Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/wMviITx4-Ydrde8DagnvJudrSTQ.roa
File: wMviITx4-Ydrde8DagnvJudrSTQ.roa (raw, json)
Hash identifier: Bhx7NILq0TmOVBjEhBEQzkx4nDg+vAlvQ+Bo2NSJwBs=
Subject key identifier: C0:CB:E2:21:3C:78:F9:87:6B:75:EF:03:6A:09:EF:26:E7:6B:49:34
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 019427488265EF9C93060BBDFE1CD1937474
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/wMviITx4-Ydrde8DagnvJudrSTQ.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200906
IP address blocks: 185.72.4.0/24 maxlen: 24
185.72.5.0/24 maxlen: 24
185.72.6.0/24 maxlen: 24
185.72.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:82:65:ef:9c:93:06:0b:bd:fe:1c:d1:93:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0cbe2213c78f9876b75ef036a09ef26e76b4934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ef:a2:61:cc:37:94:9d:e5:ef:88:e6:e9:b5:
81:90:26:47:13:a2:a3:9a:97:b0:76:b4:5e:2b:37:
9e:e6:f7:bc:75:39:d9:92:b2:7c:0d:ff:cb:a4:7f:
ba:e2:23:5b:67:3d:dc:70:1c:a5:19:79:77:14:6a:
54:65:8f:62:ab:32:c1:35:78:ef:57:08:b1:3b:95:
ce:ee:38:ca:21:ee:1a:33:5e:c1:1b:e2:50:fd:8b:
8b:16:b7:34:06:44:38:c0:ea:82:82:36:26:e6:d3:
8f:c7:13:b3:ab:0f:f4:92:bb:27:9f:91:dd:3f:d7:
f7:43:57:f7:e4:42:8b:bc:29:84:aa:3f:01:95:55:
78:bc:72:04:15:e7:dc:ac:f7:ab:18:87:2f:07:80:
f0:c5:9a:05:db:05:f5:9c:62:ca:af:d1:cd:72:43:
b7:58:ac:ca:d3:34:5e:4a:4b:4a:3e:ee:63:fb:a1:
75:c8:a9:8b:3a:05:b5:85:f4:46:98:df:c6:42:ae:
17:99:64:3f:f6:8a:42:06:a7:3b:89:51:96:5f:f2:
bf:42:3c:8b:38:ca:46:7c:fc:b0:a1:08:d5:f0:ae:
9a:b7:51:72:71:8d:24:7e:57:4a:11:e4:b0:58:af:
b5:a8:32:43:28:aa:cd:b3:c7:af:c8:ac:2d:6f:9f:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:E2:21:3C:78:F9:87:6B:75:EF:03:6A:09:EF:26:E7:6B:49:34
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/wMviITx4-Ydrde8DagnvJudrSTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
47:7c:5e:fa:e4:4a:08:45:8c:90:ca:23:55:0d:7b:73:5c:fc:
76:af:b8:e3:ec:66:0b:51:2b:b9:9d:9b:d8:be:71:83:8f:fd:
8a:7a:15:0b:e6:2d:7c:c4:f8:4f:b8:bd:57:af:4d:32:89:f0:
1c:e4:4e:f8:07:2b:67:43:f5:bc:8a:96:2e:be:6b:b3:ec:fa:
bd:3b:38:76:4f:be:d6:27:c2:9c:91:8a:4f:74:5a:36:c1:0d:
5f:87:57:71:ea:cc:66:af:5a:f4:0e:2b:f6:cd:82:56:d7:e8:
33:ad:36:36:64:20:65:04:0c:0f:e6:fc:08:c7:e7:14:ef:72:
89:b4:37:1b:19:a1:47:05:73:42:0c:13:5b:ad:9b:e3:c6:99:
72:f0:48:91:ef:1d:b5:54:45:ff:d5:66:3a:f2:9a:77:44:96:
54:8d:42:82:ea:5d:b3:10:f5:96:e4:fe:4a:36:6b:2a:10:15:
60:73:3c:4d:a2:7b:29:a9:81:6a:a7:42:86:e7:48:73:21:a1:
b9:b9:1f:63:9b:d6:c3:f1:57:2e:5a:24:df:a2:d7:db:77:f5:
34:f3:4e:fe:47:29:55:29:6e:11:16:8b:52:a2:36:c9:d1:fb:
1e:67:0c:5c:79:43:7e:73:db:b0:ca:57:df:89:f6:22:55:db:
4b:0b:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:00 2025 by rpki-client