Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/wjXCAFtCYc4j2TuMHGwaIU6WXuY.roa
File: wjXCAFtCYc4j2TuMHGwaIU6WXuY.roa (raw, json)
Hash identifier: +OiihMwkrbJSwvaF7jFs9ih8gkILyyju+aoXZse8Bus=
Subject key identifier: C2:35:C2:00:5B:42:61:CE:23:D9:3B:8C:1C:6C:1A:21:4E:96:5E:E6
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019484AA16ADF8E1FCBC7E9938005D6E9F52
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/wjXCAFtCYc4j2TuMHGwaIU6WXuY.roa
Signing time: Mon 20 Jan 2025 17:02:06 +0000
ROA not before: Mon 20 Jan 2025 17:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41981
IP address blocks: 185.105.252.0/24 maxlen: 24
185.105.253.0/24 maxlen: 24
2a06:3a80:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:84:aa:16:ad:f8:e1:fc:bc:7e:99:38:00:5d:6e:9f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Jan 20 17:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c235c2005b4261ce23d93b8c1c6c1a214e965ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0e:58:83:28:49:59:2b:d9:32:a6:97:bd:83:
b1:db:81:6a:af:85:46:ec:ac:e6:60:45:ae:8c:ee:
8c:bb:79:f6:dc:74:d6:77:f3:b2:5b:50:b9:66:d4:
73:2a:a0:10:83:5a:0f:b8:8d:5c:b6:f2:2f:4b:fc:
bb:d0:8b:5f:f8:ed:41:1d:62:09:1b:3a:91:45:a3:
4c:08:cd:a2:5c:e4:0e:51:b8:7d:1b:e9:2e:d3:9b:
29:1d:69:b2:92:f3:3d:64:b8:91:81:e9:25:07:26:
91:cb:c5:b7:2e:7e:40:51:03:1d:06:d8:70:8b:9f:
25:b3:c9:cf:e9:be:62:28:dd:fb:84:0d:12:53:d6:
23:ee:c6:53:f3:eb:6b:cf:52:c6:9a:2a:17:7a:f1:
fd:e4:39:40:9b:c7:a9:c7:f8:f5:6f:76:12:84:f0:
e2:b2:2f:95:40:6a:49:c9:41:80:97:d5:70:06:52:
26:e5:c0:e6:f4:d3:d5:cf:de:92:e3:9a:56:7a:a9:
b4:33:57:11:c4:8a:08:b7:c5:89:d7:4a:2c:87:ee:
c9:2d:ff:4f:2c:b2:07:99:e9:f7:7d:ca:02:7b:32:
31:97:be:08:5e:78:12:4a:40:43:db:69:f2:d0:9d:
82:f5:14:69:96:cb:47:69:c9:2a:77:4f:26:01:6e:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:C2:00:5B:42:61:CE:23:D9:3B:8C:1C:6C:1A:21:4E:96:5E:E6
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/wjXCAFtCYc4j2TuMHGwaIU6WXuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.252.0/23
IPv6:
2a06:3a80:200::/40
Signature Algorithm: sha256WithRSAEncryption
65:00:de:1f:d4:ca:84:7a:24:b0:b1:17:10:9f:56:98:45:c9:
08:29:53:bb:5e:7a:44:61:59:87:8e:8d:96:7e:ca:7d:57:d8:
4e:e4:66:6f:ff:48:0a:dc:81:7f:09:c1:ea:4a:df:3f:9a:b1:
50:50:d7:32:c4:e0:db:c3:fc:15:00:7f:19:a8:80:a6:f1:1b:
0a:77:31:61:9f:3c:2c:7a:97:78:d8:df:9e:27:d2:a6:fd:42:
3c:66:aa:82:26:10:90:b5:a0:b7:b2:13:db:5f:93:b1:f4:d7:
05:d9:d0:c0:34:78:4d:b4:89:a1:9a:f3:33:7e:7b:f7:25:a5:
1c:4d:b6:24:37:0c:8c:bf:a1:69:15:19:8b:11:97:21:dd:f8:
c1:5e:9a:e2:24:e3:a5:d7:7d:0c:5f:f6:20:c5:c3:33:db:1e:
f6:4c:83:6b:31:89:a9:bd:db:3e:72:82:63:2e:0e:e4:7e:bf:
83:0c:3b:c7:fe:0b:b7:a2:f2:a0:0e:97:3d:60:5f:d9:89:44:
bb:ac:42:84:ee:59:c6:f1:f2:2e:c4:02:85:ab:f8:c8:72:7e:
22:81:f0:f5:d9:d2:0b:62:e6:29:3a:a7:ce:7b:3b:97:49:6c:
fd:91:95:44:8a:19:e1:90:dc:dd:3b:9b:5c:87:de:be:f5:ac:
df:cb:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:46:59 2025 by rpki-client on console.sobornost.net