Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/W6QOjqpakncZ5btUn_LFYWHRhQI.roa
File: W6QOjqpakncZ5btUn_LFYWHRhQI.roa (raw, json)
Hash identifier: 0Tpx1buqzp+SVfsKSz/Tn137XUEd3v/VStC3KMX88hA=
Subject key identifier: 5B:A4:0E:8E:AA:5A:92:77:19:E5:BB:54:9F:F2:C5:61:61:D1:85:02
Certificate issuer: /CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Certificate serial: 019421444F3A1CF4E07949D4DF07530D13EE
Authority key identifier: 2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/W6QOjqpakncZ5btUn_LFYWHRhQI.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 185.131.204.0/24 maxlen: 24
2a12:bfc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4f:3a:1c:f4:e0:79:49:d4:df:07:53:0d:13:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2b26c552563006213cfe4814a9dc2a0fc16f43
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ba40e8eaa5a927719e5bb549ff2c56161d18502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:29:e6:6a:4b:7b:17:20:c1:ab:74:33:41:
ef:d7:53:2c:59:c9:1e:3a:77:65:1a:e1:29:c4:02:
e9:dc:85:0a:0e:b1:6c:05:e2:28:8d:9f:25:72:f6:
3f:6a:ee:db:4f:14:4e:b5:06:7f:66:a9:da:69:b9:
d3:82:db:e8:aa:0d:b7:46:b6:1e:c4:0f:ec:e0:9d:
2e:18:f4:4d:84:b3:71:ce:64:c7:53:45:35:53:a6:
d0:78:46:85:61:ed:f1:be:e7:44:a4:b9:1c:78:cb:
52:13:18:79:47:b8:88:fb:7b:d3:8f:17:8d:ee:59:
b2:26:7e:e5:b1:3e:c3:11:69:72:f6:7b:43:66:91:
12:98:aa:2b:6e:27:d6:53:fa:d7:3e:cb:52:ab:a7:
e6:b9:92:3c:c5:c0:31:d6:22:7e:f1:fc:da:65:a8:
e6:12:3b:32:7f:7e:de:7c:c6:3e:6c:b9:d1:ca:85:
b3:99:d4:71:a6:4d:8e:e1:e6:c8:23:82:be:72:0b:
66:8f:e9:ce:b0:e8:fe:36:a1:83:bb:8d:6d:f2:57:
26:e8:85:04:6a:c7:97:98:36:64:28:0c:3d:bd:1c:
76:b4:74:e4:87:b7:ec:fb:f0:cb:94:cf:e0:e2:95:
f5:b6:fe:29:d3:4f:7c:7d:dd:14:9e:f7:78:8e:80:
83:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:0E:8E:AA:5A:92:77:19:E5:BB:54:9F:F2:C5:61:61:D1:85:02
X509v3 Authority Key Identifier:
keyid:2F:2B:26:C5:52:56:30:06:21:3C:FE:48:14:A9:DC:2A:0F:C1:6F:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LysmxVJWMAYhPP5IFKncKg_Bb0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/W6QOjqpakncZ5btUn_LFYWHRhQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/4cc115-af65-4913-9d69-1c35b839379b/1/LysmxVJWMAYhPP5IFKncKg_Bb0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.204.0/24
IPv6:
2a12:bfc0::/48
Signature Algorithm: sha256WithRSAEncryption
0e:b0:42:a3:a1:62:ae:64:11:d8:15:b9:e2:06:1a:3e:50:3b:
7f:9b:e4:92:2b:48:51:8a:f7:26:4a:13:e0:ca:8c:5a:5b:f3:
c1:fc:c3:f1:2d:c6:fa:4a:e3:44:6f:91:0b:9f:06:26:d3:ff:
fe:05:08:10:dc:b2:de:af:8a:f2:ba:d9:3a:d6:8e:b2:d6:f8:
2e:7c:bb:b1:28:a9:53:68:81:cf:d1:06:a9:2f:a7:0b:e0:a4:
19:84:5b:a3:f3:7e:23:95:31:e4:d9:0c:fa:07:67:e9:d7:8c:
86:e0:a4:07:04:6b:44:74:58:2f:c6:ed:f4:6b:27:59:d8:0b:
43:9d:b7:2f:2e:18:93:e4:1c:9b:f4:35:ac:32:e2:ac:19:7f:
21:c4:1d:ea:9a:84:bc:b3:b1:22:ff:57:a3:82:81:1c:e3:1f:
85:1e:0e:bf:e0:f9:0e:e6:74:20:7b:be:bb:1f:a2:b7:3a:18:
b2:28:01:d6:07:ff:38:0e:f9:86:d2:1a:9a:00:49:9e:74:fb:
cd:f1:9e:2e:d8:53:04:37:1f:55:60:d4:67:87:be:51:fa:e1:
7d:e2:8d:2a:5b:68:30:af:d9:a8:5b:11:5f:b6:74:98:8a:63:
f6:0f:4c:ff:4e:80:7b:f0:30:bf:c4:0c:d6:c2:58:d3:96:e1:
e3:b3:62:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:01 2025 by rpki-client