Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WjdpIsJg2TQWlaNiS_1g2lurE2Y.roa
File: WjdpIsJg2TQWlaNiS_1g2lurE2Y.roa (raw, json)
Hash identifier: HHM9HSgmdJdO7sv/UOsbtgIczUdIDPiIyMa82hgluvk=
Subject key identifier: 5A:37:69:22:C2:60:D9:34:16:95:A3:62:4B:FD:60:DA:5B:AB:13:66
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 018E4DAF1AB221F2A697056F6EAE72B87D91
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WjdpIsJg2TQWlaNiS_1g2lurE2Y.roa
Signing time: Sun 17 Mar 2024 18:31:45 +0000
ROA not before: Sun 17 Mar 2024 18:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 185.176.92.0/24 maxlen: 24
185.176.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4d:af:1a:b2:21:f2:a6:97:05:6f:6e:ae:72:b8:7d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 17 18:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a376922c260d9341695a3624bfd60da5bab1366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:19:c4:d2:b9:15:82:4c:51:50:08:53:e2:36:
7c:00:09:ab:fd:d8:90:29:2a:ad:56:7e:e8:5f:14:
c2:05:1e:c4:85:d7:1b:b3:8a:94:97:48:03:85:9a:
a4:9d:a0:3c:39:e7:1d:5e:53:f0:9e:c2:19:89:84:
78:ca:c3:9a:c3:5e:42:45:8c:05:92:9c:70:3f:b6:
47:15:72:eb:f6:26:45:89:dd:ed:10:7c:2b:3a:69:
b5:c5:e9:da:eb:c4:bf:27:d7:49:23:55:34:41:d2:
a2:1e:c9:26:8d:a3:b6:f4:10:ab:3f:7e:a0:b0:29:
39:f9:3e:60:ce:d6:1a:91:d0:5e:37:d8:8f:9b:ca:
ea:b2:c1:14:3a:02:cd:ed:86:de:ac:44:8b:c5:17:
a4:f1:95:e9:27:37:c4:7c:94:5a:f9:4b:3b:21:c3:
18:9b:f2:87:e9:42:0c:d1:0b:0c:09:7e:a0:60:1f:
65:b6:8a:93:0f:1a:18:a2:70:80:93:29:d4:cc:f8:
0c:54:32:53:9c:e3:cd:c3:37:6a:6b:82:b2:ff:b6:
38:e4:5e:3c:66:a6:72:c2:3d:73:8d:2e:52:5a:c4:
6b:39:ca:00:b8:06:88:f9:56:fd:02:8e:0b:f7:c4:
39:fb:29:61:bb:46:94:f6:1e:6b:be:cf:d9:3f:a5:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:37:69:22:C2:60:D9:34:16:95:A3:62:4B:FD:60:DA:5B:AB:13:66
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/WjdpIsJg2TQWlaNiS_1g2lurE2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.92.0/24
185.176.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:1a:90:9b:b8:ae:6d:ef:b8:a1:10:e1:4f:7a:ab:4d:f7:ff:
3a:e4:ef:97:29:a1:86:42:6b:72:95:b9:c1:cd:ca:0c:05:ee:
bb:ca:44:9e:7a:18:d4:82:41:0b:3b:67:5f:84:12:ac:43:f8:
68:fe:e0:8f:9d:1c:1f:8c:76:72:63:cf:c5:c4:c4:35:fa:8d:
a5:1c:c3:d8:73:27:f2:70:c7:19:b9:ec:d8:b9:80:1e:cb:51:
96:e8:2f:fe:f2:b4:60:2d:23:c8:a9:82:d3:c9:0a:71:58:1a:
97:28:6d:45:4a:04:ea:c1:6f:1c:54:43:68:72:f6:c1:a2:0f:
d3:e8:88:31:86:b7:7b:35:e1:f9:97:6e:57:f7:7e:98:3e:e9:
06:79:2e:c5:14:21:7a:27:f3:2f:32:3f:56:6a:e9:f4:a3:4a:
41:85:0c:63:5d:b4:c7:d5:34:db:7a:b4:91:ab:a4:b7:a9:0e:
d1:fd:d7:70:38:37:8f:b8:c7:15:0e:4b:1d:19:ac:d7:76:1d:
59:e7:3a:f2:13:56:9c:33:ea:c9:ca:a0:c7:7f:1c:05:a1:07:
15:62:0a:56:fc:b2:50:c9:6c:5d:8d:66:35:ab:77:1f:aa:3f:
69:45:9d:28:d3:18:60:dc:23:98:67:de:8e:88:52:b3:6f:d3:
a6:bf:9d:ec
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY5NrxqyIfKmlwVvbq5yuH2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjQwMzE3MTgzMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTM3NjkyMmMyNjBkOTM0MTY5NWEzNjI0YmZkNjBkYTViYWIxMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBnE0rkVgkxRUAhT4jZ8AAmr/diQ
KSqtVn7oXxTCBR7Ehdcbs4qUl0gDhZqknaA8OecdXlPwnsIZiYR4ysOaw15CRYwF
kpxwP7ZHFXLr9iZFid3tEHwrOmm1xena68S/J9dJI1U0QdKiHskmjaO29BCrP36g
sCk5+T5gztYakdBeN9iPm8rqssEUOgLN7YberESLxRek8ZXpJzfEfJRa+Us7IcMY
m/KH6UIM0QsMCX6gYB9ltoqTDxoYonCAkynUzPgMVDJTnOPNwzdqa4Ky/7Y45F48
ZqZywj1zjS5SWsRrOcoAuAaI+Vb9Ao4L98Q5+ylhu0aU9h5rvs/ZP6W1GQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFo3aSLCYNk0FpWjYkv9YNpbqxNmMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvV2pkcElzSmcyVFFXbGFOaVNfMWcybHVyRTJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubBcAwQA
ubBeMA0GCSqGSIb3DQEBCwUAA4IBAQCiGpCbuK5t77ihEOFPeqtN9/865O+XKaGG
QmtylbnBzcoMBe67ykSeehjUgkELO2dfhBKsQ/ho/uCPnRwfjHZyY8/FxMQ1+o2l
HMPYcyfycMcZuezYuYAey1GW6C/+8rRgLSPIqYLTyQpxWBqXKG1FSgTqwW8cVENo
cvbBog/T6Igxhrd7NeH5l25X936YPukGeS7FFCF6J/MvMj9Waun0o0pBhQxjXbTH
1TTberSRq6S3qQ7R/ddwODePuMcVDksdGazXdh1Z5zryE1acM+rJyqDHfxwFoQcV
YgpW/LJQyWxdjWY1q3cfqj9pRZ0o0xhg3COYZ96OiFKzb9Omv53s
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:23 2025 by rpki-client