Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/wu74ellxTR1URudwGeXbUef_Mc4.roa
File: wu74ellxTR1URudwGeXbUef_Mc4.roa (raw, json)
Hash identifier: moXgOfjz6lSXZnPmCRWJ8GgkWq4qK3fy/l+GxzPvtEA=
Subject key identifier: C2:EE:F8:7A:59:71:4D:1D:54:46:E7:70:19:E5:DB:51:E7:FF:31:CE
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019426D928DCF0584CC2F359758E0AEA08B2
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/wu74ellxTR1URudwGeXbUef_Mc4.roa
Signing time: Thu 02 Jan 2025 11:49:13 +0000
ROA not before: Thu 02 Jan 2025 11:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25577
IP address blocks: 185.229.20.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:28:dc:f0:58:4c:c2:f3:59:75:8e:0a:ea:08:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Jan 2 11:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2eef87a59714d1d5446e77019e5db51e7ff31ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:ca:20:9f:b4:8e:61:4b:bf:2e:d7:2e:1a:
e7:07:0e:8c:e8:88:76:62:7a:aa:02:cd:fd:da:2f:
1b:77:86:ce:cf:e7:88:f1:e0:d9:85:db:9b:00:8e:
40:c5:72:54:5c:c0:3f:3b:fb:8b:4d:9f:2b:92:0b:
13:80:06:db:61:3d:61:74:32:23:b0:ee:f7:cb:b7:
78:f6:70:c7:57:46:91:73:f3:b1:c4:d7:a2:98:74:
f7:40:ac:98:f6:98:07:5a:07:0c:59:83:a8:16:2d:
99:45:03:55:af:ce:f0:06:f4:d5:94:72:32:bc:2c:
d8:69:7a:6f:d8:ba:b9:fb:e4:1e:2a:3c:57:8d:14:
21:7b:94:35:bd:32:da:30:23:27:47:a5:6b:53:73:
9c:d9:1c:a6:e6:c6:fb:58:14:b0:4a:f8:f7:a4:cc:
da:7e:53:e8:59:a5:64:7b:28:42:69:1f:54:62:4b:
37:7d:e9:d7:40:c9:e9:d3:a0:f6:c1:26:b0:39:ae:
5a:3a:b0:d6:ee:f7:38:36:46:67:6d:25:2b:01:f4:
8a:7c:a5:28:14:43:8c:c6:c4:09:1e:41:82:c4:38:
dc:ed:1d:83:48:5e:1b:69:57:e0:22:e8:9b:8a:bd:
e3:65:ed:04:82:2a:e5:5a:92:13:7d:aa:27:84:2c:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EE:F8:7A:59:71:4D:1D:54:46:E7:70:19:E5:DB:51:E7:FF:31:CE
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/wu74ellxTR1URudwGeXbUef_Mc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.20.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:6a:c4:6e:ca:70:dd:b4:a4:99:5b:39:f2:ad:1c:03:31:56:
33:68:6a:51:80:ec:ec:33:db:d2:6a:56:b0:f4:d4:a6:c8:4e:
47:66:b5:a9:ff:7d:a6:a9:d3:a8:e5:71:54:94:de:74:88:5b:
4c:07:89:3f:d2:84:9a:26:05:fb:ed:51:7d:e3:9a:3a:3b:ed:
42:12:10:ae:62:e5:36:c4:8a:d8:68:11:e9:e5:16:27:9e:a7:
fe:04:12:c0:93:90:63:6c:48:bf:90:39:94:eb:d1:e3:50:6a:
d8:72:f0:99:73:4b:9b:4b:4c:d0:3b:de:5f:f2:38:37:4c:55:
d6:88:3a:ce:fe:a0:34:54:13:c9:19:d7:e8:0d:48:d9:6d:91:
61:a9:a1:8a:d7:ed:59:76:6b:06:61:59:cf:fe:18:37:ad:fe:
dc:b2:17:e0:3e:c8:1c:40:55:63:e2:94:4b:36:6a:4f:94:01:
56:31:64:fa:db:29:a4:ff:fd:10:5e:20:e2:b3:5e:ec:de:d3:
19:d7:c9:b5:67:11:12:09:6b:32:62:c0:69:3b:c4:ce:29:68:
bd:59:fe:2d:ba:d5:93:a4:16:37:7a:ca:7f:a7:c5:e9:17:58:
e9:b6:2a:84:ad:b1:35:97:79:5b:af:c4:7f:aa:86:45:c6:6e:
57:50:ee:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:30:04 2025 by rpki-client