Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/WrVC9jX5kklKg1NrTkuGqJhi9ss.roa
File: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (raw, json)
Hash identifier: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=
Subject key identifier: 5A:B5:42:F6:35:F9:92:49:4A:83:53:6B:4E:4B:86:A8:98:62:F6:CB
Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial: 01942444DAA64656F0F5C7988A053C1D0559
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/WrVC9jX5kklKg1NrTkuGqJhi9ss.roa
Signing time: Wed 01 Jan 2025 23:47:59 +0000
ROA not before: Wed 01 Jan 2025 23:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198785
IP address blocks: 195.114.113.0/24 maxlen: 24
195.130.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:da:a6:46:56:f0:f5:c7:98:8a:05:3c:1d:05:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ab542f635f992494a83536b4e4b86a89862f6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:c1:d5:6c:74:31:71:a2:2d:e3:90:c9:95:
ad:0e:dc:38:4f:d7:0f:45:d9:95:98:10:b2:9d:e8:
a5:15:9f:07:df:d5:02:bf:bd:f3:2d:7d:e1:1e:01:
36:ca:48:ab:67:e7:ed:80:5e:e0:f6:3c:96:f6:b5:
95:81:51:35:47:07:8b:b7:e6:98:8e:fa:1c:38:54:
d2:8a:c6:58:15:aa:a4:78:0a:06:78:f0:5f:01:33:
12:cc:be:71:62:d0:b3:95:79:f4:c2:27:88:c4:77:
65:09:aa:4f:89:95:ae:2e:0f:50:00:53:88:f6:3a:
0b:44:d8:95:08:3d:4d:b9:8d:2b:b3:1d:87:65:a5:
4c:a0:59:f7:fd:80:18:24:1c:7c:be:cc:40:9c:0c:
e2:47:08:56:6a:7c:ab:43:39:0a:b7:80:c4:08:60:
dc:6a:d5:83:9e:ec:9b:07:c2:bd:c2:92:80:de:92:
82:95:c1:c3:f7:7c:dd:b8:7b:85:a1:34:65:c7:06:
41:b6:5f:ac:8d:f0:d6:d9:da:fd:a4:e7:75:09:3c:
41:9b:05:d2:9c:99:7e:63:7b:0b:fc:b0:1d:a9:12:
28:3b:00:c2:92:4f:dd:c9:03:cb:04:e6:85:29:3b:
54:61:05:01:fb:79:8f:c4:c5:e0:eb:b8:61:7f:69:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:42:F6:35:F9:92:49:4A:83:53:6B:4E:4B:86:A8:98:62:F6:CB
X509v3 Authority Key Identifier:
keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/WrVC9jX5kklKg1NrTkuGqJhi9ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.113.0/24
195.130.192.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:f8:5f:49:b9:c6:09:f0:17:99:52:0b:76:59:58:bb:a2:b6:
e7:fa:0a:25:e6:40:22:c9:c1:c8:ba:3e:0c:87:33:59:b8:72:
23:75:9f:34:24:81:0d:60:cf:76:8d:46:73:58:be:a8:eb:ac:
df:2d:a0:b9:2a:74:7c:0e:96:3c:cb:c9:7e:ff:67:73:1e:e9:
68:93:b7:c3:7a:12:df:73:dd:99:14:63:b6:ea:35:57:47:38:
7d:8f:22:29:0f:b2:b1:62:92:48:8b:8e:22:60:f5:6a:a1:e8:
be:34:d0:43:bd:e7:7f:27:98:42:fa:40:c9:27:26:7c:42:51:
a0:db:7a:90:fb:32:96:13:63:b8:bd:2d:82:22:51:e6:61:8f:
ac:93:e2:39:44:6b:11:c9:23:21:47:57:25:31:bd:10:51:19:
4c:df:d4:d8:b2:46:1c:29:9c:70:17:07:62:cc:d3:2c:e8:cc:
d5:9a:07:25:79:35:7c:1d:14:6c:37:b6:42:43:bb:5a:da:83:
1c:db:e6:a8:7f:a1:40:32:5f:0e:05:14:26:88:6e:14:74:76:
95:66:39:c9:f3:62:b8:8d:58:db:e2:f7:a4:a8:c6:00:f5:f7:
d3:73:de:95:15:51:56:d1:84:09:0b:a2:b6:47:06:30:a1:21:
51:59:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:47:55 2025 by rpki-client