Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa
File: Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa (raw, json)
Hash identifier: Uptxk6RyuEDjV95/pWCt6r7aqnAlPu42fj+GVRxV0LQ=
Subject key identifier: 5A:CD:4B:59:BF:E1:D0:67:6A:B1:F4:07:2E:20:2C:86:72:9A:4C:D6
Certificate issuer: /CN=29b79380fe407439cc2ecd3fac18157db36cf768
Certificate serial: 0194266BF91CFAB055B78333289A3B683CB7
Authority key identifier: 29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206228
IP address blocks: 185.77.252.0/23 maxlen: 23
185.77.254.0/23 maxlen: 23
2a05:6740:4060::/46 maxlen: 46
2a05:6740:40c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f9:1c:fa:b0:55:b7:83:33:28:9a:3b:68:3c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b79380fe407439cc2ecd3fac18157db36cf768
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5acd4b59bfe1d0676ab1f4072e202c86729a4cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:d0:a0:d1:a9:a2:e7:ef:8b:5e:f5:39:da:
70:e9:2c:e7:29:69:da:fe:6c:96:69:87:32:73:31:
06:6c:d8:49:90:1d:a5:bc:77:8f:b0:5c:c4:9c:9f:
dc:f1:59:47:15:c5:fc:68:25:df:07:b6:cc:c6:4d:
48:cb:21:bc:ea:91:b7:80:b0:70:a6:43:47:ef:c4:
19:4b:63:40:19:e4:2f:43:db:9a:c9:18:55:42:39:
f9:b3:55:93:b1:f5:67:54:d7:92:4e:ef:a7:98:a4:
bf:47:7f:8f:27:c8:ca:5a:24:ff:cc:59:bb:fb:26:
9d:e9:92:38:87:81:c5:0c:6c:62:d4:a1:a7:5e:48:
b9:bc:38:ef:b8:cd:8c:d8:c9:78:9a:ca:4f:3a:6b:
70:22:0b:30:5f:a0:18:f6:45:ab:10:20:ab:9f:19:
82:ce:fa:58:34:6a:ee:c2:97:28:73:a5:28:c0:4e:
e6:43:c9:5b:6d:b0:19:df:bf:e1:4e:92:9b:03:c4:
9a:74:77:05:dd:a0:e5:2a:47:cf:8b:70:0c:d3:92:
90:95:33:60:ff:d0:7a:96:e1:3b:35:38:ac:bd:78:
c5:87:f8:99:44:9d:b8:2e:66:3c:e0:bb:a8:3c:b3:
1e:bd:68:8e:d9:7d:c4:9d:4d:04:4d:51:9a:9a:cf:
37:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CD:4B:59:BF:E1:D0:67:6A:B1:F4:07:2E:20:2C:86:72:9A:4C:D6
X509v3 Authority Key Identifier:
keyid:29:B7:93:80:FE:40:74:39:CC:2E:CD:3F:AC:18:15:7D:B3:6C:F7:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbeTgP5AdDnMLs0_rBgVfbNs92g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/Ws1LWb_h0GdqsfQHLiAshnKaTNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/393842-e7ef-4893-9c1b-1e842118db6f/1/KbeTgP5AdDnMLs0_rBgVfbNs92g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.252.0/22
IPv6:
2a05:6740:4060::/46
2a05:6740:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
0b:68:29:3a:da:75:5c:36:df:d7:14:fd:97:ec:b0:15:60:dd:
cd:e9:cb:5c:a6:06:60:4c:44:34:e6:6c:03:5c:c2:30:d8:fd:
12:ae:d9:5d:d7:a1:b5:db:ae:4e:b3:98:8f:fa:ef:99:47:22:
c2:ab:60:33:5c:ff:89:f4:eb:76:f8:3f:87:75:e4:90:2d:a2:
b8:e4:11:60:15:42:19:6d:58:33:85:52:5b:22:eb:31:7c:8d:
1d:62:1f:0c:82:18:42:db:3b:0f:c6:fd:80:82:f1:eb:f9:01:
7d:62:5d:00:73:97:4f:7d:b0:75:56:04:e5:17:9d:e8:ee:99:
c2:01:95:23:c3:09:55:11:e9:9b:a4:7a:a3:1c:be:9a:79:96:
01:18:2d:53:33:a3:50:39:08:3b:0e:b2:bf:c8:ec:e2:85:df:
0a:ac:ce:71:53:d6:b7:2f:08:d9:95:30:05:57:2e:65:a2:e7:
2a:df:8d:11:2d:43:ab:d1:e4:8c:ac:b4:49:7e:73:f1:14:c7:
f8:be:9e:d2:9a:5f:8b:75:10:7c:27:13:60:08:b5:c3:ee:dc:
12:19:0d:e3:61:07:cf:61:a9:96:45:c5:90:0a:8d:9c:a4:e8:
e0:3b:e0:8b:35:62:87:09:08:cb:23:5b:34:bb:10:10:2f:fc:
65:17:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:36:24 2025 by rpki-client