Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/w2HliW1FxAoWboCzBC57HQK_5M4.roa
File: w2HliW1FxAoWboCzBC57HQK_5M4.roa (raw, json)
Hash identifier: 1o/6TghmsgYeou6D438p0wdWpOeCHDeKRbg9VK0Bxfs=
Subject key identifier: C3:61:E5:89:6D:45:C4:0A:16:6E:80:B3:04:2E:7B:1D:02:BF:E4:CE
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019424B2949404F1BEC3E868A30282D4F015
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/w2HliW1FxAoWboCzBC57HQK_5M4.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204870
IP address blocks: 185.174.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:94:94:04:f1:be:c3:e8:68:a3:02:82:d4:f0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c361e5896d45c40a166e80b3042e7b1d02bfe4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:a7:e2:b5:2c:e3:53:6a:99:e2:8f:8b:a8:
39:d6:f4:89:12:73:5f:43:3a:1e:11:41:53:80:7d:
e0:89:84:01:1b:5d:89:64:35:32:a4:34:c4:36:4c:
ae:9e:51:bc:7e:2d:c4:7c:4f:88:2e:cb:a2:1c:2b:
f0:fd:c0:c8:37:da:b9:dd:ec:af:51:d8:c9:f8:fd:
73:9c:00:c1:f8:7f:48:52:5b:f2:0a:92:ee:2c:79:
0a:ad:03:ab:b5:5f:17:75:e3:bf:d1:59:2b:81:d0:
7e:b6:02:0e:f7:9d:08:4f:77:f8:0d:2f:e4:ec:a1:
a9:15:c9:06:26:f7:97:80:8d:13:64:88:07:d8:35:
bf:50:69:03:69:59:bc:29:99:ef:7f:28:7d:0b:45:
3f:6d:ef:cc:ad:c6:af:38:8e:8d:44:7d:a6:0c:b7:
96:85:e5:e7:f2:89:02:c1:88:1d:c9:7f:62:62:ec:
34:03:c5:5e:e0:e6:b4:18:ea:0b:1c:3a:63:43:bd:
43:9f:e1:c0:b5:df:d8:ab:82:ae:09:50:65:95:7a:
c1:da:fb:4c:f7:5e:a8:9d:fd:40:b8:3d:39:b5:9f:
08:d6:91:c9:b9:05:8d:5b:b2:6b:ec:5d:3b:08:5c:
8c:aa:ec:d2:8b:59:5f:0d:86:54:3f:50:8b:52:08:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:E5:89:6D:45:C4:0A:16:6E:80:B3:04:2E:7B:1D:02:BF:E4:CE
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/w2HliW1FxAoWboCzBC57HQK_5M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.154.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:0e:c8:55:6d:bc:39:cc:31:ca:ab:48:50:58:ff:05:e7:f3:
88:61:43:dd:2f:3d:f7:a1:76:a7:fa:89:dd:11:9c:04:7d:b9:
9f:1c:01:ea:65:a7:ba:c2:a4:6e:75:ea:a1:a6:33:30:15:0c:
66:41:0d:17:7c:2b:fc:6e:11:4d:b1:28:55:ff:5a:98:a8:4f:
15:80:b7:3b:30:33:62:9e:02:97:ed:58:63:0e:94:1a:75:86:
2c:81:1d:c3:f2:02:e4:75:37:c2:e1:a7:d1:0d:21:3c:3c:05:
2d:eb:84:20:4c:26:aa:20:e1:fb:48:51:b2:42:18:ed:b2:a3:
ab:d1:c3:7e:2b:6b:60:93:82:26:4c:04:c6:7f:9b:fd:04:c3:
eb:cc:fd:1a:58:f7:56:ad:fc:e3:51:cc:7a:66:20:b1:d4:91:
5a:ae:d5:fb:c3:9a:3e:87:98:9e:d7:97:bb:0e:0b:8f:52:4d:
56:e8:29:ed:90:37:75:bb:9c:1b:31:2d:bc:9e:a9:a5:1d:c2:
10:58:35:61:b0:2e:d3:fa:b9:fa:66:19:6a:b5:02:24:74:48:
40:0c:ae:66:0e:f3:a0:14:d4:5c:eb:be:75:fd:ed:bf:e7:e3:
38:f4:b6:0f:01:b9:00:36:66:8d:9f:e1:0b:27:01:55:d6:81:
88:1d:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:46 2025 by rpki-client