Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa
File: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (raw, json)
Hash identifier: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=
Subject key identifier: C0:3B:B4:3D:B7:5C:AD:5F:E0:EF:E0:0B:E4:8D:E4:CE:6A:E0:99:DD
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 019422FB40CFD10168DE6FAC366E100C4D76
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa
Signing time: Wed 01 Jan 2025 17:47:58 +0000
ROA not before: Wed 01 Jan 2025 17:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199993
IP address blocks: 185.39.208.0/24 maxlen: 24
185.39.209.0/24 maxlen: 24
185.39.210.0/24 maxlen: 24
2a04:6d80::/32 maxlen: 32
2a04:6d81::/32 maxlen: 32
2a04:6d82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:40:cf:d1:01:68:de:6f:ac:36:6e:10:0c:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Jan 1 17:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c03bb43db75cad5fe0efe00be48de4ce6ae099dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:e0:30:9b:bb:7a:ff:3d:05:ba:ac:b7:76:
f8:65:12:7f:9a:fe:05:97:e4:92:22:b0:4b:1f:e7:
eb:f3:34:d6:13:e2:c7:6d:19:b5:76:f7:59:23:89:
19:f2:fb:6f:df:88:f9:dd:55:95:b2:9c:8d:48:11:
d7:3e:4b:be:5e:f5:e7:88:86:d8:cc:7b:9b:ec:9f:
e6:46:84:ef:e9:45:5e:50:46:92:e9:57:cf:e7:e2:
b3:28:07:ad:e6:3c:e6:28:a8:88:8a:94:d7:d9:00:
18:37:e4:41:80:87:b1:fb:29:9d:0c:53:90:05:2b:
75:18:ba:2c:04:ca:1b:67:fd:ca:af:18:1d:6f:e1:
d8:92:83:9f:5d:49:8b:ea:c6:25:dd:6b:90:7b:02:
e4:4f:5a:d5:60:59:e5:b0:9f:e0:08:0e:61:8b:d1:
46:35:f4:f2:3c:b2:7c:8c:41:99:8e:da:fb:5d:10:
7d:d6:1a:c6:3b:1f:21:b9:74:f7:65:6d:ff:51:a7:
3d:d8:82:06:b3:a5:2d:ac:1b:74:72:dd:ec:f8:8f:
bc:74:b5:e1:43:56:f9:8f:9d:a5:10:f6:3b:41:53:
74:31:44:27:4a:1d:89:8e:87:c7:ff:d4:4e:a7:50:
e0:1b:1a:3f:a5:69:ab:b2:95:6c:05:84:0c:b4:96:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3B:B4:3D:B7:5C:AD:5F:E0:EF:E0:0B:E4:8D:E4:CE:6A:E0:99:DD
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.208.0-185.39.210.255
IPv6:
2a04:6d80::-2a04:6d82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0f:00:02:1d:9d:55:bd:d0:02:80:8e:07:77:24:fc:7e:e5:8c:
8f:5e:f3:b4:86:5c:2b:c7:26:88:42:46:66:6b:05:0d:7b:d4:
d5:c0:67:dd:0a:81:0b:03:e5:2c:0a:da:7b:9d:18:d9:45:88:
85:bb:40:78:99:1d:0a:f1:08:37:a9:ff:a3:4a:cf:b5:b7:dd:
4e:c1:66:c7:94:29:42:df:ae:b2:6d:38:13:58:31:4d:db:ad:
a2:81:61:1b:85:2c:12:88:97:9c:3f:13:3f:5d:aa:a7:f2:37:
91:96:4e:fd:ae:b5:51:35:87:97:fb:40:b8:81:1e:ff:87:b5:
2c:69:e5:d9:a4:5e:02:d3:8f:7f:12:b8:4c:f7:4d:04:18:70:
ee:64:46:5b:46:df:2f:77:0c:70:92:57:6c:7b:33:67:06:67:
ef:b2:d0:97:a1:35:c9:5c:d8:dc:40:36:4c:f3:76:29:c1:e0:
f4:78:e3:cc:70:67:8b:da:36:f0:0d:5b:40:8f:9e:04:db:45:
bb:53:39:c6:60:6c:e9:10:bc:5e:e1:a0:d0:5d:75:b1:d2:4f:
80:7c:59:b0:d4:e9:a0:a0:49:1f:6d:d6:f3:7f:9a:5d:98:1e:
0f:9e:8f:9e:e5:8c:41:00:82:0f:c5:45:fe:f3:b9:2d:0b:38:
4d:8f:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:40 2025 by rpki-client