Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa
File: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (raw, json)
Hash identifier: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=
Subject key identifier: C3:D2:02:4F:A7:0A:92:00:7F:A7:24:58:7E:C0:64:4F:B2:3F:7B:90
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 019420D5F64C9AFA48D896FAF46DC908AE6F
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa
Signing time: Wed 01 Jan 2025 07:48:00 +0000
ROA not before: Wed 01 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201273
IP address blocks: 185.161.249.0/24 maxlen: 24
2a12:8340::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f6:4c:9a:fa:48:d8:96:fa:f4:6d:c9:08:ae:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3d2024fa70a92007fa724587ec0644fb23f7b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:f5:cf:31:0c:75:ba:9e:f1:c6:bf:a8:79:
92:e0:0b:8e:8e:75:9b:af:ae:88:93:56:05:59:e4:
ae:09:a5:30:3f:bf:9d:41:32:a1:1c:d2:ba:82:6a:
f5:ad:c0:b1:08:fb:76:c5:2e:ed:51:a4:6c:be:3d:
0a:42:43:57:f7:f7:3a:af:a2:46:5f:64:ed:6e:48:
61:6e:7e:0c:81:d5:c3:ad:5a:d2:40:69:db:0b:fd:
8c:bc:aa:5f:15:30:ef:2d:15:9d:56:86:69:51:f1:
77:98:70:5c:13:10:08:17:c2:c4:67:5a:be:2a:c8:
8c:47:1f:60:24:27:05:5f:b2:13:a2:38:01:42:d1:
aa:cd:0a:dc:a1:79:a3:71:e5:ba:9b:69:ad:9f:01:
3b:de:ec:7d:43:48:cd:22:c5:d6:06:af:a9:71:08:
5f:ec:24:b7:7f:b1:2c:e7:b4:a7:6f:6d:9d:e9:fd:
9f:54:55:46:48:1a:34:f8:6b:5f:32:da:1f:3e:2e:
20:88:60:ba:de:25:91:9b:bd:b6:0c:49:21:70:c2:
5e:c2:0f:95:5a:a5:c4:a1:c7:8f:c2:8f:f6:41:78:
55:63:6c:c3:4d:8b:43:09:a4:8c:91:40:c8:bf:5a:
8d:fc:46:05:71:81:15:b2:e0:d8:38:5d:86:08:4d:
97:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D2:02:4F:A7:0A:92:00:7F:A7:24:58:7E:C0:64:4F:B2:3F:7B:90
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.249.0/24
IPv6:
2a12:8340::/48
Signature Algorithm: sha256WithRSAEncryption
09:a1:6e:cf:cd:d3:d5:a3:bb:e8:5a:0f:81:cc:0c:ef:db:9b:
d4:27:a3:0c:72:52:f4:3a:f1:3c:38:26:b3:d3:18:5c:65:92:
7b:63:1f:a1:51:06:19:6b:01:0c:b0:db:d4:eb:c7:83:fb:e6:
de:b7:a0:c0:89:91:f7:d3:82:4f:72:cf:65:cd:7b:73:9d:ce:
8f:97:03:cc:86:e4:dd:18:7e:0e:ef:ba:53:9f:66:b5:9a:95:
fe:99:d7:fc:61:57:ce:66:fb:b8:93:70:65:5e:68:ea:c7:b5:
9d:d7:5f:17:93:6a:09:18:23:24:d3:e4:aa:0c:bf:28:8c:a0:
10:2a:c2:a1:f2:b3:10:1d:79:3d:68:8b:f2:5d:de:fe:45:af:
65:8f:cb:86:fd:b4:c0:d7:2e:6c:c6:fe:23:f4:91:e4:2c:74:
f1:20:97:93:c0:64:9a:f8:07:86:0e:76:9e:9d:a1:cf:1f:5b:
2f:56:f3:c4:ab:e3:31:2c:b5:94:c5:a3:5c:75:f3:93:d9:bf:
ee:c2:db:46:d4:13:09:0a:e8:8e:44:75:1c:a7:02:b5:7d:d7:
ef:52:53:11:91:6b:1e:05:5e:f1:d9:15:72:da:b3:b2:4a:3f:
f5:f1:a0:b9:7e:37:04:85:c4:ff:69:22:10:22:0f:c8:d0:ad:
a7:4c:8d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:33:07 2025 by rpki-client