Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/wPjZrQ9COX1Hxm9I4_6e3YDFTTk.roa
File: wPjZrQ9COX1Hxm9I4_6e3YDFTTk.roa (raw, json)
Hash identifier: kmnUjddDA93qa0ma/ycdkwe6YDzl/9P9byNUMXgRo/I=
Subject key identifier: C0:F8:D9:AD:0F:42:39:7D:47:C6:6F:48:E3:FE:9E:DD:80:C5:4D:39
Certificate issuer: /CN=ddf4872dc2891fba3953dde1f4b744a45dd53d2c
Certificate serial: 0FDEE795
Authority key identifier: DD:F4:87:2D:C2:89:1F:BA:39:53:DD:E1:F4:B7:44:A4:5D:D5:3D:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fSHLcKJH7o5U93h9LdEpF3VPSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/wPjZrQ9COX1Hxm9I4_6e3YDFTTk.roa
Signing time: Sat 01 Jan 2022 13:01:44 +0000
ROA not before: Sat 01 Jan 2022 13:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60350
IP address blocks: 185.183.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266266517 (0xfdee795)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf4872dc2891fba3953dde1f4b744a45dd53d2c
Validity
Not Before: Jan 1 13:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0f8d9ad0f42397d47c66f48e3fe9edd80c54d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:68:b3:80:a2:50:3d:11:56:b1:01:1a:1d:
b5:cb:7e:11:5f:3f:e4:50:53:10:b9:f8:7e:03:5f:
b5:dc:54:3b:ee:0d:3f:3b:bc:2a:12:91:fb:2d:61:
5d:d2:7c:8b:52:6f:bb:39:71:d4:55:20:47:e1:62:
ed:08:30:db:a6:bb:1f:d6:ff:e9:1d:df:fc:3b:d3:
36:35:e3:c3:f2:de:39:bd:29:b1:5e:4b:24:33:6c:
bf:57:54:1f:7e:58:55:a7:67:ac:9e:a4:bf:23:de:
f4:a8:5d:7b:3b:d1:73:a2:7b:c9:0d:02:b1:c9:76:
37:1c:c7:12:c0:83:86:92:9b:97:32:3f:52:5c:9e:
db:b7:50:e6:eb:3b:7e:aa:ea:20:25:a3:93:70:d7:
aa:86:c9:f0:44:1a:77:f6:2c:f3:58:bc:80:55:cf:
bf:ba:05:c3:4c:a4:a4:83:28:cb:4b:41:48:01:c2:
be:e3:5d:95:ba:70:a2:c7:36:e5:5a:e2:6c:74:14:
0c:42:ec:18:fe:47:d2:9e:92:c8:c8:0f:1b:ea:9a:
07:9e:30:e0:6d:63:c4:28:5d:88:70:28:30:0e:57:
6d:a6:ba:84:e3:61:43:0b:d3:43:0d:a4:c1:40:dd:
68:d7:ac:63:2d:95:d2:b4:b0:67:6c:57:c2:75:a5:
b1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F8:D9:AD:0F:42:39:7D:47:C6:6F:48:E3:FE:9E:DD:80:C5:4D:39
X509v3 Authority Key Identifier:
keyid:DD:F4:87:2D:C2:89:1F:BA:39:53:DD:E1:F4:B7:44:A4:5D:D5:3D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fSHLcKJH7o5U93h9LdEpF3VPSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/wPjZrQ9COX1Hxm9I4_6e3YDFTTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/64223e-c628-4f87-b390-60901b3138f8/1/3fSHLcKJH7o5U93h9LdEpF3VPSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.112.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:2c:02:b2:9b:2e:e0:6b:c2:28:34:9f:e7:be:f8:fa:79:c3:
82:31:21:4b:b0:04:2f:3e:6e:db:e7:e4:40:ae:f5:d8:61:5b:
e0:24:d3:21:f3:fd:40:59:14:35:b2:8d:c0:e4:d4:cc:4d:84:
8d:0b:db:3c:7d:4f:08:1d:cb:8a:78:46:b2:a8:de:7d:60:32:
e5:85:91:f9:59:5d:d8:54:36:2e:7c:58:56:b0:79:95:a7:af:
16:81:95:3f:3f:26:c5:07:87:09:15:e5:ae:d9:e5:45:71:30:
f8:91:38:7d:f7:f2:98:50:34:80:48:94:50:31:a0:12:0a:89:
99:5f:ef:a2:15:e7:d5:a8:b4:c3:ec:02:1a:af:ad:1d:d2:57:
9b:f0:90:2e:ad:2d:fe:c9:c6:c8:04:11:46:ab:93:f3:b3:ca:
89:a3:76:3d:57:c4:37:44:e6:07:6e:67:d6:f3:f4:47:32:ed:
fa:07:e6:95:13:1a:05:a9:5c:9e:54:ee:51:70:30:32:4b:43:
da:40:43:23:49:d1:32:af:6b:fc:27:9f:ab:82:87:6d:9c:13:
a6:2e:58:18:ce:03:2b:bd:b3:f0:27:2f:d2:c5:d4:5b:55:d9:
64:f1:12:00:8f:b1:aa:5a:33:18:c3:10:8d:11:01:2d:46:3a:
34:aa:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:38:23 2025 by rpki-client