Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa
File: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (raw, json)
Hash identifier: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=
Subject key identifier: C2:E5:8C:D0:1A:9F:9F:60:CE:4D:70:10:7D:45:2F:28:18:9D:5E:9A
Certificate issuer: /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial: 01942067F890AA8E34CEB68F141DA6DF72DE
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa
Signing time: Wed 01 Jan 2025 05:47:52 +0000
ROA not before: Wed 01 Jan 2025 05:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 185.51.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f8:90:aa:8e:34:ce:b6:8f:14:1d:a6:df:72:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Validity
Not Before: Jan 1 05:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e58cd01a9f9f60ce4d70107d452f28189d5e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:70:8c:0e:b0:c3:e3:03:7f:de:ac:f3:bd:d6:
45:b3:6b:88:1f:a2:fd:38:b3:3b:37:62:9e:ec:fa:
2e:5d:04:5a:2f:63:9f:2e:16:d3:45:af:59:22:a0:
20:2a:b8:18:19:4d:5c:dd:4b:46:07:d5:8b:86:a2:
97:dd:6a:f1:de:5c:30:d2:5e:1a:65:23:e5:84:62:
f5:f6:7f:e3:53:f9:00:bb:f0:cb:47:5d:05:72:05:
e1:34:8b:f2:6d:0b:8c:85:93:81:4e:63:ea:d3:8d:
76:9e:f2:07:e4:6c:15:5e:15:87:ef:16:7e:c9:b6:
ac:e0:4f:52:e1:b5:95:4c:66:b1:c8:f1:f6:e5:44:
84:db:a7:1f:95:43:82:36:5f:ca:35:a9:5c:38:26:
f7:1d:a1:bf:7a:1c:99:1f:35:53:2e:83:d1:6f:52:
95:1f:67:57:4c:46:ab:6d:f5:da:e1:42:bd:1e:5e:
5b:22:3a:4f:5d:7e:3c:25:ca:65:d6:67:a7:df:8d:
65:e9:70:9c:00:67:98:a2:22:2c:a9:78:38:ea:a0:
20:f0:aa:cf:c2:4c:7f:04:46:5f:73:a6:ae:40:5c:
90:c1:2a:33:ac:3e:db:f4:c4:ae:a6:61:db:eb:5c:
6b:25:8e:02:9c:19:a0:f1:6f:2c:60:a4:7e:b9:ec:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:8C:D0:1A:9F:9F:60:CE:4D:70:10:7D:45:2F:28:18:9D:5E:9A
X509v3 Authority Key Identifier:
keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.51.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ad:3c:23:41:4a:09:dc:a1:c4:2b:0b:ed:43:69:ce:9d:24:
e6:da:87:b9:6d:0f:5a:33:17:3d:0c:2b:70:8e:0a:34:51:69:
dd:7d:cc:59:96:77:3f:b3:40:f1:30:42:d2:c6:c8:18:66:3a:
42:8c:be:77:73:1a:e6:bd:ec:32:41:fd:ac:0d:d9:97:24:6d:
42:76:12:a8:73:90:a3:b9:a6:3a:ab:fb:64:48:c9:3e:89:8f:
cc:f2:c9:27:73:c1:7c:45:0a:90:e0:38:72:f1:c0:29:4e:60:
93:31:96:b9:53:af:21:d3:97:26:6a:d1:cc:1c:32:36:a8:7c:
10:54:2d:cd:4d:85:3d:3e:e1:7d:b5:fa:6b:bf:ba:1d:ef:a1:
62:61:e2:64:97:89:51:3a:b4:9a:e3:3a:f3:1f:8a:b7:2e:8c:
35:4f:a2:d1:0a:08:57:f1:b4:0d:68:bd:02:06:0c:22:d1:6c:
58:a6:f4:c3:eb:ac:0a:0b:1c:e1:d3:e2:84:ce:54:58:f5:c3:
d1:15:a6:3a:16:d1:21:a2:c7:e9:7e:3b:b6:9f:01:df:7b:89:
ba:25:47:43:42:b5:21:4e:cb:44:28:b2:3f:48:3f:0f:7c:1b:
fa:fd:56:09:02:03:3b:de:5f:11:4e:c1:53:07:b6:e0:05:f1:
ef:9b:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:49 2025 by rpki-client