Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/WtHA_6KiEtFwUka_WBiJc_UrMr8.roa
File: WtHA_6KiEtFwUka_WBiJc_UrMr8.roa (raw, json)
Hash identifier: pmuZiN4ndCAaueEVejpylDoSKHFdSUAyl7M33gHXdNQ=
Subject key identifier: 5A:D1:C0:FF:A2:A2:12:D1:70:52:46:BF:58:18:89:73:F5:2B:32:BF
Certificate issuer: /CN=19ee43190a8d478e757bd25b2ceebbae3e7379e8
Certificate serial: 0132E1B4
Authority key identifier: 19:EE:43:19:0A:8D:47:8E:75:7B:D2:5B:2C:EE:BB:AE:3E:73:79:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5DGQqNR451e9JbLO67rj5zeeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/WtHA_6KiEtFwUka_WBiJc_UrMr8.roa
Signing time: Sat 01 Jan 2022 09:54:41 +0000
ROA not before: Sat 01 Jan 2022 09:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35619
IP address blocks: 185.248.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20111796 (0x132e1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee43190a8d478e757bd25b2ceebbae3e7379e8
Validity
Not Before: Jan 1 09:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ad1c0ffa2a212d1705246bf58188973f52b32bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:52:b7:55:0d:09:7c:cf:66:f2:8c:83:a3:
3c:4d:57:cb:95:f6:f7:25:b5:03:f0:a4:41:1e:28:
68:86:10:dd:82:8d:59:4e:fd:ba:d5:71:94:03:17:
78:50:4e:f1:6b:b9:c6:bc:f2:83:82:1c:54:1b:a4:
3a:43:9b:8d:f7:d2:53:fc:64:64:ec:71:34:58:41:
f4:cc:0b:a8:60:b4:4b:d2:88:11:7b:14:8a:6f:18:
6b:e9:4c:f9:dc:71:c3:00:a6:b1:88:53:27:d7:07:
f9:26:e5:dc:a2:be:7e:32:e3:cc:68:14:b6:10:54:
2c:0d:aa:93:dd:ca:dd:a0:27:dd:b2:b0:d1:9c:29:
9a:5e:06:a8:fa:99:dc:44:5a:c2:96:1a:d7:ca:ab:
9f:39:05:3b:04:b5:6d:29:1a:6b:af:a4:3b:61:ee:
2c:34:ef:7e:92:4b:a0:94:4a:63:fb:7b:8c:23:41:
5e:2e:02:fb:18:a3:64:2b:f0:38:8f:30:dc:19:65:
1a:02:ab:bf:c6:e6:a7:16:91:40:8c:1f:72:c9:62:
93:86:eb:a0:f4:f5:46:c0:00:18:92:e6:c8:73:63:
e2:75:c5:fa:c8:6f:4d:ae:77:74:2a:5e:e8:90:26:
de:13:9a:61:a0:45:21:2f:5d:27:2a:f3:5f:73:8a:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:C0:FF:A2:A2:12:D1:70:52:46:BF:58:18:89:73:F5:2B:32:BF
X509v3 Authority Key Identifier:
keyid:19:EE:43:19:0A:8D:47:8E:75:7B:D2:5B:2C:EE:BB:AE:3E:73:79:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5DGQqNR451e9JbLO67rj5zeeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/WtHA_6KiEtFwUka_WBiJc_UrMr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f7f1a-b37e-403c-80c1-909f30894a59/1/Ge5DGQqNR451e9JbLO67rj5zeeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.132.0/24
Signature Algorithm: sha256WithRSAEncryption
23:83:84:98:a2:12:b8:41:23:03:e0:61:34:36:a2:9b:bd:8b:
17:a4:cf:05:49:9d:18:de:65:7d:b2:a8:b5:26:a2:67:20:6c:
9f:f2:f4:e7:f0:aa:b7:b1:3a:48:6d:b8:d1:6e:2e:36:e4:68:
32:ad:5e:e4:35:70:cc:ac:67:af:de:6d:37:46:50:9d:d1:1a:
81:d8:c6:12:c1:e0:3e:e7:1c:ed:9c:5a:7e:4e:99:bc:b8:af:
9a:75:b4:c4:c1:10:e0:0c:ca:ed:fd:a6:ea:24:d4:a1:3c:48:
3e:d8:54:cd:df:5d:33:8b:d6:72:e0:cf:31:37:25:66:d1:f7:
4c:fd:2c:6b:ed:d0:82:61:40:e1:f0:e7:29:c4:5b:1b:bc:b1:
e8:ac:41:41:3a:ce:09:80:f0:4b:5d:f3:ac:f1:3f:07:38:68:
a8:e6:d8:df:d4:d3:fa:87:93:b1:94:5c:15:9c:5f:5b:4b:53:
e6:eb:0f:9f:fd:79:70:96:b1:15:39:32:c9:6c:66:6a:e8:cd:
18:0a:f4:89:26:ea:ee:4e:86:9f:9e:86:3f:4e:4d:cc:49:9c:
51:a7:df:86:67:4f:c0:a8:04:ce:5d:83:71:3a:de:bb:8d:38:
37:95:53:ee:75:bb:4a:11:5a:9c:49:09:23:8f:c5:c1:1e:d8:
96:07:24:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:56:58 2025 by rpki-client