Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/waFJY_9Xx4HVBca8mozwG38i49k.roa
File: waFJY_9Xx4HVBca8mozwG38i49k.roa (raw, json)
Hash identifier: 2sqvgn5zOZZ4lehKra8TFzA3bKpHh9AvNDOTiV97aSw=
Subject key identifier: C1:A1:49:63:FF:57:C7:81:D5:05:C6:BC:9A:8C:F0:1B:7F:22:E3:D9
Certificate issuer: /CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Certificate serial: 019420D615FCBC3217F55F6E3129E1F99A22
Authority key identifier: D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/waFJY_9Xx4HVBca8mozwG38i49k.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201135
IP address blocks: 185.84.188.0/23 maxlen: 23
185.84.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:15:fc:bc:32:17:f5:5f:6e:31:29:e1:f9:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fc6e45181d839fd10e4a902762f26c9a646796
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1a14963ff57c781d505c6bc9a8cf01b7f22e3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:85:6d:bc:56:03:c9:2c:80:c9:3f:ef:df:18:
9e:4c:41:1d:bd:18:41:f6:b4:4b:c9:5e:08:73:96:
77:36:03:1f:8d:b9:fb:f1:2b:f4:23:06:72:74:3c:
ba:73:02:42:45:27:50:38:af:80:b3:7a:02:bf:cc:
99:e6:22:8f:a8:4b:50:91:17:ad:1f:3c:78:a2:af:
04:51:2f:c8:17:c1:4b:77:ee:0e:cc:e0:38:b7:a6:
b3:c0:77:a9:a3:9c:a0:50:ac:25:eb:0d:06:6b:43:
60:e2:ee:cc:f6:e6:06:38:1a:c7:5b:12:80:6a:72:
7d:29:2c:48:5a:f1:29:d0:23:44:e7:0a:f8:03:27:
21:1a:d4:a3:03:45:fb:63:b5:eb:49:45:8c:78:54:
de:cb:3a:4f:6e:fd:03:69:c9:70:21:f9:9c:02:84:
fc:60:5d:0b:e0:d7:f6:f3:a0:22:28:dc:7a:53:75:
04:11:52:78:69:f9:2b:51:7b:0b:22:44:83:9a:9c:
85:95:52:fe:a3:64:98:f4:19:57:1d:d6:cb:00:53:
ce:20:fb:56:3b:3b:fd:23:8a:b8:a6:a3:ba:47:bd:
66:3d:e9:76:c6:1f:ca:bf:a2:a4:68:db:a3:75:38:
87:67:3c:6e:09:75:bd:76:54:41:73:21:de:5b:2c:
ce:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A1:49:63:FF:57:C7:81:D5:05:C6:BC:9A:8C:F0:1B:7F:22:E3:D9
X509v3 Authority Key Identifier:
keyid:D8:FC:6E:45:18:1D:83:9F:D1:0E:4A:90:27:62:F2:6C:9A:64:67:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/waFJY_9Xx4HVBca8mozwG38i49k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/62343c-edbe-4a8a-84f2-7eb2eb85b84a/1/2PxuRRgdg5_RDkqQJ2LybJpkZ5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:c9:fc:95:94:11:dc:f4:88:9b:90:57:dd:8f:9a:76:25:44:
83:26:be:ca:bd:33:89:6e:fe:ba:1c:1a:3d:e4:15:03:ec:a8:
a9:21:d1:76:a6:94:65:80:b6:c5:ff:17:79:14:a8:ab:45:f0:
8f:dd:34:0f:88:cf:a7:70:2c:5a:fb:49:31:4d:75:b4:07:b5:
37:be:9b:a8:94:4f:3d:f2:61:d9:96:8e:7d:00:9d:c1:60:54:
12:e4:4d:cd:86:80:37:9a:41:88:50:7d:fc:70:ca:f5:9b:82:
aa:3e:19:77:8a:4a:36:fa:58:79:6f:10:d0:3c:c8:b6:9d:91:
c3:63:89:ae:7d:c4:b2:cd:13:03:4d:e8:b1:65:f8:6b:12:7c:
b7:d5:fb:d6:ef:25:a0:f5:b4:89:04:e2:b6:3f:f6:85:1a:c7:
24:99:6c:99:e3:ba:1d:43:54:08:a4:99:16:64:99:30:fc:6e:
cf:9b:7d:06:2d:ce:69:c1:7e:00:db:8f:c3:8a:e5:67:f3:5a:
a8:c2:58:7f:6d:0b:e1:04:1d:36:1c:0c:83:04:06:a5:c4:ca:
21:43:27:27:46:69:51:43:9b:2f:b5:ee:3f:6f:b0:41:27:76:
f5:e5:c6:5d:07:87:34:8a:7b:3d:c5:1d:68:ab:f5:06:65:6c:
88:45:30:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:40:43 2025 by rpki-client