Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/WX7sPJ6RhH3U5xnN-el0l4C0log.roa
File: WX7sPJ6RhH3U5xnN-el0l4C0log.roa (raw, json)
Hash identifier: zkMfoRomzAgbM+6nX6pmWw/o4OyOrZ/9refp1cS1ytA=
Subject key identifier: 59:7E:EC:3C:9E:91:84:7D:D4:E7:19:CD:F9:E9:74:97:80:B4:96:88
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0194228DEAD54B778421AE0BA15371502A92
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/WX7sPJ6RhH3U5xnN-el0l4C0log.roa
Signing time: Wed 01 Jan 2025 15:48:33 +0000
ROA not before: Wed 01 Jan 2025 15:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 268581
IP address blocks: 185.194.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ea:d5:4b:77:84:21:ae:0b:a1:53:71:50:2a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=597eec3c9e91847dd4e719cdf9e9749780b49688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:4d:eb:2e:30:6c:30:c2:6f:8b:35:50:14:
71:33:f2:e6:d1:fa:7b:1e:dc:30:53:73:20:f5:3b:
3a:4d:ae:ef:2d:26:90:30:09:f5:73:77:dd:1a:91:
ab:10:77:b6:df:ca:2d:54:94:d9:8c:98:52:a6:f7:
6e:6e:6f:11:27:33:9a:7d:d1:bf:eb:9c:8e:1f:7e:
ec:e7:f0:22:84:ff:a1:46:fe:b1:bf:1e:a7:0c:93:
b8:75:38:3f:5f:12:82:04:e9:91:f2:38:fe:d9:84:
6a:3f:d4:d9:bb:b7:28:de:73:c4:c6:28:b4:1c:b2:
60:e9:74:5f:98:fc:cf:e3:a7:52:c9:04:33:45:7a:
3c:73:b2:76:ae:aa:83:fa:83:70:f6:1c:3f:80:5c:
98:6c:95:2b:47:1a:dc:b6:d5:55:22:30:13:d0:56:
4b:6c:73:5e:6e:ff:7a:c9:fe:9f:a1:96:62:93:90:
df:b8:8e:26:3d:62:e6:72:b2:8f:09:54:6d:7f:7b:
fb:21:b2:d9:69:06:07:9a:dc:2a:80:1c:12:1a:83:
18:c3:d0:00:5f:51:be:c5:18:28:cc:44:b6:3e:c8:
74:8f:04:60:f9:46:df:db:a1:c5:22:2c:a5:df:84:
ad:6a:bf:63:7c:80:64:0c:44:b6:4f:48:43:6b:46:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7E:EC:3C:9E:91:84:7D:D4:E7:19:CD:F9:E9:74:97:80:B4:96:88
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/WX7sPJ6RhH3U5xnN-el0l4C0log.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
99:4a:9e:12:7c:e0:07:f2:9e:ea:fa:52:19:58:a6:42:74:cd:
13:09:d2:4e:fb:7a:9c:a4:bd:01:15:8c:2e:78:f4:58:08:35:
3a:25:d1:74:9d:c2:15:05:c3:c1:9e:4e:79:90:56:f7:86:38:
fc:0d:f8:e0:46:6e:47:7f:b7:fd:c9:ce:b9:ff:9b:0f:71:ec:
09:d2:66:23:51:08:50:d5:67:e3:7b:c7:5b:b7:d8:0a:2e:9c:
25:12:90:eb:f2:bb:d4:ce:63:59:9a:17:e3:7a:1d:a4:2f:a7:
73:6f:6b:e1:d2:cc:d0:a8:18:31:83:1b:dc:ab:87:28:55:2d:
ce:57:61:51:ad:32:da:22:3c:34:bf:a4:3e:53:9b:d8:99:44:
7a:86:dd:dc:e8:14:ca:20:96:28:9d:25:92:e7:f9:2f:5c:43:
61:91:e6:3f:e5:ee:c1:df:f2:88:c2:7f:18:cd:75:b6:1f:b5:
2d:e9:23:d3:cd:59:c2:f5:00:55:12:2d:c2:ba:03:14:3c:ae:
02:b3:0b:38:68:c1:d6:39:53:2c:45:14:31:21:83:4e:40:16:
19:89:21:08:9e:c4:d3:27:6e:f2:0a:25:4b:5a:a9:0b:5f:69:
4d:cb:ea:10:c0:05:11:fc:82:cd:a5:b6:eb:be:36:77:57:e0:
bd:23:3d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:14 2025 by rpki-client