Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/wEnGyKeJL3bLWqEmy7caM3f-kgM.roa
File: wEnGyKeJL3bLWqEmy7caM3f-kgM.roa (raw, json)
Hash identifier: zsCGyJ2aoKw5IERACWEJwWMryp1O46pyZD9T1GY1JPs=
Subject key identifier: C0:49:C6:C8:A7:89:2F:76:CB:5A:A1:26:CB:B7:1A:33:77:FE:92:03
Certificate issuer: /CN=e97319dad35cc9d5aeb6fd7bb5d8c9b864b17da9
Certificate serial: 11668BA5
Authority key identifier: E9:73:19:DA:D3:5C:C9:D5:AE:B6:FD:7B:B5:D8:C9:B8:64:B1:7D:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XMZ2tNcydWutv17tdjJuGSxfak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/wEnGyKeJL3bLWqEmy7caM3f-kgM.roa
Signing time: Sat 01 Jan 2022 03:55:34 +0000
ROA not before: Sat 01 Jan 2022 03:55:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9022
IP address blocks: 185.160.204.0/22 maxlen: 22
2a07:bfc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 291933093 (0x11668ba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97319dad35cc9d5aeb6fd7bb5d8c9b864b17da9
Validity
Not Before: Jan 1 03:55:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c049c6c8a7892f76cb5aa126cbb71a3377fe9203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:e7:e6:be:2e:a6:f1:b3:0b:a3:df:05:c8:
25:98:b4:43:f9:13:92:0f:91:13:f8:1d:6b:ac:6b:
6b:d1:b4:f8:08:69:78:1f:de:fc:e8:32:21:d6:b3:
f8:e4:1c:61:d4:6e:57:e3:ec:0a:68:21:55:f7:0c:
41:e4:19:0e:a3:a7:85:dd:b4:28:b1:8d:0c:f4:35:
57:c9:f9:15:12:d1:7f:55:41:2e:57:60:9b:7a:fa:
38:92:20:3b:27:68:2c:5b:fc:e9:3b:72:f2:b4:b7:
15:b9:c1:2b:5d:2c:36:c2:41:19:f0:76:21:95:0c:
9d:a4:f5:f6:fb:92:6e:e3:a3:85:92:13:2f:7b:a8:
c0:de:ac:2f:19:c1:7b:f9:5a:84:e4:ad:96:7f:d6:
e6:02:e7:bb:4a:e5:72:a9:89:13:1f:14:12:97:74:
cd:6c:6e:66:ae:e4:b1:0d:05:a2:32:51:ca:9f:04:
16:b8:05:36:38:13:ce:7c:f4:70:17:b6:3b:e1:f1:
c5:8d:e2:04:b6:cc:ff:d7:69:b7:d8:dd:b0:bd:a7:
ea:ba:7a:84:30:a7:8b:bd:45:24:3a:4a:af:59:42:
63:1b:06:de:8e:b1:b4:41:aa:5c:6d:3e:5b:5d:52:
57:35:59:64:84:74:71:fb:f8:cf:18:16:d1:8b:23:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:49:C6:C8:A7:89:2F:76:CB:5A:A1:26:CB:B7:1A:33:77:FE:92:03
X509v3 Authority Key Identifier:
keyid:E9:73:19:DA:D3:5C:C9:D5:AE:B6:FD:7B:B5:D8:C9:B8:64:B1:7D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XMZ2tNcydWutv17tdjJuGSxfak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/wEnGyKeJL3bLWqEmy7caM3f-kgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/6XMZ2tNcydWutv17tdjJuGSxfak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.204.0/22
IPv6:
2a07:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
43:b3:03:e0:29:dd:3f:65:11:9c:2b:77:d4:7b:d9:4c:84:67:
62:b9:9d:c2:17:ed:c8:21:13:33:39:cc:ef:cd:ee:7f:de:cf:
fb:fd:f2:da:73:8a:45:ce:b2:49:b5:37:64:41:1b:e6:ba:11:
73:64:87:89:b2:a3:ea:01:b1:07:e0:bc:74:be:b6:62:0d:89:
71:fb:2d:82:ad:26:1d:03:2d:0a:7c:8a:56:60:ec:10:23:a3:
dd:5f:78:76:1b:9a:93:b7:ef:1c:99:31:ea:4a:1e:d7:1d:1f:
4e:d5:e9:3a:3a:fd:88:f8:6e:1e:07:b7:07:04:25:2f:65:d7:
df:d6:e6:ed:92:89:d9:70:03:cf:ce:1b:3b:b6:d0:9e:f6:3a:
de:67:d7:9c:63:df:76:7c:33:04:8e:ed:0d:3c:f8:3f:66:bc:
04:af:29:cc:02:37:f3:de:8b:70:47:8d:06:97:cc:08:a0:5f:
70:59:4f:f3:85:fd:0c:be:66:92:48:98:e9:b4:52:95:c0:e9:
56:0b:53:ea:81:cb:8b:a5:e3:6a:5c:b7:62:1c:62:ff:d0:ca:
80:6e:25:6b:cc:0f:49:38:2e:e5:06:01:66:4d:09:3b:a6:37:
09:30:5f:e6:2e:74:12:f1:6a:80:ae:7b:57:63:53:4c:e1:26:
10:08:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:18:58 2025 by rpki-client