Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/wmU9vLlEZyocLQ741PHIufr10v0.roa
File: wmU9vLlEZyocLQ741PHIufr10v0.roa (raw, json)
Hash identifier: PwSdmNeGC1GPxHMJkBQhH54QcJIdpfP5NSJA3xMbqZI=
Subject key identifier: C2:65:3D:BC:B9:44:67:2A:1C:2D:0E:F8:D4:F1:C8:B9:FA:F5:D2:FD
Certificate issuer: /CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Certificate serial: 019420D6199952E1B0B6806B27E2AC3D36F8
Authority key identifier: 9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/wmU9vLlEZyocLQ741PHIufr10v0.roa
Signing time: Wed 01 Jan 2025 07:48:09 +0000
ROA not before: Wed 01 Jan 2025 07:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197650
IP address blocks: 185.208.104.0/24 maxlen: 24
185.208.106.0/24 maxlen: 24
185.208.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:19:99:52:e1:b0:b6:80:6b:27:e2:ac:3d:36:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b129de9eba6b47516f0a155734205abbb98b7c2
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2653dbcb944672a1c2d0ef8d4f1c8b9faf5d2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b9:5b:ff:91:00:37:ee:e8:07:83:df:82:fd:
4b:88:d1:74:53:5d:ad:c8:ad:7d:4b:78:8f:65:a3:
87:dc:5e:86:ca:6a:ba:9f:da:00:5d:b6:36:76:92:
3e:37:d8:64:82:0a:f7:e9:b6:3d:2f:c3:7e:a8:03:
b6:12:00:ee:41:35:79:f0:99:b7:ea:3f:09:6e:4a:
b9:aa:4a:83:eb:5c:13:b8:29:ca:ea:c4:d9:7c:9b:
8a:87:5d:2c:17:5f:3a:1e:8c:1d:7d:f1:9f:8a:48:
e2:f6:38:36:c7:37:1a:d4:7b:7d:82:ec:b6:37:56:
ef:30:f9:76:e2:2e:45:d8:0e:19:e8:90:b0:fc:39:
d5:3d:27:73:b3:dc:0f:07:dd:94:4a:00:29:86:04:
8d:75:b2:69:b1:b5:5c:18:cb:06:e1:d2:b8:52:01:
71:50:93:df:d9:95:1b:42:16:bd:58:05:0c:1f:71:
92:b0:aa:48:47:ac:39:0b:1c:ed:b5:31:3d:05:19:
2f:2d:5a:26:86:ca:eb:b4:43:6c:31:73:11:7d:f4:
55:e6:66:0f:a7:e3:86:1e:de:4a:99:c7:0f:77:66:
77:6b:c0:d5:10:42:64:4b:f3:15:48:3e:40:f5:a4:
9f:ac:64:65:dd:d9:5b:78:de:c7:30:bf:61:56:22:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:3D:BC:B9:44:67:2A:1C:2D:0E:F8:D4:F1:C8:B9:FA:F5:D2:FD
X509v3 Authority Key Identifier:
keyid:9B:12:9D:E9:EB:A6:B4:75:16:F0:A1:55:73:42:05:AB:BB:98:B7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxKd6eumtHUW8KFVc0IFq7uYt8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/wmU9vLlEZyocLQ741PHIufr10v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b373e-d314-4459-b858-cf1d1f007a36/1/mxKd6eumtHUW8KFVc0IFq7uYt8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.104.0/24
185.208.106.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:a8:8d:bf:62:c3:0a:19:cf:0f:d4:04:f2:02:a3:92:c4:7c:
f1:25:cf:80:d7:41:d2:2a:b6:12:29:1b:ef:69:b5:33:2d:ab:
3c:59:1b:99:65:6c:8f:08:97:2f:15:82:be:1b:df:7a:2b:49:
f6:b5:9c:86:13:63:b0:70:ba:27:ff:c5:d8:8a:5d:06:af:b0:
f3:f8:05:63:d0:f7:6e:ed:30:b6:5e:02:51:d2:c7:fe:72:6c:
f3:cd:0f:42:cc:f0:bb:4b:9f:ec:be:1e:a0:a9:18:30:96:34:
92:ed:2d:58:0d:5c:3f:3f:0e:95:5b:97:dc:b5:8e:c1:b9:c1:
3d:3a:c4:bc:90:4e:be:fe:11:46:5d:2e:d3:9b:a0:53:1e:42:
92:1d:b6:cb:11:ab:f2:38:e2:86:20:0a:25:11:22:49:f4:1c:
49:7a:2f:80:6a:06:55:0a:39:0e:a3:c4:82:d7:d8:16:72:61:
33:74:b9:3d:26:eb:cc:5a:27:75:6a:2b:26:38:72:d0:62:33:
50:4a:22:57:75:31:97:8e:01:46:ac:ca:b9:34:a0:ab:21:9d:
9c:ee:e8:72:a7:b4:88:21:b1:33:c9:63:69:dc:fe:40:be:58:
ae:70:5e:93:ab:55:06:a5:34:c5:a9:d3:38:78:56:ac:a3:e5:
36:28:48:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:58 2025 by rpki-client