Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/WmIXcfiLlgUvI0nB-SeD0uk5cq0.roa
File: WmIXcfiLlgUvI0nB-SeD0uk5cq0.roa (raw, json)
Hash identifier: 0yoZg1hIL52JdudshQu+yJ96k9eh9BthLa16iCv1Wfk=
Subject key identifier: 5A:62:17:71:F8:8B:96:05:2F:23:49:C1:F9:27:83:D2:E9:39:72:AD
Certificate issuer: /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial: 01916CA16666A0A2962EC29FBC84E8FF9CE0
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/WmIXcfiLlgUvI0nB-SeD0uk5cq0.roa
Signing time: Mon 19 Aug 2024 21:53:22 +0000
ROA not before: Mon 19 Aug 2024 21:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211623
IP address blocks: 185.253.58.0/24 maxlen: 24
2a10:b9c0::/29 maxlen: 48
2a10:b9c0::/32 maxlen: 48
2a10:b9c1::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6c:a1:66:66:a0:a2:96:2e:c2:9f:bc:84:e8:ff:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Validity
Not Before: Aug 19 21:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a621771f88b96052f2349c1f92783d2e93972ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:dd:f5:49:64:02:14:f9:b7:e9:50:d4:bf:
9b:6b:60:f3:29:d1:42:6c:33:79:29:c5:aa:6b:fe:
ca:2e:c5:7b:69:22:a4:c7:05:17:81:5b:ac:22:62:
c3:43:0b:f3:a6:79:ef:8a:06:dd:35:33:57:cd:47:
8e:07:ea:0e:bb:bb:25:6e:e5:f7:96:35:4f:45:ff:
ad:9f:19:92:b1:44:71:c3:a9:c3:0d:69:49:38:c3:
68:81:c8:81:72:b9:e9:a8:e8:6b:b5:fe:05:26:c1:
fc:4e:54:85:cc:08:f1:7c:ad:b3:15:57:ba:0b:fb:
93:50:1f:0a:7f:f0:b1:6a:77:2b:a1:da:ba:ef:88:
10:50:7f:1e:fc:4a:13:98:09:aa:ce:e4:f6:92:22:
1a:39:b8:f4:6f:18:eb:e9:48:5f:b1:62:90:e4:71:
37:9b:e3:e2:3b:dc:4f:85:88:5b:ac:c1:61:f7:ed:
0b:13:10:1e:7c:69:fd:b4:83:61:c2:ce:b4:6c:c3:
b6:3e:a2:e0:8c:29:72:54:0d:bc:d6:99:b7:58:bc:
31:48:ab:19:34:d7:a3:19:34:26:ae:3a:0e:4b:c3:
26:ff:2e:ad:f4:9d:6a:0f:ce:8a:93:d8:e6:38:38:
6d:6a:8c:51:cf:f6:1c:e7:87:9b:22:b9:11:7c:a3:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:17:71:F8:8B:96:05:2F:23:49:C1:F9:27:83:D2:E9:39:72:AD
X509v3 Authority Key Identifier:
keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/WmIXcfiLlgUvI0nB-SeD0uk5cq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.58.0/24
IPv6:
2a10:b9c0::/29
Signature Algorithm: sha256WithRSAEncryption
28:26:3a:ee:18:e7:a6:fa:eb:91:21:1e:77:e4:80:3e:7f:88:
c7:2c:2a:7c:6c:37:40:6f:bb:c1:b0:2b:95:2b:cc:a9:53:35:
c8:f3:f8:81:95:91:e0:10:1d:b5:0e:8a:6e:97:0b:4a:3c:19:
9f:d1:8b:6c:1c:5a:e7:79:4d:ca:4b:d7:b5:e3:5f:d4:0d:ad:
72:34:0c:e2:5e:6e:b4:12:2e:cc:98:68:5c:54:81:57:db:3f:
ce:d9:36:54:54:2a:58:17:42:2e:47:38:cb:ef:f3:b1:94:bb:
0e:4f:64:fc:46:2e:45:f6:48:d0:3d:06:c1:d6:ed:95:d1:ef:
f8:35:b0:da:70:41:6f:49:80:3f:f7:ee:b2:21:62:c2:ca:26:
9c:4b:9a:04:bb:2a:60:19:02:31:e8:c7:ef:03:fa:dd:9d:32:
fc:14:aa:12:cb:50:78:cc:4b:8d:12:d9:ce:c3:bf:94:0a:ea:
58:5d:ec:e1:4a:69:71:33:ad:15:e5:33:1a:51:f1:f7:4d:c3:
b9:ce:3d:5d:aa:3c:34:59:d4:78:01:1e:b1:50:75:a6:0f:03:
ea:1b:a0:cd:67:9e:c4:81:2b:f8:97:b7:b2:c0:37:00:02:cc:
8a:34:f3:eb:5e:6e:78:c7:0b:98:bf:91:d1:14:a5:31:6a:a3:
ac:ab:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:47:47 2025 by rpki-client