Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa
File: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (raw, json)
Hash identifier: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=
Subject key identifier: C2:9E:AB:81:3F:F2:48:9E:E8:21:D0:00:23:F4:82:BE:6D:B5:C8:55
Certificate issuer: /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial: 019424B402AED22BDC8C4275A70CCAD83315
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa
Signing time: Thu 02 Jan 2025 01:49:24 +0000
ROA not before: Thu 02 Jan 2025 01:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47825
IP address blocks: 185.201.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:02:ae:d2:2b:dc:8c:42:75:a7:0c:ca:d8:33:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Validity
Not Before: Jan 2 01:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c29eab813ff2489ee821d00023f482be6db5c855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c1:9d:f8:0d:a1:43:fe:cc:5a:4e:fa:1d:8f:
83:43:56:34:cb:d6:ec:d9:8e:0e:83:f5:84:bc:2f:
df:c6:54:33:f1:96:df:0b:ac:52:c9:17:b7:c3:81:
04:a0:17:e2:06:6a:e9:9c:a6:e6:d6:e4:75:16:bd:
21:59:c9:1e:83:76:7f:59:fb:47:7c:22:ea:6c:bf:
cf:4a:27:7f:fa:a3:18:23:1c:84:66:8b:57:e1:6c:
63:73:48:c1:45:4e:b4:9a:5e:1f:5e:36:8b:19:4d:
80:60:c3:4e:a0:bf:78:3e:60:df:36:89:8c:af:4c:
15:6b:a5:44:5d:de:97:23:b9:50:e9:35:17:ee:ac:
c7:a0:0d:81:73:58:be:de:ca:2c:dc:83:9d:05:b5:
3e:f8:31:56:60:6e:84:3e:b0:cb:3b:c5:a3:d9:11:
27:2c:bb:17:d4:5b:4d:2e:c9:a2:b5:08:6a:9a:c0:
d2:0c:50:67:11:97:c0:84:cb:46:dd:35:1f:33:04:
35:c0:d7:7a:4f:02:a4:09:d6:f9:63:9f:75:71:28:
09:b7:b0:29:73:77:1f:72:d1:59:6f:d6:3c:1f:bd:
8d:04:a2:91:83:2c:05:19:87:e4:a3:a6:8e:9a:d4:
ee:5a:46:5f:4b:2f:36:65:61:4e:f2:f9:cd:3f:cf:
98:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:AB:81:3F:F2:48:9E:E8:21:D0:00:23:F4:82:BE:6D:B5:C8:55
X509v3 Authority Key Identifier:
keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.69.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e9:72:e3:73:2b:28:c4:89:37:7e:db:f8:a3:99:b3:b3:3d:
30:35:43:f7:d6:98:fd:d5:be:b9:df:be:7c:2f:e8:1e:50:ec:
8f:1e:07:93:f9:4e:44:d0:6c:3f:0d:c7:34:54:7e:b3:f7:fb:
6b:f2:02:a0:df:a9:3b:b7:03:c6:da:19:8c:06:46:83:11:90:
a2:db:cd:c6:98:cc:56:7c:7f:70:34:db:0e:b6:2b:95:4f:84:
ca:ff:06:3c:c4:14:1e:b6:31:c9:e5:f6:75:88:1d:96:e4:10:
08:b3:58:00:89:e2:fe:49:73:5f:28:35:4d:17:02:1a:00:78:
49:d4:ec:06:e4:56:c3:a7:b0:ca:75:13:22:21:e7:4e:00:64:
39:f2:ed:6b:cd:77:62:21:d0:d9:53:0b:35:03:d9:73:78:d1:
47:a6:d4:41:6f:53:b9:57:bc:8c:e1:75:39:f6:37:ae:93:84:
5e:9a:5d:1a:02:8b:4f:93:49:8e:01:e4:64:bc:cf:d1:58:fe:
88:4c:21:ae:0c:35:cd:2c:d7:14:43:79:b9:65:27:ef:cd:d2:
14:45:fa:ba:85:bc:1b:02:8e:3e:9e:9a:50:f8:5c:80:d9:e0:
37:b1:01:60:52:12:15:7d:54:19:55:99:9c:2a:9b:5a:94:c3:
9f:7f:bf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:44 2025 by rpki-client