Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa
File: WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa (raw, json)
Hash identifier: /RcbZ2ujStzbSPjPDGEz6Qg57WsDieIVmjOcowRraSQ=
Subject key identifier: 58:6D:4A:4D:6C:11:07:5A:58:6E:3D:8F:D7:2F:98:6C:95:84:94:C4
Certificate issuer: /CN=8b27483dc16c318e5afff8322930c817fd192c91
Certificate serial: 0194282845FC9566B1B0762ADB6010AADC16
Authority key identifier: 8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa
Signing time: Thu 02 Jan 2025 17:55:15 +0000
ROA not before: Thu 02 Jan 2025 17:55:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49368
IP address blocks: 188.94.32.0/21 maxlen: 21
188.126.32.0/19 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:45:fc:95:66:b1:b0:76:2a:db:60:10:aa:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b27483dc16c318e5afff8322930c817fd192c91
Validity
Not Before: Jan 2 17:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=586d4a4d6c11075a586e3d8fd72f986c958494c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ef:8e:a1:78:d6:8b:e2:c0:9a:fb:76:80:88:
b0:f5:55:5e:1f:75:4d:ee:9f:83:71:61:4e:07:0a:
e9:06:62:64:49:ec:1f:c5:3e:c3:e1:ff:35:4f:05:
fe:8d:21:69:c0:27:71:ea:b2:eb:66:95:4a:af:94:
e7:b2:4b:e0:74:cb:ed:9e:e7:d3:84:a5:27:d7:91:
8f:12:1c:f2:06:34:98:9a:c8:98:25:68:89:23:06:
7c:33:30:df:cb:99:49:33:10:ec:14:b6:c7:b6:1b:
b1:83:bf:d3:04:3e:78:f9:74:2c:3b:83:26:c1:12:
2e:8f:f9:83:60:4d:ec:d7:8a:db:5c:58:e0:0a:48:
5d:7a:ad:01:8b:e2:e4:30:10:73:21:44:f5:31:0c:
29:2f:34:9c:e0:d3:67:2f:c4:1f:82:7f:59:bc:62:
16:59:f0:e3:ec:86:ab:4a:57:db:57:18:d9:a2:d6:
59:01:34:33:2b:18:2d:c4:10:2b:bb:9f:eb:fb:9c:
29:6f:75:db:4d:9a:73:2c:78:e7:95:47:79:9b:ff:
c3:63:4a:c3:f5:56:6d:19:e1:af:0f:31:3e:f0:96:
3c:9a:d9:d3:ce:4e:9c:00:51:15:77:98:57:3a:28:
ce:3d:87:cc:4d:41:b3:65:d9:f7:6c:2c:cc:a8:5c:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:4A:4D:6C:11:07:5A:58:6E:3D:8F:D7:2F:98:6C:95:84:94:C4
X509v3 Authority Key Identifier:
keyid:8B:27:48:3D:C1:6C:31:8E:5A:FF:F8:32:29:30:C8:17:FD:19:2C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iydIPcFsMY5a__gyKTDIF_0ZLJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/WG1KTWwRB1pYbj2P1y-YbJWElMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/559e8c-3825-493d-a8c7-fb893e3908d2/1/iydIPcFsMY5a__gyKTDIF_0ZLJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.32.0/21
188.126.32.0/19
Signature Algorithm: sha256WithRSAEncryption
04:5a:11:ae:e6:82:58:08:c6:fb:c7:74:e6:46:8b:be:c4:d3:
4d:5c:7a:e0:49:e6:6c:15:d6:30:67:8e:0d:ae:5f:f2:5a:38:
5c:55:c8:01:71:ad:2e:ee:f7:2e:af:c0:af:6a:32:a4:c5:c2:
92:31:d1:82:2e:6b:5e:bb:04:31:d6:bb:0f:ae:bc:d0:2a:fb:
62:1f:7a:62:4a:74:ea:df:8b:95:df:b6:65:38:d0:1e:3c:2b:
4f:c3:06:f1:1e:7f:5b:9f:21:3e:1b:02:84:0f:2c:50:33:f3:
47:a8:8e:76:c6:96:4a:15:f4:25:35:d0:4c:5e:9f:9b:fc:b9:
27:20:48:74:e9:d2:cc:01:7d:3d:32:6b:5e:c8:53:d5:f9:7d:
35:be:c7:54:86:d2:a1:fe:ad:59:ac:59:c5:c3:f4:3a:eb:bd:
4e:65:00:88:fb:64:ae:2a:11:14:4b:ff:cb:73:f6:8c:52:f6:
23:05:ed:41:ab:5d:cc:20:f5:20:4b:35:3a:6b:7a:fb:8d:76:
3d:70:c0:68:f6:b4:04:91:3a:40:3f:85:d6:b6:e7:fc:ad:8b:
64:5e:e7:dc:e1:7e:6c:82:19:f8:a5:eb:4d:9a:f0:ab:79:1a:
01:85:e1:30:1d:ce:89:58:40:b5:9f:a2:78:51:aa:fc:bd:c1:
a2:bd:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:47 2025 by rpki-client