Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/wjWLj_FDNoLKRo-jWXxTwFjan7M.roa
File: wjWLj_FDNoLKRo-jWXxTwFjan7M.roa (raw, json)
Hash identifier: ztSdcajVdWIcA2EPHQCjpwBh341/H4c/xdNmghfKI0c=
Subject key identifier: C2:35:8B:8F:F1:43:36:82:CA:46:8F:A3:59:7C:53:C0:58:DA:9F:B3
Certificate issuer: /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial: 0194266B288D0982E7A82B5CF11DA1B2E143
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/wjWLj_FDNoLKRo-jWXxTwFjan7M.roa
Signing time: Thu 02 Jan 2025 09:49:04 +0000
ROA not before: Thu 02 Jan 2025 09:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21212
IP address blocks: 185.110.96.0/24 maxlen: 24
185.110.97.0/24 maxlen: 24
185.110.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:28:8d:09:82:e7:a8:2b:5c:f1:1d:a1:b2:e1:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Validity
Not Before: Jan 2 09:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2358b8ff1433682ca468fa3597c53c058da9fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:bc:49:ac:16:81:4d:bb:33:4e:35:a1:c6:
a6:54:ed:62:a0:10:46:32:05:c1:69:15:15:fd:1a:
4c:f9:e0:62:d2:9e:44:5b:4f:23:58:5d:6d:40:e3:
45:e6:6b:9c:da:5c:75:a8:b5:92:17:bc:19:4a:c6:
5c:98:f7:ab:fd:8d:5b:1b:5d:df:e6:f8:a2:19:d8:
15:0d:cf:bc:8d:50:dc:0e:58:80:df:a5:c9:54:77:
80:d2:b2:e3:10:4d:66:45:ad:03:b8:b0:ad:37:9c:
78:b6:5f:5d:f2:9f:94:74:6b:8f:0b:eb:a0:85:4f:
08:04:11:47:30:68:22:7a:f0:32:1a:98:27:33:cd:
9f:7a:c1:76:08:98:9e:18:ab:0b:b0:bb:5b:c2:62:
38:4d:7a:78:e8:0d:ca:01:7e:8d:20:ff:fc:7d:00:
b8:48:7c:62:bd:47:7b:e5:ea:a3:4f:f8:d9:d1:8b:
22:34:b9:b5:93:9b:84:b5:c2:06:33:ef:e0:4f:08:
f0:5f:d0:cf:ee:04:74:d9:f7:21:bd:07:82:59:bb:
17:59:75:78:43:99:de:f5:c7:ba:45:c6:48:88:39:
f6:67:7a:5d:c0:05:38:76:54:af:34:bc:3d:bf:33:
a7:20:05:e6:99:03:9a:45:d2:d1:80:50:cd:e0:dd:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:8B:8F:F1:43:36:82:CA:46:8F:A3:59:7C:53:C0:58:DA:9F:B3
X509v3 Authority Key Identifier:
keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/wjWLj_FDNoLKRo-jWXxTwFjan7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.96.0-185.110.98.255
Signature Algorithm: sha256WithRSAEncryption
40:75:01:a9:b3:a7:7f:e7:4d:9f:c7:39:2b:5d:d3:cc:38:8a:
8c:7a:73:81:2d:5a:ec:fd:b9:c0:e5:9e:f0:d4:5b:b8:07:4a:
6e:b9:87:22:8f:13:7b:ba:8c:ad:3d:04:39:4e:6e:27:6a:08:
a0:2a:22:01:59:03:8c:3b:16:2e:ca:56:da:c4:cc:e0:f4:48:
a2:5f:b9:a9:14:0b:c7:6d:18:62:de:07:64:08:59:d7:30:24:
4f:4c:d9:ec:04:4c:aa:d2:b8:59:cf:ed:ab:de:e1:77:f0:68:
6d:38:fd:c2:6d:e1:62:f2:4a:01:8e:d1:b8:e1:6b:a5:31:1e:
ef:37:c7:8a:14:82:a2:75:c4:42:76:d5:46:78:c0:50:c5:b9:
20:e8:92:92:c9:1f:ec:d8:e5:90:8d:84:5f:8d:61:8a:89:72:
3a:63:5c:21:d4:4a:be:ea:29:e0:02:77:af:65:01:86:72:ba:
5c:7f:b5:4f:b9:b4:00:50:ae:71:a6:06:f9:03:9d:c5:00:ba:
bf:1b:89:1c:0b:10:ca:e3:c1:53:b8:2f:97:59:5f:29:f5:b9:
ce:5c:21:33:14:60:f5:a5:e4:da:f7:c2:78:62:05:1b:62:ba:
7d:23:ed:36:32:ea:b7:36:f3:88:6d:af:56:96:ce:fa:21:89:
52:dd:79:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:56 2025 by rpki-client