Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/wjoXDV71PsInXeuUpvcO62W5ARo.roa
File: wjoXDV71PsInXeuUpvcO62W5ARo.roa (raw, json)
Hash identifier: IYWYVzu6RuJzvQEaKtZPVNLNRACPZZoj1K5wBS1Bkaw=
Subject key identifier: C2:3A:17:0D:5E:F5:3E:C2:27:5D:EB:94:A6:F7:0E:EB:65:B9:01:1A
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 0196EE94C9C3414208F3C105A3B5467E2C7A
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/wjoXDV71PsInXeuUpvcO62W5ARo.roa
Signing time: Tue 20 May 2025 16:44:10 +0000
ROA not before: Tue 20 May 2025 16:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 185.123.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:94:c9:c3:41:42:08:f3:c1:05:a3:b5:46:7e:2c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: May 20 16:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c23a170d5ef53ec2275deb94a6f70eeb65b9011a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:81:fe:ae:07:56:79:27:61:e4:18:f7:f9:
eb:4c:ca:65:57:b5:4a:59:a5:c9:83:e6:61:fe:20:
88:7f:c5:fa:28:19:b3:16:e0:70:6d:5c:30:cd:39:
4c:f7:b9:61:19:98:5a:0e:06:3d:d3:b9:1c:7e:20:
81:16:b4:56:cd:86:ca:c0:fd:f8:85:af:cb:46:1d:
da:70:40:81:ef:1f:88:08:52:1e:d7:c0:ef:f8:a1:
f8:73:3e:84:6f:2a:66:31:31:86:6d:20:79:0f:33:
f6:25:e3:be:07:1b:a5:90:d0:d9:63:b6:1e:cb:2d:
6a:6b:7a:b4:d6:25:5b:e7:8f:55:21:e5:8f:d8:3f:
00:ab:c0:1e:88:93:7b:2c:dc:71:98:5a:97:17:b8:
05:db:74:4b:a7:35:54:5c:3d:0e:ad:8a:20:0e:b9:
06:c4:3e:aa:16:52:54:03:b9:de:5e:5e:04:fa:38:
e5:72:ee:c0:d0:6a:f9:b9:64:35:07:8b:c5:4f:78:
d9:3e:69:ea:f9:54:a2:12:3b:2f:55:62:b7:7d:b6:
39:e7:15:79:df:0e:1c:d8:ff:76:81:56:03:87:a1:
c6:f2:f3:60:fd:82:8b:0c:62:bf:e8:7d:ba:8d:79:
0d:f8:d3:e1:ff:70:48:d2:e6:64:9c:94:01:11:c0:
02:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3A:17:0D:5E:F5:3E:C2:27:5D:EB:94:A6:F7:0E:EB:65:B9:01:1A
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/wjoXDV71PsInXeuUpvcO62W5ARo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.123.156.0/24
Signature Algorithm: sha256WithRSAEncryption
20:53:09:fa:f4:f3:2b:4a:93:05:8b:5f:91:47:79:50:62:2a:
22:61:26:13:7e:7e:82:20:60:c1:d9:6e:89:a4:e5:bd:f8:da:
d8:05:3b:9d:63:1d:9a:14:50:07:9a:2c:01:a4:d5:23:05:74:
47:39:be:11:01:56:fe:67:ef:18:92:c0:ee:59:8a:26:03:14:
42:59:30:58:cd:60:1d:40:94:25:86:de:2e:cb:2f:ed:89:f6:
a0:54:d5:a4:11:f7:2a:41:8d:f8:bf:d0:44:f2:dc:4c:98:85:
51:ea:27:e9:b5:c4:b1:98:bb:ca:53:cb:22:b9:70:ed:fd:75:
75:7c:1b:42:70:1d:d8:04:c7:47:5e:a2:11:6d:3b:4f:99:cb:
e6:46:ed:8a:de:f1:ec:bd:4b:6e:44:3f:65:02:cd:92:65:53:
9a:d0:8a:dc:a8:2f:66:f3:25:6e:98:ed:6b:aa:ae:2a:dc:02:
ea:7e:7f:45:1c:16:3e:ab:ec:18:41:ca:b7:c9:72:db:51:74:
fc:cf:64:66:b6:58:12:3a:dc:9c:97:92:27:ef:76:06:c1:85:
04:66:2f:ad:7d:a9:40:06:c5:af:b0:c1:57:ee:27:64:30:6b:
8c:ee:22:eb:8e:6c:cc:db:0e:ac:3b:23:82:13:e5:10:4e:dc:
c6:f2:58:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:13:11 2025 by rpki-client