Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/WufKLm_VUBSOVUjA2N7mSbnC5yo.roa
File: WufKLm_VUBSOVUjA2N7mSbnC5yo.roa (raw, json)
Hash identifier: ZMQ2JSceB3qiiNWG8Og7oPp2n6BUB8rjHDG+QHM/0fA=
Subject key identifier: 5A:E7:CA:2E:6F:D5:50:14:8E:55:48:C0:D8:DE:E6:49:B9:C2:E7:2A
Certificate issuer: /CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Certificate serial: 019426D912FF7C314D13E13CBC90F71B0A33
Authority key identifier: CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/WufKLm_VUBSOVUjA2N7mSbnC5yo.roa
Signing time: Thu 02 Jan 2025 11:49:07 +0000
ROA not before: Thu 02 Jan 2025 11:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204529
IP address blocks: 185.114.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:12:ff:7c:31:4d:13:e1:3c:bc:90:f7:1b:0a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca5e3ec5a90623ccb97784d3cef24212a31cbaf1
Validity
Not Before: Jan 2 11:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ae7ca2e6fd550148e5548c0d8dee649b9c2e72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:a4:a9:64:a3:b5:b6:43:f1:77:a0:ca:33:
5f:e6:d4:93:82:09:4b:3e:cf:16:96:be:83:78:b4:
ee:2f:43:e1:7a:22:63:28:f7:f2:aa:7b:63:b1:33:
12:84:d9:06:65:09:dd:20:a8:8b:c4:ee:a7:2a:64:
7a:d1:a5:4e:ad:86:9a:17:58:37:88:a1:42:5c:18:
71:c3:2d:46:5f:0f:35:60:cc:02:fc:26:0d:6f:fd:
48:07:94:2c:10:7c:71:b7:f0:fe:94:1f:69:22:40:
1d:12:14:97:49:95:d9:40:a9:fe:b0:46:d0:47:6a:
6f:23:6d:64:1e:f5:e4:e9:ce:80:82:53:83:16:34:
90:70:3a:dc:d6:8e:8b:a1:ff:8f:d3:b0:c8:c6:00:
9c:1f:19:3d:52:c8:c2:02:f6:a9:8a:bb:dc:f3:49:
83:ff:05:b7:e8:3d:bc:c0:32:3c:6e:d9:c9:b5:bc:
d6:2c:97:60:52:21:e5:a6:04:a8:5a:a6:7a:ac:bd:
11:72:c6:3c:33:2d:d2:a2:04:cf:33:ea:ef:0d:43:
3c:0e:74:ab:eb:64:c3:a2:93:8a:d6:45:7b:7a:de:
fa:2f:e2:4c:9f:63:12:3b:22:eb:c3:b8:7c:85:86:
d4:8e:fe:02:ba:15:d7:9e:95:10:1b:61:ec:ae:96:
2f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E7:CA:2E:6F:D5:50:14:8E:55:48:C0:D8:DE:E6:49:B9:C2:E7:2A
X509v3 Authority Key Identifier:
keyid:CA:5E:3E:C5:A9:06:23:CC:B9:77:84:D3:CE:F2:42:12:A3:1C:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yl4-xakGI8y5d4TTzvJCEqMcuvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/WufKLm_VUBSOVUjA2N7mSbnC5yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0f92bd-35d0-4570-b5d3-6f31f6f7f16b/1/yl4-xakGI8y5d4TTzvJCEqMcuvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b7:15:0a:ba:52:28:ef:dd:5b:33:79:7b:55:ce:8a:56:4b:
1a:f1:37:23:32:26:d4:ad:37:d3:63:8e:1b:df:7d:78:91:df:
e3:96:ce:95:d5:83:4e:28:71:a9:07:70:77:9b:0c:61:07:6f:
ba:3d:16:f9:39:f0:26:0b:c7:c4:66:b0:d6:cd:e2:cc:98:28:
e2:ce:ac:bc:63:2d:34:89:d6:5f:52:dd:13:79:1a:98:a1:1b:
0c:79:a5:f2:c2:d6:ea:68:2d:d1:79:87:38:43:27:c4:22:b4:
50:3c:be:01:26:47:4b:c8:72:c4:47:8c:b0:b2:88:78:80:7f:
7d:f3:8c:9d:66:15:05:e4:b2:07:d2:3d:34:4d:11:72:40:37:
35:7c:29:0d:27:94:38:48:12:20:cb:da:92:b9:e9:70:e7:ea:
aa:c7:9f:2b:44:5a:4d:09:83:23:32:fe:08:13:49:f2:5a:bd:
71:e5:ba:16:96:69:d6:ec:eb:c9:6c:01:fe:f5:af:1a:57:b3:
a2:4c:0d:80:f7:06:80:43:f1:65:64:05:02:5e:34:86:73:bd:
44:d9:5b:99:d6:f2:a4:e4:e1:d8:cb:9c:41:c6:73:e2:3b:91:
a8:f5:ea:f0:9a:de:0e:73:c1:d7:e7:8f:c4:06:bc:5c:bf:7c:
4a:b3:6b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:03:44 2025 by rpki-client