Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/wQzdZzfl80VM1UhSVP27PR4TVJQ.roa
File: wQzdZzfl80VM1UhSVP27PR4TVJQ.roa (raw, json)
Hash identifier: jE0Ey3lYJF/251656uj6JjL0+sSdi/fIvgqbJlEs1oI=
Subject key identifier: C1:0C:DD:67:37:E5:F3:45:4C:D5:48:52:54:FD:BB:3D:1E:13:54:94
Certificate issuer: /CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Certificate serial: 0186DCD77805D2D6FE3A2EC681E4455E1C1F
Authority key identifier: 23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/wQzdZzfl80VM1UhSVP27PR4TVJQ.roa
Signing time: Mon 13 Mar 2023 21:19:13 +0000
ROA not before: Mon 13 Mar 2023 21:19:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60751
IP address blocks: 185.104.216.0/22 maxlen: 24
185.24.233.0/24 maxlen: 24
185.24.234.0/23 maxlen: 24
2a04:2e00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:dc:d7:78:05:d2:d6:fe:3a:2e:c6:81:e4:45:5e:1c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cbbf9348ae558c6efa0c086f24be04cb23c6e9
Validity
Not Before: Mar 13 21:19:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c10cdd6737e5f3454cd5485254fdbb3d1e135494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e3:bb:10:7f:ae:ad:1e:81:10:9b:60:3f:d3:
6f:6e:05:7f:50:78:45:1c:46:0c:32:ac:f9:6d:d2:
69:39:fa:f3:93:4c:ff:db:79:45:8f:69:b1:d2:cb:
76:93:34:8b:f7:40:85:f5:01:2b:83:cd:7c:a2:fa:
3c:f0:bf:60:45:a8:6b:da:2f:3b:91:2e:c1:8a:04:
9d:91:1d:77:0b:d0:58:9e:3d:d0:93:c3:5d:50:bd:
d8:b2:0a:bd:fb:cd:da:06:66:91:d7:98:7d:ed:d2:
42:b6:87:e2:c2:a0:f3:4c:37:7a:7e:0e:66:28:4a:
ac:23:66:32:f4:b9:5c:f1:73:2b:f8:90:bd:c4:56:
9e:5a:ea:75:1d:86:9d:69:ff:cd:76:d9:25:bd:a9:
47:17:e4:68:93:e2:27:79:c1:ba:9e:9c:e5:9e:74:
7e:da:ea:86:84:40:aa:ea:ec:71:97:8b:2a:1a:09:
2a:03:cc:96:ec:f8:39:c0:f8:02:95:ae:95:86:d8:
81:af:c0:83:7d:3b:6a:e5:c8:a5:7e:6e:26:eb:20:
1c:f6:23:47:e0:f7:c4:b6:a1:c8:36:e9:0f:67:23:
38:dd:b5:12:27:0c:9b:98:fe:00:7e:2d:c0:65:ef:
d4:07:ed:25:4d:a2:7b:2f:d5:8a:65:97:5b:6e:5d:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:DD:67:37:E5:F3:45:4C:D5:48:52:54:FD:BB:3D:1E:13:54:94
X509v3 Authority Key Identifier:
keyid:23:CB:BF:93:48:AE:55:8C:6E:FA:0C:08:6F:24:BE:04:CB:23:C6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8u_k0iuVYxu-gwIbyS-BMsjxuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/wQzdZzfl80VM1UhSVP27PR4TVJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e90f9-e8d3-4562-a5b3-621ee052a6fc/1/I8u_k0iuVYxu-gwIbyS-BMsjxuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.24.233.0-185.24.235.255
185.104.216.0/22
IPv6:
2a04:2e00::/32
Signature Algorithm: sha256WithRSAEncryption
57:7b:d2:ae:90:56:5b:e7:f7:0b:71:2b:2a:d4:b9:4f:ef:76:
54:08:d4:15:2d:95:a5:23:d8:5e:55:9a:c4:c7:4c:aa:83:af:
2d:18:ec:99:f8:14:17:d5:f4:52:59:68:34:ca:51:0e:5b:54:
23:01:57:d5:ce:c7:a2:eb:83:c7:e2:0f:fe:dd:58:2c:83:26:
76:a5:5a:43:7b:20:68:48:61:33:54:65:49:bd:e8:50:d8:82:
8d:1e:40:9a:3d:cb:82:38:5d:9f:2c:29:b6:16:26:ff:a9:72:
4f:d1:57:bd:a5:cc:84:e5:05:7f:6a:8c:43:a0:a1:7d:44:8c:
1a:d0:f1:0e:33:2e:c4:15:db:27:c1:c7:fc:cd:a5:07:d2:d4:
94:14:00:1a:c9:da:c9:ed:d3:81:a0:5a:a3:c2:d8:58:db:e4:
67:d7:d9:4d:09:e7:21:59:a5:b9:21:d0:d7:22:c1:e3:15:2f:
90:0c:27:20:bf:fb:49:46:1c:9a:a0:da:00:52:b1:87:15:5a:
f6:32:aa:ff:64:a1:5c:f8:f9:ab:16:e8:0b:4b:3e:e0:29:e7:
37:97:24:f6:2e:62:d8:ce:99:4b:37:5c:ad:43:bd:a6:cb:d0:
8f:15:30:65:e2:b5:d5:3b:2e:e0:11:7a:86:25:29:26:b3:dd:
91:38:8b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:36:56 2025 by rpki-client