Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa
File: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (raw, json)
Hash identifier: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=
Subject key identifier: C3:FB:71:8B:FB:A4:E2:64:3F:5D:1F:2B:14:90:E2:2F:E7:34:8D:DD
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 019422FC38C64A3941161AE4267320FE657C
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200393
IP address blocks: 185.186.223.0/24 maxlen: 24
2a11:1e40:5aa5::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:38:c6:4a:39:41:16:1a:e4:26:73:20:fe:65:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3fb718bfba4e2643f5d1f2b1490e22fe7348ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:47:95:37:8c:4c:bb:71:4a:79:52:a6:ee:
1c:33:8b:8d:be:dd:1d:4b:24:8d:22:5b:6e:e7:5b:
78:e1:63:5d:e7:bc:dc:ee:4b:d7:53:ca:ad:b2:df:
a9:20:93:43:4e:97:51:42:22:c8:cb:2d:95:83:f0:
c5:c8:e7:55:89:d3:95:62:72:8e:13:40:e8:c8:b3:
e2:c3:50:1d:72:df:55:ab:87:fa:b6:e5:ae:38:04:
93:56:e8:f4:96:87:26:57:b4:79:7e:be:01:04:9c:
e7:37:48:f6:e5:ea:b4:a3:07:7e:c4:cb:c8:f5:38:
4b:85:ab:70:18:92:01:d8:a3:4d:08:fd:82:65:50:
42:34:65:77:4e:23:82:55:db:9b:56:c5:8e:c3:43:
b5:b0:56:60:4e:20:a0:0b:61:bb:c9:18:3b:3a:9a:
15:88:d5:29:06:9c:69:70:8e:46:8c:90:7f:67:75:
3e:27:58:bd:ad:63:61:e6:d1:b3:44:f9:68:15:f0:
ef:bb:8f:81:e5:61:e9:f2:ab:ed:4d:ff:e6:3f:68:
5a:10:49:f6:8a:ef:7d:91:9e:1a:91:97:57:49:44:
ea:3a:fa:78:5b:0d:91:a7:ae:19:74:4a:56:69:2b:
bf:cf:05:2f:e6:d4:87:80:bb:3c:5c:de:95:cb:56:
47:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:71:8B:FB:A4:E2:64:3F:5D:1F:2B:14:90:E2:2F:E7:34:8D:DD
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.223.0/24
IPv6:
2a11:1e40:5aa5::/48
Signature Algorithm: sha256WithRSAEncryption
29:44:b9:a9:59:6e:95:03:b3:63:fa:c7:b6:99:5f:46:0b:0e:
88:4c:4d:7a:a6:61:a9:be:68:6f:56:72:56:29:8b:6a:5d:b5:
0b:c6:99:65:f6:94:31:d6:91:1d:d9:47:1b:86:a1:6f:c8:3a:
31:52:d8:37:a6:a5:ad:e7:16:e4:56:08:06:db:4d:7c:1b:55:
1c:b0:ae:0b:68:e6:bc:bf:7e:d9:ce:98:03:e3:04:f4:3d:d6:
da:02:b0:4e:76:68:fd:d4:3b:0d:cd:08:8c:37:f2:8b:13:18:
c9:3f:f8:34:0f:ac:c1:25:5c:3f:ef:db:ab:53:d7:c6:69:70:
ff:d3:0b:0d:39:66:14:64:c7:11:74:ec:8a:ae:0c:35:4e:47:
f8:e9:52:f2:22:7c:bb:4d:01:2f:a4:1d:c5:7d:3d:08:7f:67:
da:e9:19:8c:d2:a9:21:cc:bb:14:96:b9:63:d7:69:39:fc:b9:
d3:80:b9:44:1e:c2:54:00:3d:e5:6f:b1:46:c7:05:89:a4:02:
be:37:40:f4:a2:da:d5:d0:18:36:36:d0:57:7d:c3:94:20:ab:
63:9e:f8:34:b3:1c:88:25:07:94:38:38:10:cb:c2:18:8f:89:
7a:f1:eb:b1:ad:9d:bd:3a:43:25:dc:7a:7f:75:64:37:e2:19:
05:eb:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:58 2025 by rpki-client