Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/WZV7tmEIwHJ8ehut-K9kROGJKis.roa
File: WZV7tmEIwHJ8ehut-K9kROGJKis.roa (raw, json)
Hash identifier: RzP35ulZieWZd2YmyELJo1q+OtM5JfjqnRYO4ysXTzo=
Subject key identifier: 59:95:7B:B6:61:08:C0:72:7C:7A:1B:AD:F8:AF:64:44:E1:89:2A:2B
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 01950E972A2EB7A12F37DA8247FE79963299
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/WZV7tmEIwHJ8ehut-K9kROGJKis.roa
Signing time: Sun 16 Feb 2025 11:49:02 +0000
ROA not before: Sun 16 Feb 2025 11:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214680
IP address blocks: 185.209.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:97:2a:2e:b7:a1:2f:37:da:82:47:fe:79:96:32:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Feb 16 11:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59957bb66108c0727c7a1badf8af6444e1892a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:13:88:e5:7f:af:3b:9e:00:f5:16:a2:09:
14:a6:68:94:19:50:12:b3:78:1c:a4:1d:6c:54:bf:
0e:78:a6:a1:c4:f3:27:57:1d:e5:ce:ee:13:69:d2:
95:2e:06:e8:81:99:d0:3b:4e:16:a0:7b:5e:42:37:
61:ee:13:4c:a1:1f:6c:fa:2c:5c:60:a8:24:74:99:
de:8a:24:ce:74:65:9b:e6:77:42:64:10:23:27:c0:
e3:29:92:57:23:51:45:ba:5c:4c:8a:1c:9a:76:84:
ab:d5:35:77:28:88:3d:f1:99:1c:87:2a:59:54:b4:
db:f2:ea:27:e3:60:b6:cb:a4:25:ad:ad:1f:07:01:
87:b7:ff:7d:7d:1b:1d:fc:11:78:ea:c0:5c:66:ce:
16:94:e7:55:dd:9c:15:92:73:b3:63:ce:b0:50:cc:
12:e9:18:dd:b6:27:8b:5c:cd:e6:23:9f:56:c8:d8:
52:a0:7b:f1:37:ea:f7:7f:07:bc:f9:67:81:82:b1:
f3:f0:65:31:88:de:7e:ca:5d:00:7f:76:47:0a:b5:
52:b6:22:b5:01:e4:c5:f0:04:eb:ea:b2:fd:9f:ae:
8b:37:b3:81:8f:aa:dc:31:62:0c:e9:66:0f:0b:e9:
4f:66:79:cf:b5:aa:23:05:f6:2a:bc:6f:0a:6c:67:
68:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:7B:B6:61:08:C0:72:7C:7A:1B:AD:F8:AF:64:44:E1:89:2A:2B
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/WZV7tmEIwHJ8ehut-K9kROGJKis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:bb:6c:53:02:65:ed:a2:75:d1:05:e1:fb:8d:f3:c3:e4:37:
5a:9d:6e:c4:24:a7:5e:cf:8e:b6:6f:f6:9d:65:f3:d1:7f:88:
ea:e9:e9:cb:46:4f:16:1e:45:7a:09:dc:48:9c:f7:bf:74:6b:
74:ce:6c:5e:1b:a8:40:bb:e6:8a:2e:8f:6e:91:ed:89:a7:50:
de:82:70:b6:1c:e2:e4:28:ec:61:dc:df:26:40:58:50:0d:23:
75:07:15:26:84:3d:64:69:39:7e:f2:f1:de:e5:e4:d0:48:02:
0e:7a:8d:94:bf:e2:0a:ce:d8:5e:19:24:36:49:fe:41:72:15:
f6:1d:d7:f9:b0:28:62:c2:61:1c:c3:f8:5b:e2:ca:8a:aa:42:
74:ec:39:1c:12:17:4b:e0:be:4e:5f:96:17:ba:da:df:0f:63:
c2:56:9c:87:29:55:33:7d:e6:7d:16:fb:e3:16:e3:a2:67:29:
f6:73:f1:2f:a5:79:38:10:17:16:2d:12:e6:12:b3:18:22:06:
75:db:31:19:07:74:5c:71:8a:18:81:da:37:3d:0d:76:f7:bb:
fa:af:d2:2e:a4:a2:e8:f5:ec:6f:c5:f2:84:9a:1b:60:9e:52:
14:b3:62:d2:d5:5e:5c:13:ad:30:4f:46:9e:09:4d:e5:6a:a2:
bd:82:cb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:09 2025 by rpki-client on console.sobornost.net