Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa
File: PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa (raw, json)
Hash identifier: d9Wa5FwcE+PxgkYEzEZPmnpoKU1tHYNjbElNCRhvEFk=
Subject key identifier: 3D:64:83:33:6C:10:99:13:71:CE:D0:0A:43:CC:20:69:94:BB:54:33
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 0194266A38544159916C521601CC5C456D6C
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa
Signing time: Thu 02 Jan 2025 09:48:02 +0000
ROA not before: Thu 02 Jan 2025 09:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48362
IP address blocks: 185.101.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:38:54:41:59:91:6c:52:16:01:cc:5c:45:6d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Jan 2 09:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6483336c10991371ced00a43cc206994bb5433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:18:ce:63:5b:f7:2e:42:68:b0:90:37:f3:
51:28:95:32:dc:f3:41:9d:d4:9a:87:9b:af:66:39:
5f:b3:6b:e9:e3:22:bc:ea:29:ff:6b:90:a1:54:6b:
63:f9:6a:4c:d8:c1:61:38:99:68:de:37:02:1c:a4:
96:c2:df:7c:6e:21:ae:e2:65:cd:fe:29:c8:22:69:
38:9c:cb:bb:5c:f4:da:d4:af:fe:57:4f:e2:57:51:
f9:e4:0c:7b:7b:55:3a:a0:ea:9a:13:99:c3:6d:af:
97:de:18:65:4c:4b:c2:34:fe:b9:4d:63:b6:c0:3a:
f0:8a:51:8b:a7:70:2a:ec:d0:72:f3:ce:9c:55:49:
90:45:9c:ac:c8:3f:8c:49:3b:4e:58:08:35:3e:c3:
4b:ec:51:69:8d:a5:54:6c:4b:b0:d7:ca:23:ee:8b:
75:81:1f:e5:55:03:d6:61:5f:57:8c:b4:8e:dc:3c:
18:f1:7a:33:22:02:23:1c:e7:05:a8:4a:cf:ab:38:
8d:ba:4a:20:55:38:4f:eb:97:05:8d:d6:b6:a3:3e:
e8:33:34:65:e6:9c:8d:bb:91:48:a3:4e:7a:a0:e5:
56:5b:a3:76:c6:51:7a:ee:23:5c:20:cd:4b:3a:27:
2b:45:a2:ef:c0:98:59:42:7f:84:50:cf:da:63:81:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:83:33:6C:10:99:13:71:CE:D0:0A:43:CC:20:69:94:BB:54:33
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:37:25:54:2e:5f:d4:94:1d:dc:8f:2c:dd:50:ce:d2:73:bb:
34:2f:f6:af:86:83:83:6c:91:f9:8f:01:51:cd:a0:8d:da:a5:
fa:43:c4:2d:0b:2f:6f:c4:d8:d8:29:36:96:60:ce:03:a4:35:
39:2f:fa:7c:81:89:44:16:e6:b2:9c:99:52:92:a8:37:8d:46:
93:2a:60:7c:fb:34:22:0c:07:cf:9d:08:67:47:e7:8d:f8:9f:
3c:4a:6b:68:27:3e:f6:61:5a:26:98:13:02:b8:98:76:bc:c3:
f6:f5:03:94:b5:a1:7d:4d:d3:93:1c:a2:f1:8d:69:11:b8:2b:
e7:96:ee:29:d2:e6:a8:ec:22:6b:f4:a6:d2:14:53:f7:90:db:
98:aa:48:45:f6:af:06:fc:6e:29:48:6f:15:e9:cc:57:f8:d0:
93:bb:12:7f:49:bd:e8:d9:fc:53:11:f5:2d:7a:db:81:eb:2d:
15:6c:e6:9e:81:e1:a6:2d:f3:b6:f0:52:20:21:78:0c:4a:89:
f2:ff:5a:e2:a8:52:43:2b:cc:18:96:06:99:c1:88:86:b9:03:
1d:65:82:c0:d8:98:47:bc:89:8f:ae:06:5c:1c:44:86:5d:2f:
8b:be:25:6c:89:1e:90:d1:2c:02:7d:a8:ce:6f:55:fb:b8:00:
ed:de:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:36:09 2025 by rpki-client