:2::/48 maxlen: 48
2a00:9120:1::/48 maxlen: 48
2a00:9120:1:3::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61942956 (0x3b12cac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35
Validity
Not Before: Jan 1 01:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0a2bb1b63073ee5f95d495c772030378ba742ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c2:ed:92:91:60:d6:50:28:37:a6:d8:4d:41:
11:4a:03:45:45:50:f4:43:d8:e2:aa:8f:8b:56:87:
cd:3a:9e:f0:ec:63:c3:b9:5f:6b:60:12:0d:79:55:
75:1b:f8:d2:24:6c:a3:eb:2d:0f:f3:ef:ba:3e:1d:
ee:54:74:e0:e6:da:39:95:d8:aa:e8:7d:52:ae:66:
e6:c1:81:56:cb:d1:4e:7f:3a:98:e9:c7:0b:16:00:
b2:a5:46:5c:6d:84:08:31:10:f5:e5:e3:b1:4f:83:
de:61:bd:fc:39:3d:9d:52:ec:a3:5c:82:b9:a7:e4:
c4:d8:d8:73:15:3d:ff:11:b0:39:18:96:ce:ab:62:
13:8b:a8:9c:ca:dc:05:5c:e3:91:4b:e6:8e:a1:80:
30:47:98:be:b8:74:c5:01:b1:1e:43:90:c6:a5:5a:
5f:7a:54:e3:8e:7f:81:a2:8d:c4:0b:c1:d0:96:d9:
27:cb:7b:93:94:1e:f7:b1:33:4e:ed:bd:1d:2a:8f:
d2:0d:73:b9:1e:03:34:80:81:20:22:20:63:dd:85:
3f:79:37:24:09:ba:10:93:79:bf:36:51:6e:a6:3d:
96:e0:29:77:04:f9:c0:43:c8:2a:9e:69:71:61:74:
b2:2e:0f:a2:f3:2b:9c:fa:07:5e:b5:ba:d0:1b:82:
11:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A2:BB:1B:63:07:3E:E5:F9:5D:49:5C:77:20:30:37:8B:A7:42:BA
X509v3 Authority Key Identifier:
keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/wKK7G2MHPuX5XUlcdyAwN4unQro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.88.0/23
IPv6:
2a00:9120:1::-2a00:9120:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a5:b3:a5:38:85:28:9f:fd:f1:60:0d:00:19:73:97:b2:9b:cf:
56:a0:72:bb:eb:e9:75:ae:3e:7f:ce:1b:78:d4:2b:a5:2e:88:
9c:28:bf:11:d8:2a:5d:6d:5d:3c:0a:fd:08:f2:56:f2:02:3b:
6a:8b:8a:7b:67:1a:72:d4:ab:e0:32:df:1f:c2:72:c9:86:45:
82:20:74:36:c2:41:63:6d:10:2c:ff:0d:ba:ef:0c:7b:5e:7e:
ad:ff:18:ae:39:8e:2d:d1:c5:0e:af:2f:5e:19:a7:bb:39:cc:
36:67:4e:2d:38:21:f0:cb:03:8b:53:cf:52:e6:d1:66:8e:d6:
f0:29:81:d2:47:9f:08:c2:df:08:92:f8:c0:15:71:50:a3:f6:
bb:ae:68:79:c9:ce:db:56:59:19:ee:31:b0:76:3c:ff:94:18:
1a:a1:ab:8d:6c:a2:4b:50:7f:50:21:19:ba:2d:33:3d:42:05:
f9:3e:0c:fd:01:6c:07:85:18:d4:ed:ae:bf:3e:29:c4:3c:98:
27:10:43:79:4e:c3:79:17:f0:16:10:ce:cc:a8:7a:43:0d:58:
75:6c:64:7f:dc:a2:6e:fb:c6:e2:84:9d:3e:f5:09:ab:f2:e7:
17:36:ab:52:20:b6:cf:de:1a:2b:08:25:a9:a6:08:00:0d:56:
6c:ec:ba:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:53 2025 by rpki-client