Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/9fwoj_X2tHpCghfejRb6ra1gTZc.roa
File: 9fwoj_X2tHpCghfejRb6ra1gTZc.roa (raw, json)
Hash identifier: VcsRDD+GofeQD9oKWI4zahEGiyHHMwhCi+kgIO2Xtcs=
Subject key identifier: F5:FC:28:8F:F5:F6:B4:7A:42:82:17:DE:8D:16:FA:AD:AD:60:4D:97
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 019427481BBC1D858FCD6ABD1E5A678B61AD
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/9fwoj_X2tHpCghfejRb6ra1gTZc.roa
Signing time: Thu 02 Jan 2025 13:50:24 +0000
ROA not before: Thu 02 Jan 2025 13:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204918
IP address blocks: 185.171.93.0/24 maxlen: 24
185.171.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1b:bc:1d:85:8f:cd:6a:bd:1e:5a:67:8b:61:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5fc288ff5f6b47a428217de8d16faadad604d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:59:06:aa:df:40:70:fc:6f:73:4c:b7:03:66:
b7:a5:b4:68:b5:81:2c:b2:a0:7e:5a:cf:2c:0f:21:
43:d1:33:02:b6:e2:20:b8:e5:31:eb:de:a1:a0:60:
4c:4b:36:cb:aa:db:21:9e:f4:fb:60:9c:ad:07:f5:
75:2c:9f:a7:0a:07:4b:6d:9b:8e:da:1c:1d:d9:2e:
d3:90:31:6f:28:b8:a6:13:ff:ed:15:60:6c:ec:3c:
28:fa:6b:9f:a5:b7:15:84:73:cc:5b:a2:47:c2:3e:
77:12:2c:f2:46:12:69:15:76:94:92:d1:a1:ae:64:
8a:79:f7:02:21:ab:aa:e1:35:40:99:b5:94:4b:d8:
a6:5d:f4:29:14:2f:97:ee:eb:52:db:65:23:4a:b5:
11:f0:45:14:60:8b:ab:41:87:22:71:a7:1f:40:26:
58:a3:d8:d7:c0:21:2a:0b:27:69:fe:f7:7a:6c:71:
f3:4c:10:f9:5c:68:1d:45:33:85:20:2b:8d:26:1b:
b3:d9:79:f0:ea:51:c5:fe:53:a7:b1:5f:64:3e:98:
15:eb:94:9d:a8:ec:46:7c:cb:3d:52:fe:70:8f:e8:
bc:78:4f:fe:e9:dc:ad:5b:a8:83:c0:47:61:55:ed:
97:99:be:59:fe:ec:dd:cc:5e:e4:65:42:27:6b:bd:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FC:28:8F:F5:F6:B4:7A:42:82:17:DE:8D:16:FA:AD:AD:60:4D:97
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/9fwoj_X2tHpCghfejRb6ra1gTZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.93.0/24
185.171.95.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b0:ba:13:b7:1f:11:4e:db:31:fb:e0:58:71:f8:85:50:68:
09:d4:d5:df:8f:f5:9d:ed:d2:e1:9d:1f:6e:1d:11:b9:39:ca:
6c:25:6b:66:f8:dd:cb:1c:41:51:20:e4:94:d3:ac:8e:82:4c:
60:a9:4a:9e:87:be:50:c2:88:12:84:a6:eb:21:9e:25:3f:5e:
25:98:a0:91:7e:b6:49:fd:98:08:5c:00:ee:36:2b:1a:16:5f:
eb:c1:99:88:e9:b9:ff:33:56:b2:46:1f:40:39:fe:69:01:2a:
99:3d:94:8f:d9:15:0b:ee:05:2d:ef:a7:c1:10:1f:2e:d9:fb:
33:08:e3:de:89:92:fc:12:41:e9:c9:c8:1c:61:3f:ac:a5:db:
49:9a:5f:e9:80:b8:86:d0:68:e6:1a:35:77:08:12:01:e0:27:
ba:60:3d:72:14:3d:bc:fa:f7:07:f9:f4:d4:e9:4f:10:8e:71:
68:3e:d1:a6:cd:58:fb:8b:36:0b:c8:59:d0:8d:43:91:dc:38:
3b:cc:6b:6c:75:80:d0:af:78:c3:01:b5:35:0c:42:04:9d:75:
f2:22:87:92:ad:98:40:93:b9:e6:dd:85:c5:7a:f9:dc:17:7a:
fd:76:62:52:fc:05:bc:35:e9:18:01:ae:1f:63:62:fc:96:a6:
7f:e7:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:26:29 2025 by rpki-client