Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa
File: w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa (raw, json)
Hash identifier: 5XUytb4Y6hE0gSnX9zthe9SyxMsKZ/nIOoxPG8EDHcQ=
Subject key identifier: C3:E2:60:6B:79:DC:0E:24:29:52:16:D4:D8:C4:3A:75:12:91:22:74
Certificate issuer: /CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Certificate serial: 019422FC097133595B4002552B0964EDC2EF
Authority key identifier: DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205197
IP address blocks: 185.223.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:09:71:33:59:5b:40:02:55:2b:09:64:ed:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcae4b0471a61872c404142e1f90f5074f0d6f15
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3e2606b79dc0e24295216d4d8c43a7512912274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6b:d2:5e:fb:5b:a7:3b:0a:11:e8:18:14:e6:
21:87:b6:bd:06:26:06:61:8f:b4:26:1a:7b:e7:d6:
ae:51:9f:cb:a0:77:1c:8f:6d:32:0c:8c:75:f0:b4:
2c:73:93:45:14:d5:57:0e:bc:33:cf:17:ee:f0:e6:
25:89:6e:a6:19:3d:b0:2f:5a:af:20:66:02:8a:12:
8e:3e:01:2c:03:5c:5c:b6:19:eb:32:77:6f:36:8b:
12:61:ca:80:9f:46:55:ad:1e:b4:4c:53:5b:70:5a:
8f:e5:3c:37:88:55:6c:ea:e9:68:c3:6d:77:4e:68:
da:5c:be:e6:a4:72:68:f7:b3:fc:ed:87:86:29:0b:
bd:75:b0:fe:77:84:12:f0:f5:09:6a:dd:4e:f9:a7:
b7:e2:b2:5b:2e:36:34:85:30:d8:0a:88:84:4c:9f:
ad:37:80:b1:d9:70:53:60:16:0d:ea:ce:75:96:7f:
84:9d:17:12:73:d2:cc:fc:d6:38:38:17:01:19:45:
12:f7:9d:57:45:21:0f:d6:51:32:ea:7e:f1:3d:a6:
33:1e:83:bb:1c:02:e5:2a:5e:fb:a3:78:ea:49:f4:
4a:39:12:2a:fc:c4:74:1f:62:ab:47:f5:c9:3f:23:
8b:28:d5:a2:8f:92:39:2e:f9:a1:51:78:40:1b:f1:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:60:6B:79:DC:0E:24:29:52:16:D4:D8:C4:3A:75:12:91:22:74
X509v3 Authority Key Identifier:
keyid:DC:AE:4B:04:71:A6:18:72:C4:04:14:2E:1F:90:F5:07:4F:0D:6F:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K5LBHGmGHLEBBQuH5D1B08NbxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/w-Jga3ncDiQpUhbU2MQ6dRKRInQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/67f9a7-a6e8-426e-bac4-4b68b15d301a/1/3K5LBHGmGHLEBBQuH5D1B08NbxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:39:62:54:46:ea:24:93:a2:af:91:12:df:49:74:94:7c:8e:
4c:71:a8:1e:02:1e:0f:9e:2f:22:ee:1c:1a:5d:64:86:0f:c5:
f9:7c:06:22:e0:9d:cd:81:63:84:45:2d:a3:cd:09:5a:92:f0:
8c:09:06:bb:c3:80:3d:bf:61:bb:5d:5e:2f:dd:84:40:46:df:
d6:7b:2c:aa:d2:a9:c1:6c:a3:75:b9:90:e0:3c:26:dd:79:e0:
f2:1a:1b:f9:9b:61:46:5a:36:64:8b:e7:0b:76:fb:02:de:6f:
6b:5d:3e:3f:11:0e:68:86:5a:e3:70:bb:14:13:14:73:bc:dc:
44:75:b1:2d:20:b7:0d:8f:08:b6:eb:49:43:1d:e0:11:40:60:
b3:9a:2d:e9:62:3f:91:d7:f4:9d:53:7b:ad:55:92:0d:a4:88:
85:6f:4a:40:5e:34:c4:68:0d:71:19:5d:f0:ae:af:7f:ee:f0:
89:b4:02:f0:80:85:86:a9:34:d6:7c:10:0d:7d:f2:b8:e8:54:
41:46:4e:8d:06:9d:68:11:36:96:f7:f5:6d:cc:1d:26:35:2d:
e9:b7:ba:f3:ba:f0:e4:72:b5:7b:4f:6e:0a:0e:96:6d:20:31:
e5:d7:8f:ae:34:ee:fc:b8:1f:51:27:dc:44:c4:d4:28:4c:75:
19:d1:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net