Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa
File: WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa (raw, json)
Hash identifier: 1LjofbnkllkaD2D3HBXrE3UcL9Erxo+FTPhwZWfcOlk=
Subject key identifier: 59:B2:C1:D4:3E:4C:63:1F:CF:81:F7:05:5A:EB:C0:FF:E5:14:80:A8
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 019425FDD17C2627587435D3ECDA245C6F72
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201841
IP address blocks: 195.146.135.0/24 maxlen: 24
195.146.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d1:7c:26:27:58:74:35:d3:ec:da:24:5c:6f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59b2c1d43e4c631fcf81f7055aebc0ffe51480a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:89:05:5f:45:28:b6:35:9d:37:5a:58:b8:77:
ae:58:84:6c:5e:95:80:b0:f7:d4:e8:67:39:94:3c:
b4:e7:f7:31:f3:0b:59:af:c3:d9:e9:73:7a:d5:e3:
2e:38:63:51:e7:0c:f0:ea:6a:45:6c:7a:af:85:0c:
f3:20:51:d9:23:a1:5b:21:8a:db:6a:63:6f:0d:2d:
f7:9f:96:36:9b:67:73:c9:d9:89:bb:64:3d:72:e7:
51:e0:23:c6:5b:db:59:13:07:34:75:0b:ff:a1:59:
fa:ab:8b:a5:a8:44:b3:c1:70:c2:49:a3:c1:52:e1:
a4:b5:8e:8e:b2:a2:9b:df:34:d8:db:8c:c4:50:61:
04:ed:ea:78:9c:3e:00:87:44:38:41:f1:4e:75:d8:
ef:aa:34:f1:66:21:af:5d:88:2e:9c:e3:6c:fc:cf:
cf:e6:f8:19:4e:36:18:3b:a2:7c:a7:1b:1b:e1:51:
c1:b3:7f:63:74:2f:a2:0c:91:04:6c:60:45:6a:a6:
1b:3e:04:f0:e1:e9:21:ad:c6:0c:a8:7a:6c:87:1e:
c2:e3:1b:e2:6e:41:33:28:3a:44:76:22:14:4b:d8:
fa:1a:3f:e2:3b:20:a8:50:dd:1d:58:bf:94:11:98:
db:a9:3f:56:6d:43:ad:6d:5f:eb:6d:0d:36:1f:fa:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:C1:D4:3E:4C:63:1F:CF:81:F7:05:5A:EB:C0:FF:E5:14:80:A8
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.146.135.0/24
195.146.144.0/24
Signature Algorithm: sha256WithRSAEncryption
78:33:b9:3b:2e:24:34:8f:0c:69:0a:d2:50:eb:89:91:48:34:
4c:9a:c2:b5:86:9c:d4:5a:79:6b:87:8e:e4:39:eb:05:5d:48:
e4:7f:fd:ee:11:ae:0e:43:73:2f:5c:bf:ea:fc:4c:21:80:e2:
0b:ac:35:08:ca:23:de:91:22:ab:1c:c1:d3:9b:b1:66:5d:94:
da:ea:c1:ba:ad:37:37:1a:a9:1c:4f:70:7d:99:49:d6:16:23:
5e:c8:3b:a3:5b:00:2e:3d:0a:84:d3:99:35:6f:4f:d5:27:b0:
d7:fb:d7:4e:b7:a5:d5:74:b1:ba:dd:e8:ac:20:2f:9a:2f:f3:
61:5d:9f:dc:4a:c2:76:c1:a6:ae:95:cb:1f:21:e7:2f:96:a7:
27:89:05:ee:e9:4e:8e:82:af:91:a4:b2:b9:4e:87:fd:a0:69:
a4:f1:19:de:10:9a:1b:fa:db:81:c6:ca:e1:f0:00:ee:11:bb:
0b:f9:c5:cb:79:69:df:55:fb:ba:65:3f:5f:dd:36:18:e7:94:
6c:d0:7a:f6:81:11:02:83:0b:d8:7a:49:68:0c:2d:ea:2c:0b:
60:85:a7:09:34:1c:08:4f:3a:2b:00:d2:13:cf:0c:1f:b7:2f:
bc:de:d3:95:4c:5a:da:b9:32:ef:55:ff:28:ce:45:08:d1:fe:
99:6c:e3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:33 2025 by rpki-client