Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WfQsimdISfx91Ef7cYATyQIN7d4.roa
File: WfQsimdISfx91Ef7cYATyQIN7d4.roa (raw, json)
Hash identifier: hL6J1XxC9eqb2hyvPaLfMPBZ2q4oqhwcTiAhioDAJQs=
Subject key identifier: 59:F4:2C:8A:67:48:49:FC:7D:D4:47:FB:71:80:13:C9:02:0D:ED:DE
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 019424455B83AE5CA10A26279B005EAA6FDA
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WfQsimdISfx91Ef7cYATyQIN7d4.roa
Signing time: Wed 01 Jan 2025 23:48:32 +0000
ROA not before: Wed 01 Jan 2025 23:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35153
IP address blocks: 185.212.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:5b:83:ae:5c:a1:0a:26:27:9b:00:5e:aa:6f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 23:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59f42c8a674849fc7dd447fb718013c9020dedde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:97:62:46:76:26:de:31:77:db:49:99:a1:
f6:01:e0:a8:a6:51:9c:95:d1:1a:61:f8:2e:c3:54:
6b:8b:98:68:dd:ae:49:95:5e:a1:6c:3b:16:ca:40:
f5:79:9d:d4:90:85:8a:f0:6d:92:06:91:d2:e8:6a:
2c:60:c4:3b:46:a9:a7:bf:9c:c1:73:91:87:c6:06:
95:05:f6:c9:0e:3f:5e:fc:9d:46:ce:f4:11:2a:d9:
32:d7:fc:6a:82:62:a8:f3:cb:fb:c1:ce:d5:57:05:
09:4f:3d:20:11:8a:9a:4d:7c:da:4d:be:9f:9c:e7:
9e:84:d3:4d:18:79:4e:85:e9:a4:31:f7:ca:2e:4f:
05:b6:84:62:fb:0b:37:e1:d6:2e:02:85:c0:55:db:
18:d4:bd:5a:d8:bb:ce:06:7b:fb:d1:c7:2e:db:bb:
1f:a3:1d:0a:db:4a:a9:fc:a0:4e:59:28:31:7e:72:
98:62:36:57:d6:79:cb:2e:cc:79:b8:43:3a:de:f4:
11:a4:c0:0c:62:03:26:21:58:db:ff:c1:97:79:ac:
cd:a3:bb:97:ed:fd:d5:5a:6d:f2:6c:30:8d:0b:b7:
a7:41:82:eb:46:43:ab:68:1e:df:22:d7:c7:90:f4:
e7:7c:9e:fd:e9:28:b3:36:83:88:bb:95:e0:73:58:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F4:2C:8A:67:48:49:FC:7D:D4:47:FB:71:80:13:C9:02:0D:ED:DE
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/WfQsimdISfx91Ef7cYATyQIN7d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.136.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:f7:57:66:f3:a8:64:0c:c5:ba:ad:5b:03:cb:78:71:ad:e1:
9a:1d:a1:c3:36:65:10:f5:5d:2f:e5:02:11:31:a0:08:bb:2f:
93:73:14:88:6f:19:8d:5f:78:11:ce:9d:28:91:8f:a8:60:61:
27:aa:62:6f:6b:8d:6d:b2:ee:9e:fe:24:65:10:74:77:65:ed:
ce:42:e2:8d:be:ce:b3:69:66:5d:06:08:d6:ee:30:bc:46:18:
e8:0b:60:39:2e:b5:45:93:ae:22:40:e8:a7:16:57:27:6f:8c:
2d:3b:f7:10:96:18:9c:14:f8:8f:ce:77:37:60:4f:6b:e3:ba:
70:1a:84:32:39:08:5d:bd:11:63:f0:05:49:3a:f6:d6:9c:23:
05:23:87:6a:e6:12:67:6b:e4:89:68:e5:dd:49:c8:dd:49:0d:
3c:6a:c6:4b:8d:42:08:34:b0:cc:03:b7:4a:07:a5:67:00:65:
86:d5:d8:a8:57:0c:a6:a5:6d:c9:7d:0f:00:f1:ed:b6:16:fc:
e6:f8:ab:b0:3a:2b:17:ec:09:13:b0:29:ba:1b:13:29:cd:40:
1f:12:55:65:9f:9d:9b:3d:9c:d7:56:50:d8:4a:d7:eb:1e:c1:
0f:6d:1c:c3:a0:c3:dc:75:fd:9e:17:85:ea:2f:78:3b:b2:9e:
15:5c:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:52 2025 by rpki-client