Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa
File: WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa (raw, json)
Hash identifier: nMdj6H5AmHScUq7iFK7ub3BJ0X174BqxH7J5lRBxaFk=
Subject key identifier: 58:EE:0B:C7:E4:91:61:8B:0B:80:30:3C:77:FE:D8:1C:34:9F:EC:12
Certificate issuer: /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial: 019421440F43A186027A6387930F9EC61A91
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa
Signing time: Wed 01 Jan 2025 09:48:15 +0000
ROA not before: Wed 01 Jan 2025 09:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.169.80.0/24 maxlen: 24
185.169.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0f:43:a1:86:02:7a:63:87:93:0f:9e:c6:1a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58ee0bc7e491618b0b80303c77fed81c349fec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:10:83:5d:df:85:2b:66:24:50:5a:02:4e:
b9:94:d2:f9:bd:ce:a6:93:d7:26:5b:7e:c7:79:c9:
d2:f2:02:e1:83:e2:30:ad:db:29:9b:c2:5f:63:74:
59:9a:f5:83:e1:17:63:8f:9b:03:e4:39:5d:a1:a2:
68:ef:2e:3a:ed:a6:41:2a:f1:dc:55:9b:d2:ce:ce:
44:c6:a9:1c:1a:f4:00:48:78:3a:52:01:df:b3:2f:
f8:22:eb:96:38:fc:e6:be:37:48:6f:3c:e2:c1:64:
e8:7a:54:51:92:06:ce:17:04:58:10:38:7c:72:3d:
73:6e:8e:a9:73:20:fc:08:17:aa:b6:8c:75:2d:1c:
89:5e:80:8b:15:32:f5:68:a4:6e:13:7e:2d:f3:c1:
f7:e1:cb:a8:ce:54:a0:8d:43:83:7f:80:57:83:9d:
34:7b:17:e8:ec:ba:6b:88:0c:0c:00:d1:6b:9f:bc:
f7:b7:b9:31:fb:c3:d7:90:00:56:52:b2:63:8d:91:
27:6e:59:f1:ce:39:a9:09:ab:63:c3:20:b1:bd:02:
f7:cd:2e:99:0d:0a:96:47:a9:99:4e:9e:f0:e2:59:
6d:4d:e3:d3:97:00:ed:b8:3d:0b:fa:85:f7:86:7a:
db:d1:70:44:63:98:bd:6f:ab:6c:40:17:8c:97:43:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:0B:C7:E4:91:61:8B:0B:80:30:3C:77:FE:D8:1C:34:9F:EC:12
X509v3 Authority Key Identifier:
keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/WO4Lx-SRYYsLgDA8d_7YHDSf7BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.80.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:7f:93:c5:2a:16:1f:d1:f8:92:eb:41:00:33:9b:e7:2e:32:
33:2a:ae:64:1f:79:95:d9:77:a8:32:5c:19:66:99:76:3f:26:
8e:bd:39:03:94:c3:e5:81:b2:1f:d0:ed:1a:b0:b9:f7:53:d1:
8a:41:51:6f:2f:00:80:d4:13:87:70:c3:0e:e0:52:c6:a4:cf:
a9:19:96:1d:7d:11:ed:ab:5c:f1:bc:54:3d:fd:18:b8:6c:f8:
fb:d0:63:83:06:9f:eb:10:7c:29:b6:99:80:06:67:b4:72:2e:
a6:37:ab:d5:ed:b2:92:c7:81:8f:78:47:b1:32:08:ac:bb:00:
c8:9c:55:c9:02:99:1b:75:c6:b7:93:cb:94:d2:cb:b0:69:e5:
31:b2:d0:d4:b6:5b:8d:d7:7d:3d:fc:f0:99:43:84:ad:cc:39:
fe:d8:23:ab:c4:51:4c:0b:87:1a:f7:09:2f:97:bb:d4:e0:47:
0b:09:e1:99:98:3d:f1:fe:ee:41:18:ed:6e:3c:c6:d5:18:1e:
38:06:89:6b:f9:75:11:51:ac:22:eb:52:6c:a6:6f:2a:d8:76:
d2:25:d1:64:85:d6:88:2f:01:aa:76:24:03:3b:6a:da:40:2b:
ec:57:7a:86:6b:30:b7:69:17:c6:70:68:34:3b:2f:e0:58:17:
86:fe:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:06 2025 by rpki-client