Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/wmXlcNkh_2vesQLMJed5vd6SqTE.roa
File: wmXlcNkh_2vesQLMJed5vd6SqTE.roa (raw, json)
Hash identifier: yFr4o4FxK8GJrbTrCTeUvkik35biGf8xB3yfWuA7Ue8=
Subject key identifier: C2:65:E5:70:D9:21:FF:6B:DE:B1:02:CC:25:E7:79:BD:DE:92:A9:31
Certificate issuer: /CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Certificate serial: 01941F8C4213093751BE50940F86094BAB78
Authority key identifier: 83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/wmXlcNkh_2vesQLMJed5vd6SqTE.roa
Signing time: Wed 01 Jan 2025 01:47:53 +0000
ROA not before: Wed 01 Jan 2025 01:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203187
IP address blocks: 185.82.80.0/22 maxlen: 24
185.238.124.0/22 maxlen: 24
2a05:8e00::/29 maxlen: 48
2a0c:2e80::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:42:13:09:37:51:be:50:94:0f:86:09:4b:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835d37408a225f1a8964f8d72bc99d9bbe533234
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c265e570d921ff6bdeb102cc25e779bdde92a931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:70:8a:28:65:8a:97:21:cb:bb:9c:06:26:
66:1e:61:dc:3b:f1:4a:10:76:0f:db:41:05:ab:9b:
e6:5b:22:4f:d1:1e:5f:d9:d0:a3:65:c1:15:3e:68:
b2:91:d6:9b:91:84:5d:e3:72:4e:a4:6b:a0:06:fe:
d4:46:de:d9:d9:60:05:2d:a6:ec:59:5d:7b:4f:c9:
f6:5f:dd:a4:5e:0e:49:a7:b2:0a:00:0f:49:8f:a1:
59:ca:f9:b0:e7:0d:b4:90:27:fd:94:ce:3c:91:28:
97:ab:cb:9b:9f:c3:49:15:3d:7e:40:60:05:93:e6:
e0:39:6c:55:78:31:72:92:2b:94:6c:5e:fb:5e:1d:
0b:5e:77:61:00:ce:82:ee:12:16:49:9c:f7:5e:f9:
c6:23:b7:81:28:ca:7d:88:f3:38:7b:d6:67:15:e8:
a2:13:14:c9:72:41:01:84:d5:08:20:00:b3:5b:c3:
2d:c1:df:dd:3a:72:93:36:bf:32:d7:20:08:d7:3b:
8b:34:b3:0d:d3:48:f2:47:62:45:62:d8:f5:ec:74:
c0:b7:b0:8c:47:aa:0b:7d:75:78:c0:18:1d:dd:8b:
89:ad:c7:76:ec:7c:3e:30:e2:74:11:a5:74:b9:59:
ab:cd:50:3f:f0:bc:53:0b:37:ef:cc:c1:be:61:46:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:E5:70:D9:21:FF:6B:DE:B1:02:CC:25:E7:79:BD:DE:92:A9:31
X509v3 Authority Key Identifier:
keyid:83:5D:37:40:8A:22:5F:1A:89:64:F8:D7:2B:C9:9D:9B:BE:53:32:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g103QIoiXxqJZPjXK8mdm75TMjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/wmXlcNkh_2vesQLMJed5vd6SqTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/028492-d619-42da-aa64-cb6c674c5a3c/1/g103QIoiXxqJZPjXK8mdm75TMjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.80.0/22
185.238.124.0/22
IPv6:
2a05:8e00::/29
2a0c:2e80::/29
Signature Algorithm: sha256WithRSAEncryption
05:ba:32:0c:fe:e9:c5:fe:8c:54:c8:4d:c6:e1:dc:6d:8f:cd:
76:bb:33:63:ac:63:02:b9:93:2e:95:ea:6a:f1:54:35:f8:e4:
d0:47:a6:68:e1:f4:25:4c:65:25:b1:6a:24:86:1f:b4:61:8e:
00:a7:e2:0b:6c:26:c6:e4:22:a1:22:0e:0f:5c:7c:8e:e1:35:
8f:ac:8a:23:b2:b3:0b:cd:2a:60:dc:3f:7c:b1:e5:b6:33:10:
38:7e:ae:17:30:d3:f8:53:ee:5d:3b:25:cf:30:a3:d0:2a:36:
61:c6:17:88:af:80:8f:0b:e2:57:2c:5f:20:d3:95:98:e8:d4:
7a:ff:6c:8d:0d:5b:b4:85:8a:15:a4:42:6a:8b:54:ef:e3:3c:
7f:bf:66:29:0e:9e:89:cd:06:48:11:27:d9:33:42:34:5c:32:
e3:bb:54:25:07:e3:b3:08:45:e0:f0:21:05:88:ec:64:cd:f7:
de:b2:c5:3d:60:c5:c6:2a:8c:a1:6f:51:be:8a:13:b4:9b:97:
7f:36:76:9e:56:55:c4:ba:1c:b1:5e:9f:91:75:c6:05:21:6b:
8f:f8:e6:44:71:9a:80:64:eb:b6:4f:dc:1f:14:86:ac:2e:65:
b6:a1:41:36:6a:39:ad:30:02:0b:37:8d:09:0b:c0:a1:20:4e:
43:36:16:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:51 2025 by rpki-client