Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/W2Q925JmFS3PAyR39rSH9evVFK8.roa
File: W2Q925JmFS3PAyR39rSH9evVFK8.roa (raw, json)
Hash identifier: dB1h3fqhkVejlYoXFAHZ1BfXovUsbFUZPS3VPbEBgtM=
Subject key identifier: 5B:64:3D:DB:92:66:15:2D:CF:03:24:77:F6:B4:87:F5:EB:D5:14:AF
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 019424B26B63BD5C4F2360FCD3ABA3A4884A
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/W2Q925JmFS3PAyR39rSH9evVFK8.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206291
IP address blocks: 185.188.44.0/22 maxlen: 22
2a0b:b780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6b:63:bd:5c:4f:23:60:fc:d3:ab:a3:a4:88:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b643ddb9266152dcf032477f6b487f5ebd514af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:12:1c:a4:b7:66:f1:fc:a8:cb:c6:2b:3b:
2f:e2:f4:63:6b:e8:d3:74:ac:c2:a6:fa:5c:f9:7c:
74:94:d1:5d:ab:a6:94:c9:3d:40:14:48:dc:bc:f7:
82:e2:d5:f0:4b:8e:65:11:1d:ac:b5:84:e5:56:cb:
69:0d:c3:70:66:46:be:67:8d:93:db:e6:5e:47:d2:
e5:65:02:de:0c:d0:2d:d8:1a:3c:95:7c:fd:0d:70:
25:42:01:82:b4:11:55:28:d3:90:f3:9c:31:3e:e4:
04:5d:90:5b:72:f1:f7:37:e9:e4:ed:9c:76:54:3e:
43:17:f3:68:d8:9d:eb:ac:0c:67:06:b3:70:8e:60:
ef:53:52:f8:b9:7c:a0:7b:6c:c4:1c:45:40:0c:18:
3c:18:7b:44:9a:2f:0a:70:b3:be:d3:17:d9:6f:00:
60:36:63:f4:44:ae:ae:8e:b9:9e:a4:1d:ab:90:23:
c2:7e:bd:44:3e:c2:7b:77:32:ff:b7:a9:d8:5e:dd:
ee:f5:68:dc:bf:f2:d8:5b:98:1f:14:aa:fd:ef:56:
e3:1f:b8:9a:27:f6:e1:55:5a:9c:56:68:c0:b1:17:
ab:3f:1f:1d:d5:c0:a4:4e:09:f4:d1:90:53:af:93:
a7:af:d0:15:65:91:cf:71:5a:da:58:89:ff:5b:bf:
3c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:3D:DB:92:66:15:2D:CF:03:24:77:F6:B4:87:F5:EB:D5:14:AF
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/W2Q925JmFS3PAyR39rSH9evVFK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.44.0/22
IPv6:
2a0b:b780::/29
Signature Algorithm: sha256WithRSAEncryption
83:8a:ad:be:63:08:67:50:cc:74:45:97:d2:93:79:6d:fc:64:
7e:77:62:9b:37:4f:8a:97:e5:52:1a:f5:fc:1c:59:90:a0:fe:
34:e4:14:ed:2b:87:ee:7e:37:e4:8f:d4:96:be:d4:26:ca:8f:
58:3e:7f:8a:eb:53:91:48:7e:18:8e:bc:de:70:b1:02:1e:6e:
f5:64:cf:94:27:dc:0f:b8:a2:a5:74:1c:4e:0c:c3:af:b1:1c:
51:44:3f:85:0e:cb:05:75:fb:a8:1f:49:4e:ce:4f:0b:2a:61:
07:6f:1f:0a:70:9a:3b:d5:0f:ba:a3:50:28:d2:d2:d6:9c:f1:
8b:33:2d:9b:f0:e1:61:a5:6c:86:34:b9:48:33:65:7a:4e:8b:
e1:dc:44:69:01:ba:b4:00:5d:14:bb:6d:d7:66:35:d6:82:38:
c1:3b:b5:72:bd:41:7d:20:00:51:b4:15:e4:a5:df:65:e8:9b:
3e:56:6a:2a:b0:95:2d:90:38:6d:f8:ec:63:3e:e9:77:ac:5e:
63:55:d1:b8:c2:cb:c4:7f:ef:3f:b5:3e:1f:3b:0f:2c:e4:a7:
60:7c:d3:fb:75:24:9a:0c:bd:14:21:2c:00:22:ec:6b:cc:6c:
3d:cd:c0:07:93:2b:93:cd:62:b0:10:6c:a4:d1:33:86:45:f5:
1d:38:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:10:26 2025 by rpki-client