Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/0wKIR9WVw-V7aj10gYMFaIn8xAM.roa
File: 0wKIR9WVw-V7aj10gYMFaIn8xAM.roa (raw, json)
Hash identifier: ezpiXxjoxGxkyYFu1rnYOISEzrrgxtTbU9SYCbnGTBc=
Subject key identifier: D3:02:88:47:D5:95:C3:E5:7B:6A:3D:74:81:83:05:68:89:FC:C4:03
Certificate issuer: /CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Certificate serial: 01942747F8EE7241BFDF40A78138AED6715D
Authority key identifier: 48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/0wKIR9WVw-V7aj10gYMFaIn8xAM.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201295
IP address blocks: 185.252.28.0/24 maxlen: 24
185.252.29.0/24 maxlen: 24
185.252.30.0/24 maxlen: 24
185.252.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f8:ee:72:41:bf:df:40:a7:81:38:ae:d6:71:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=486c2d8af4ce50ce6f43e7df44e0b503700a86c0
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3028847d595c3e57b6a3d748183056889fcc403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c6:d4:7b:2f:99:90:61:21:62:13:50:11:59:
96:cf:60:bd:56:7c:51:8d:5d:93:5e:4b:4f:48:33:
d9:46:b8:3e:93:4f:51:93:c7:3c:28:d5:0d:22:df:
b4:3e:90:20:c1:de:5f:56:9f:08:21:f7:6e:99:06:
9d:be:49:97:df:c5:91:4a:42:c8:ff:89:38:6e:bb:
cd:01:b0:77:90:6e:66:c0:84:3b:12:9d:cf:30:63:
a8:90:a2:e0:ad:cb:75:6d:b6:78:02:62:e4:b2:10:
fa:da:d5:02:ab:25:ee:4f:5f:6d:5c:4d:7f:a7:79:
71:5a:f4:2e:47:2a:28:33:ba:14:12:e6:e9:71:90:
fc:5d:60:40:3f:91:2c:7c:a7:07:96:89:ac:56:b7:
1b:83:b3:a0:f9:a3:64:03:ce:65:3c:b7:09:21:10:
bb:e0:85:0d:28:0c:f3:7e:57:11:14:34:08:09:89:
41:6a:cc:7b:29:86:b1:ef:f1:78:3e:9e:f2:4f:18:
9c:97:52:eb:50:9c:b5:9b:ae:7d:98:41:db:b3:da:
52:83:6c:32:69:ee:e0:b2:11:01:40:3b:41:34:04:
a9:ea:ad:e7:73:04:ce:26:cd:97:2a:bb:00:52:6b:
cf:42:c7:d7:a3:57:64:4c:88:8f:d1:1a:c9:80:d8:
b6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:02:88:47:D5:95:C3:E5:7B:6A:3D:74:81:83:05:68:89:FC:C4:03
X509v3 Authority Key Identifier:
keyid:48:6C:2D:8A:F4:CE:50:CE:6F:43:E7:DF:44:E0:B5:03:70:0A:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGwtivTOUM5vQ-ffROC1A3AKhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/0wKIR9WVw-V7aj10gYMFaIn8xAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d827c0-d6d5-48f6-8f45-f1a5ddd7798b/1/SGwtivTOUM5vQ-ffROC1A3AKhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:34:a0:19:2c:61:fd:50:b2:d5:d2:e0:0d:41:a4:98:e1:8c:
e8:60:0f:11:b3:08:dd:48:ac:23:98:8e:2e:4b:38:b3:20:d9:
f1:af:e6:9d:99:fb:de:c2:08:4b:9f:d5:1f:d8:1b:17:ef:8b:
a5:ec:2c:a4:98:57:52:91:dd:6c:04:0a:cb:c4:e6:ad:99:8d:
50:f7:79:cf:43:f5:fb:5c:20:43:20:03:15:40:f9:aa:c8:0d:
b4:cd:0c:8d:d9:2a:59:0f:3e:4c:7c:a7:21:2e:90:c2:62:77:
20:eb:a9:08:d1:cf:91:d3:7d:96:b6:1c:77:56:27:11:28:34:
08:69:86:b8:d0:57:41:9b:5e:70:41:a2:4f:c6:6a:20:12:34:
21:2d:6f:0e:72:3c:37:3b:f5:e7:4a:aa:e9:1e:dd:ad:65:0e:
d9:2a:e0:c9:68:38:89:e6:d5:36:1c:44:74:34:11:a4:b9:31:
12:4a:54:77:82:e7:61:93:ad:6c:d4:36:ac:fc:69:69:85:38:
fd:cd:4b:3e:b8:5a:65:fd:fe:02:1d:fe:ff:06:7b:ef:22:08:
51:44:f7:ae:f1:57:d7:ea:66:83:c9:68:65:a7:de:31:56:0d:
8d:75:b7:21:bc:d2:61:4f:02:00:f7:a0:c9:9d:24:95:b6:4e:
c8:aa:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:15 2025 by rpki-client