Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/wfDXduCxvdOi2Vg76QQkQ_tBECo.roa
File: wfDXduCxvdOi2Vg76QQkQ_tBECo.roa (raw, json)
Hash identifier: B/UpchGSvbdn1exfMxBR7/v8Y1UBkNMLA4It92NUMaw=
Subject key identifier: C1:F0:D7:76:E0:B1:BD:D3:A2:D9:58:3B:E9:04:24:43:FB:41:10:2A
Certificate issuer: /CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Certificate serial: 0185B252CA1637DFD2A647B00D12B6DA0D8A
Authority key identifier: BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/wfDXduCxvdOi2Vg76QQkQ_tBECo.roa
Signing time: Sat 14 Jan 2023 22:07:28 +0000
ROA not before: Sat 14 Jan 2023 22:07:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 194.169.120.0/24 maxlen: 24
185.235.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b2:52:ca:16:37:df:d2:a6:47:b0:0d:12:b6:da:0d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb376d0c9bef6b098fa63140bcc40d83d76bd549
Validity
Not Before: Jan 14 22:07:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1f0d776e0b1bdd3a2d9583be9042443fb41102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:21:70:46:11:0f:39:89:f1:9b:ab:d0:a8:
f9:48:9d:df:96:9c:9c:5d:85:df:7c:a6:4c:8d:18:
e0:57:03:8e:17:eb:8e:b7:44:c1:01:9c:6a:36:4b:
74:4b:a6:80:eb:a4:bc:a9:6d:7d:b6:95:f5:df:6b:
f8:2f:9b:28:f8:98:0a:6e:b6:09:dd:79:6b:51:e6:
53:b9:cb:d2:86:8c:62:1a:01:19:f1:77:e9:25:cf:
fc:29:45:78:ef:9f:d1:9e:1d:82:cd:f1:0d:92:c0:
28:80:90:56:14:3b:14:ec:4b:b5:9d:3b:10:f6:95:
02:6e:a8:02:7f:b3:b0:bd:53:32:b3:d7:b5:d3:a4:
79:f6:1b:b5:86:00:bf:6c:2b:07:a2:9b:f5:7a:38:
b4:c4:67:8b:62:8e:c7:54:0d:73:83:27:09:71:a2:
71:c5:7a:16:59:de:43:72:2a:84:81:58:fb:cb:ca:
12:28:e5:11:dc:f8:94:af:3d:5f:d0:c1:34:44:1a:
f5:d0:72:f8:c6:c6:76:dc:57:76:f8:9e:52:03:be:
fa:68:db:73:0a:ab:ab:40:50:67:b9:b9:69:54:fb:
97:e4:dc:96:eb:c3:ae:3f:cc:67:b6:57:1b:2b:df:
5a:43:74:67:a8:b1:ac:0a:15:66:91:b4:76:99:fe:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F0:D7:76:E0:B1:BD:D3:A2:D9:58:3B:E9:04:24:43:FB:41:10:2A
X509v3 Authority Key Identifier:
keyid:BB:37:6D:0C:9B:EF:6B:09:8F:A6:31:40:BC:C4:0D:83:D7:6B:D5:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzdtDJvvawmPpjFAvMQNg9dr1Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/wfDXduCxvdOi2Vg76QQkQ_tBECo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/722fe6-5f0a-49e8-abdb-caa2ad0de122/1/uzdtDJvvawmPpjFAvMQNg9dr1Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.77.0/24
194.169.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:83:0e:cb:3f:56:9d:3e:d3:ee:f2:31:01:18:68:9e:a3:62:
3d:5d:26:16:84:8a:82:cc:4e:5f:52:5a:41:74:73:b4:9d:37:
5d:0c:23:2c:31:a6:58:81:a0:69:cf:f8:b0:7e:76:8d:56:34:
a6:93:18:63:32:fb:14:d1:6c:0a:c6:4e:3d:cc:6f:8f:c8:da:
40:5d:b2:cb:0d:ef:5b:10:55:31:43:9c:12:25:c2:a4:f6:2d:
ca:be:99:e1:09:53:de:f6:c3:f0:d1:13:0b:25:a0:6c:18:62:
3c:c0:f3:6b:f7:b8:97:f9:66:fb:13:16:ef:14:21:63:97:1e:
85:d7:26:41:17:ef:cc:88:46:f9:8d:2d:f8:b7:58:0e:ce:49:
0a:ae:54:ec:9b:f4:a3:fc:21:54:6f:b8:85:ec:d5:a7:b3:ab:
63:5c:8e:cd:28:09:c0:a9:f3:7c:53:c2:ce:3f:2b:f9:54:b5:
aa:2f:b2:8c:67:42:4a:fe:f3:18:ad:3e:3a:6f:66:f0:8a:cf:
ba:ae:23:80:fe:a4:4e:fb:24:8e:12:3c:ff:52:a9:20:21:08:
f9:b8:8d:cf:98:46:65:12:a4:79:90:a2:2b:74:4f:c6:ea:76:
a4:8f:3f:eb:f3:6c:79:2c:75:ea:1c:16:75:9c:db:dd:de:ac:
b1:aa:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:08:48 2025 by rpki-client