Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/WMM-Jj0p6VWzGlo6msh5tpjK74c.roa
File: WMM-Jj0p6VWzGlo6msh5tpjK74c.roa (raw, json)
Hash identifier: /4WO/iijr2ysoJfrqLnn3dB9+scGttOptVRk8eNo8H4=
Subject key identifier: 58:C3:3E:26:3D:29:E9:55:B3:1A:5A:3A:9A:C8:79:B6:98:CA:EF:87
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 01942745CDA601C335600EBDD13AC94C0CD9
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/WMM-Jj0p6VWzGlo6msh5tpjK74c.roa
Signing time: Thu 02 Jan 2025 13:47:53 +0000
ROA not before: Thu 02 Jan 2025 13:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48761
IP address blocks: 185.172.48.0/24 maxlen: 24
185.172.49.0/24 maxlen: 24
2a03:2100:45::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:cd:a6:01:c3:35:60:0e:bd:d1:3a:c9:4c:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 2 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58c33e263d29e955b31a5a3a9ac879b698caef87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:75:0b:28:d2:54:d4:84:ad:0e:d0:78:f7:
ae:d3:c3:0c:9c:e3:e0:5a:c2:80:91:0c:1d:b7:4d:
f2:84:ca:cb:5d:4e:c7:6b:b8:fc:18:d3:d5:33:ca:
40:d2:eb:b1:48:a0:36:4e:0c:48:fa:7a:91:90:56:
7e:e3:86:47:e7:6e:b6:df:e7:f6:1e:3e:d7:51:49:
58:71:ce:95:89:bd:c1:b9:4f:4c:3c:db:6e:5c:30:
73:7f:2d:a9:11:40:53:8f:cf:e7:b1:11:5a:18:6c:
72:32:f3:47:f3:87:70:45:11:7b:6a:92:f5:1a:1f:
9b:02:30:44:a6:57:fe:03:38:24:50:d6:e9:8c:b0:
a7:24:81:d1:59:87:fa:50:91:ca:ce:1d:21:8a:e4:
6c:d0:3c:09:e9:61:e9:d6:8a:cc:83:b0:01:ff:da:
d8:5f:62:13:74:e9:e5:67:22:6e:78:50:31:ae:e6:
f8:aa:16:9d:e1:2b:55:36:3c:2b:84:9f:10:ec:cf:
4e:08:66:7b:9e:11:b4:ef:2a:79:29:90:c7:17:48:
50:c6:ed:1f:74:5a:fb:c5:f9:84:37:b9:eb:86:5d:
b3:91:42:b7:4e:a9:1f:20:dd:c8:fa:db:93:98:5d:
81:80:84:5b:77:39:2c:7e:d4:11:2f:49:ca:b2:e3:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:3E:26:3D:29:E9:55:B3:1A:5A:3A:9A:C8:79:B6:98:CA:EF:87
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/WMM-Jj0p6VWzGlo6msh5tpjK74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.48.0/23
IPv6:
2a03:2100:45::/48
Signature Algorithm: sha256WithRSAEncryption
5c:52:30:58:db:05:20:39:64:65:4d:17:b6:91:e4:e4:c9:b4:
7d:3a:e6:39:de:6a:9d:17:6b:40:8e:fc:4b:91:6c:d9:a4:dd:
89:20:5a:71:14:fc:e9:0c:85:7e:3f:08:70:37:6e:da:21:c5:
db:5a:ec:d3:61:e0:18:a4:c1:e6:fc:03:f4:79:e2:b3:9d:11:
6d:bd:fb:1c:2e:96:4f:2f:b8:32:01:c0:66:fd:b3:99:c4:7c:
c9:8e:f2:42:ff:66:45:68:ca:6d:2a:01:e6:19:ec:26:d3:8b:
a8:9c:3b:e7:f9:89:a4:91:be:a7:f1:fa:b0:d2:5f:16:06:67:
be:eb:42:53:8f:14:e8:10:aa:2e:1b:49:58:56:75:fd:2d:2d:
b0:95:01:f4:1e:59:0b:55:60:52:ee:d2:a8:48:de:87:30:b6:
97:65:e7:92:5c:b7:90:39:fe:d3:6f:2b:6c:39:88:06:b5:a3:
23:6c:1e:1f:ea:a5:2f:08:43:13:09:0d:cb:bb:5c:65:8b:16:
4c:e5:59:97:ed:5c:51:ff:0a:04:64:78:ff:6f:8b:77:ab:1c:
ac:7f:77:ab:4e:bc:0a:45:9b:17:93:e2:b0:5a:14:1c:ee:74:
67:80:14:bf:43:eb:b0:85:5f:8c:d4:b3:c1:4d:f6:69:36:b5:
75:02:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:32:32 2025 by rpki-client