Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/wCDrJf6K3N6SQxouZVxxkGAndwU.roa
File: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (raw, json)
Hash identifier: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=
Subject key identifier: C0:20:EB:25:FE:8A:DC:DE:92:43:1A:2E:65:5C:71:90:60:27:77:05
Certificate issuer: /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial: 01942748118153C4EC36FA27A5FDC94E57FD
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/wCDrJf6K3N6SQxouZVxxkGAndwU.roa
Signing time: Thu 02 Jan 2025 13:50:21 +0000
ROA not before: Thu 02 Jan 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210287
IP address blocks: 185.160.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:11:81:53:c4:ec:36:fa:27:a5:fd:c9:4e:57:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c020eb25fe8adcde92431a2e655c719060277705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:39:ba:65:00:c1:3f:e7:28:75:c7:bc:f8:
be:b1:c4:95:75:e5:7b:61:6c:d1:d1:99:f9:8d:11:
41:cc:3d:b3:4a:f6:f8:af:e7:d5:26:b4:65:57:b3:
df:46:6c:eb:22:37:d2:b9:d3:6e:ab:dd:98:cb:56:
8c:36:11:b4:59:9b:53:9c:cb:8e:ef:9d:f4:23:ab:
33:97:ed:26:5d:62:d3:bb:90:e4:f5:84:d7:a3:18:
fb:cb:2a:52:0f:47:b1:bb:3c:d2:fb:a4:fa:b7:96:
12:6f:d1:1f:8d:25:38:99:73:ab:50:42:34:96:70:
7f:ee:93:23:8b:15:23:62:06:20:fd:5a:f0:37:7d:
b4:8a:a5:20:f6:ba:28:20:96:81:9c:6b:c5:81:bc:
9b:c2:04:54:89:5a:44:0c:27:7f:e2:59:8a:f3:31:
24:cb:f2:62:32:93:dc:e8:82:ea:19:c4:f5:33:2e:
e9:f6:3e:d9:04:17:4b:cc:83:bb:9f:64:83:87:33:
82:0e:35:01:e0:7b:a7:22:28:18:d7:38:10:94:d9:
e9:67:4b:0d:84:6a:06:76:67:b2:71:7b:49:98:f3:
ad:da:d8:34:15:8b:7b:ab:bf:fd:f6:7d:4a:08:3f:
d0:85:65:dd:f2:e1:fa:6c:28:3c:15:70:d9:23:a0:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:20:EB:25:FE:8A:DC:DE:92:43:1A:2E:65:5C:71:90:60:27:77:05
X509v3 Authority Key Identifier:
keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/wCDrJf6K3N6SQxouZVxxkGAndwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.48.0/22
Signature Algorithm: sha256WithRSAEncryption
48:73:ed:d9:9d:b7:6e:7e:68:a1:60:93:5f:c7:42:87:69:54:
03:6c:25:92:1f:5d:77:17:13:bb:4c:e8:12:32:88:3d:cc:53:
a9:74:ba:e2:2b:e5:73:4f:87:c6:95:62:31:31:d6:67:43:a8:
14:f5:cb:68:b2:76:38:1c:48:78:56:88:7b:80:9b:d6:4a:03:
ca:85:95:68:db:c1:48:09:10:b4:3b:68:9a:bf:35:c2:a3:23:
8b:ea:b4:3a:fa:b9:a2:b2:81:1f:fc:35:b5:74:89:ae:ef:e8:
ef:09:c3:af:aa:4f:4d:6a:ae:bd:1b:b6:06:5c:57:fc:ab:fe:
f5:83:38:32:df:eb:5b:1c:33:e3:24:8b:f0:5a:b0:a8:74:0a:
eb:80:db:c5:eb:c2:2a:a5:70:5c:2f:58:db:49:2c:f8:0c:02:
8e:67:8e:35:95:b0:42:cd:9c:b5:2f:4b:05:cc:16:ed:b9:d7:
3a:7f:2a:ee:00:98:1f:e3:c9:3e:2a:a0:e4:b3:71:47:83:ea:
5a:f8:b7:9f:c0:57:40:a5:02:70:04:d5:57:a6:cf:70:80:46:
05:49:46:ee:c7:1c:42:28:d7:2b:82:66:03:13:db:08:78:22:
6c:f9:bd:dd:49:b1:f0:72:0e:cb:82:cc:f7:c9:fb:24:a6:7d:
b0:49:04:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSBGBU8TsNvonpf3JTlf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzczZWIzZDMwNzk0ZDIyZDc1Y2Q4NzJiOTFhM2JhODQ4
ODQyZDcwHhcNMjUwMTAyMTM1MDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDIwZWIyNWZlOGFkY2RlOTI0MzFhMmU2NTVjNzE5MDYwMjc3NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58I5umUAwT/nKHXHvPi+scSVdeV7
YWzR0Zn5jRFBzD2zSvb4r+fVJrRlV7PfRmzrIjfSudNuq92Yy1aMNhG0WZtTnMuO
7530I6szl+0mXWLTu5Dk9YTXoxj7yypSD0exuzzS+6T6t5YSb9EfjSU4mXOrUEI0
lnB/7pMjixUjYgYg/VrwN320iqUg9rooIJaBnGvFgbybwgRUiVpEDCd/4lmK8zEk
y/JiMpPc6ILqGcT1My7p9j7ZBBdLzIO7n2SDhzOCDjUB4HunIigY1zgQlNnpZ0sN
hGoGdmeycXtJmPOt2tg0FYt7q7/99n1KCD/QhWXd8uH6bCg8FXDZI6DwFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAg6yX+itzekkMaLmVccZBgJ3cFMB8GA1UdIwQY
MBaAFG93PrPTB5TSLXXNhyuRo7qEiELXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQt
NmEwYmFlYjIzMzZlLzEvd0NEckpmNkszTjZTUXhvdVpWeHhrR0FuZHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8yNGQ3OWQtMTc2Ni00MDQ1LTlkMjQtNmEwYmFlYjIzMzZl
LzEvYjNjLXM5TUhsTkl0ZGMySEs1R2p1b1NJUXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaAwMA0G
CSqGSIb3DQEBCwUAA4IBAQBIc+3ZnbdufmihYJNfx0KHaVQDbCWSH113FxO7TOgS
Mog9zFOpdLriK+VzT4fGlWIxMdZnQ6gU9ctosnY4HEh4Voh7gJvWSgPKhZVo28FI
CRC0O2iavzXCoyOL6rQ6+rmisoEf/DW1dImu7+jvCcOvqk9Naq69G7YGXFf8q/71
gzgy3+tbHDPjJIvwWrCodArrgNvF68IqpXBcL1jbSSz4DAKOZ441lbBCzZy1L0sF
zBbtudc6fyruAJgf48k+KqDks3FHg+pa+LefwFdApQJwBNVXps9wgEYFSUbuxxxC
KNcrgmYDE9sIeCJs+b3dSbHwcg7Lgsz3yfskpn2wSQSB
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:43 2025 by rpki-client