Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/WIA8OwDnJXsVd7ZWWJUN27kAcQM.roa
File: WIA8OwDnJXsVd7ZWWJUN27kAcQM.roa (raw, json)
Hash identifier: gZuP698fLx9bnLRkpWR2AscFPtFd92dqTSvZaiAMZQ0=
Subject key identifier: 58:80:3C:3B:00:E7:25:7B:15:77:B6:56:58:95:0D:DB:B9:00:71:03
Certificate issuer: /CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Certificate serial: 01856F4B47A1CE7F7EE7F60E42DFD0DEA0CE
Authority key identifier: 0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/WIA8OwDnJXsVd7ZWWJUN27kAcQM.roa
Signing time: Sun 01 Jan 2023 21:44:42 +0000
ROA not before: Sun 01 Jan 2023 21:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.88.186.0/24 maxlen: 24
185.88.184.0/24 maxlen: 24
185.88.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:47:a1:ce:7f:7e:e7:f6:0e:42:df:d0:de:a0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b175873adeb83c8f16a2e0e3cbb251e58833a87
Validity
Not Before: Jan 1 21:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58803c3b00e7257b1577b65658950ddbb9007103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:e9:c5:a0:84:d9:3f:30:da:fb:b0:32:11:
98:bf:93:09:9b:39:35:4f:d3:9e:a2:f6:b2:80:f5:
9c:e9:00:62:0c:bf:a2:84:dd:e7:ef:f4:18:e3:36:
85:f5:4c:c9:e5:0e:fa:de:74:97:ed:f7:f1:2d:6a:
7a:d6:75:b0:77:36:7d:ea:1e:e5:9d:3d:a3:73:7f:
4f:de:ab:e5:d8:6c:f5:72:50:bd:fc:cd:9e:e6:78:
77:3b:9e:e7:12:a0:5b:93:e3:93:b3:91:f5:e3:2a:
af:db:01:e4:cf:7b:1e:38:4b:e4:14:e0:30:a5:50:
30:b2:67:3a:ae:f3:20:8f:59:a9:b7:2b:43:bd:8d:
ff:e7:6f:6e:db:16:a9:54:5b:a4:e5:9d:a1:0e:67:
ae:69:45:48:f3:04:7f:7c:2f:ee:e1:57:99:bc:f1:
ff:d3:5a:72:a4:73:ce:18:d1:56:64:fb:f6:e1:27:
5d:8c:66:4e:d9:c7:d4:e2:ad:df:dc:97:b0:c7:4e:
80:8e:6e:74:d7:77:af:f1:e9:f8:25:79:09:9c:e1:
e8:ad:41:45:eb:82:ff:ab:60:8d:9c:c2:e5:d5:3f:
3d:c4:d2:2d:67:86:d4:1c:9f:29:a4:98:32:df:bc:
56:15:60:52:18:05:84:ee:46:9b:7c:a5:7b:5d:58:
4e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:3C:3B:00:E7:25:7B:15:77:B6:56:58:95:0D:DB:B9:00:71:03
X509v3 Authority Key Identifier:
keyid:0B:17:58:73:AD:EB:83:C8:F1:6A:2E:0E:3C:BB:25:1E:58:83:3A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxdYc63rg8jxai4OPLslHliDOoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/WIA8OwDnJXsVd7ZWWJUN27kAcQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/02701d-081c-4d07-b3ff-69fcaf488bfa/1/CxdYc63rg8jxai4OPLslHliDOoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.184.0-185.88.186.255
Signature Algorithm: sha256WithRSAEncryption
47:f4:a7:cf:f7:c6:cf:d6:f7:06:c3:5c:c5:4e:c8:40:85:81:
25:1a:0f:90:03:26:8a:3c:96:ac:66:c4:3b:fb:c2:ea:74:2b:
25:ea:04:42:b5:77:3b:e3:d8:16:cc:58:08:c1:25:12:3e:27:
ba:eb:a6:d6:df:42:c9:5e:27:fb:ff:ea:15:3e:6e:49:5e:f7:
1a:94:88:94:69:51:7a:9e:fb:d7:ad:d4:3a:c7:9d:d7:74:ad:
8a:cd:99:ea:b4:e7:50:e5:17:0f:98:c9:bd:78:4c:48:c2:bc:
2f:8a:48:38:b4:e5:1a:6b:03:ad:30:96:d0:e7:d0:0a:91:b6:
31:29:76:87:bc:39:86:9f:3f:e7:02:d2:6a:8f:23:c3:07:b4:
e1:48:9c:73:10:5c:76:bd:5d:c0:b7:2d:c2:d9:ed:05:73:44:
5c:82:3d:bf:c2:13:08:50:c1:0c:ab:4b:a6:6f:2e:a5:f3:da:
ed:d5:91:5a:34:38:b5:a7:a9:29:e9:64:b4:bc:0a:b9:03:d6:
63:9c:b0:b1:a6:22:01:d5:e8:bd:69:46:d9:10:98:5e:a5:a2:
fc:f4:5c:ad:b8:75:88:6f:f3:4a:5c:42:a9:b4:0f:27:50:57:
00:8a:d4:62:f8:fc:7f:6f:1a:97:4d:27:96:39:9c:9c:93:2a:
3c:09:f1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:06:48 2025 by rpki-client