Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa
File: wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa (raw, json)
Hash identifier: 6BF3Tz98RJ+JLDH8H1TR0fBCjZa59O91O2lzWujL8yU=
Subject key identifier: C2:4A:EF:EE:A5:77:F7:D5:F3:DE:32:2E:B9:02:76:97:D6:C2:C6:09
Certificate issuer: /CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Certificate serial: 01942067DE16E53E16FFFC7B849555D45769
Authority key identifier: 8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa
Signing time: Wed 01 Jan 2025 05:47:45 +0000
ROA not before: Wed 01 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198601
IP address blocks: 185.234.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:de:16:e5:3e:16:ff:fc:7b:84:95:55:d4:57:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e195c1632aa9b024e28bff22ec6f0a7e27760a7
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c24aefeea577f7d5f3de322eb9027697d6c2c609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:0f:d9:3d:22:11:ac:74:f3:62:b9:59:a0:
23:e7:d0:0b:ba:94:f7:41:d0:05:3e:18:94:ff:90:
be:a1:9b:1e:b3:ac:4e:ba:9c:c4:96:c5:3f:97:9d:
1a:d9:70:ae:79:a8:6c:9d:1d:f0:ab:52:78:d6:6b:
b3:44:3e:09:51:80:91:6d:d7:5a:fa:a2:cc:1f:cb:
59:60:56:a5:15:db:8b:27:08:bb:87:92:18:11:9c:
81:7b:b5:3d:53:db:c5:40:25:69:2a:cb:79:e1:a9:
f8:eb:c0:e2:93:b6:fc:74:80:4a:d8:ae:f6:88:13:
67:70:4f:14:1d:88:d1:1c:e0:81:c3:a2:e0:94:4e:
c7:59:f2:8a:a8:fd:23:ba:65:f7:24:be:a5:ba:c6:
d4:d0:c5:d8:39:c3:95:c7:83:47:95:df:0c:e4:f0:
83:a5:fb:b6:aa:8b:6d:0c:03:3e:f2:a4:15:0a:9b:
85:50:3e:22:c4:d7:ba:14:72:ac:80:27:47:ee:97:
67:3c:7a:81:2b:82:7c:d9:fb:74:be:10:3d:a3:a4:
37:41:3f:a0:62:b0:c5:7b:02:fd:8a:00:88:26:5d:
cd:d7:40:c1:b3:d2:0b:44:17:78:40:d5:c9:5a:11:
49:be:11:aa:5e:66:8e:a5:52:05:93:33:b0:16:ea:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:EF:EE:A5:77:F7:D5:F3:DE:32:2E:B9:02:76:97:D6:C2:C6:09
X509v3 Authority Key Identifier:
keyid:8E:19:5C:16:32:AA:9B:02:4E:28:BF:F2:2E:C6:F0:A7:E2:77:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhlcFjKqmwJOKL_yLsbwp-J3YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/wkrv7qV399Xz3jIuuQJ2l9bCxgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd7a64-301a-49e7-ac65-ead8091dbc13/1/jhlcFjKqmwJOKL_yLsbwp-J3YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:66:6c:3b:fc:8e:0c:43:17:0b:dd:ce:8e:33:d1:ef:95:18:
ab:f4:61:53:7e:f7:62:20:26:90:f1:1e:41:84:fb:72:7e:e7:
51:ed:9c:10:c8:07:91:ba:32:4a:fa:d7:2e:12:3e:d2:cc:46:
92:57:3b:58:33:53:c7:06:ef:00:a9:ef:a3:55:07:60:b6:98:
2c:ed:1d:c9:05:69:15:6d:b9:a4:ab:fc:5e:43:0c:ce:60:b7:
93:d4:ed:bb:43:ff:28:9c:0a:d5:cf:10:dc:c0:2b:a6:a0:78:
2e:be:d9:6f:79:a6:11:36:b0:bd:98:93:e4:ca:45:1e:bd:d4:
62:3b:03:cf:18:f9:7f:c4:6c:05:70:b4:4c:a1:72:52:35:f6:
45:c0:f7:01:1c:9b:6f:79:09:2c:11:2c:50:bb:44:21:47:26:
9f:0b:af:10:99:93:64:09:7d:f0:36:3e:df:2c:07:22:ee:af:
29:be:ab:e5:f7:56:57:78:b3:30:34:aa:1e:5e:ca:2e:15:1e:
11:17:f2:d7:e1:67:ce:a0:00:ca:72:ae:44:34:a5:6d:d8:0e:
c2:ba:42:c5:20:d3:bf:d7:5c:47:58:65:c5:1a:22:bd:b0:09:
19:b7:dc:f3:4f:48:7e:71:d1:fd:07:13:59:ec:6c:16:6e:e8:
b0:af:84:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:02 2025 by rpki-client