Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/W0mc7WeTNbvVyKRZnKoY5IklP-A.roa
File: W0mc7WeTNbvVyKRZnKoY5IklP-A.roa (raw, json)
Hash identifier: BnijXL5FMZmk2zWfbqgaQXF8ehYBDzpPQFPkyywiPoU=
Subject key identifier: 5B:49:9C:ED:67:93:35:BB:D5:C8:A4:59:9C:AA:18:E4:89:25:3F:E0
Certificate issuer: /CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Certificate serial: 0194236A3D62CC7261630BC02B009183A2C1
Authority key identifier: 41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/W0mc7WeTNbvVyKRZnKoY5IklP-A.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8976
IP address blocks: 193.105.64.0/24 maxlen: 24
2001:67c:e14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3d:62:cc:72:61:63:0b:c0:2b:00:91:83:a2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41600300eeed5af5d7fc09d8fc158b65935ed057
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b499ced679335bbd5c8a4599caa18e489253fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:23:e1:b5:86:04:cd:e9:67:12:d4:97:b1:
b6:10:46:1a:e0:3d:7c:90:60:16:5d:7d:c5:2f:44:
86:72:46:e0:4d:a7:62:f3:21:cb:65:c9:9d:87:8a:
c6:6c:4f:1a:9f:86:92:45:ac:05:2c:5d:01:22:a8:
e2:17:85:f2:92:85:83:85:d0:77:e1:c7:e4:9d:c0:
8a:bf:2e:2b:b9:3b:17:5a:09:ad:9e:b4:18:ea:ef:
a1:41:2b:5a:b5:51:a3:66:dd:17:13:a1:9c:63:8c:
82:1c:e0:95:c7:b5:1b:50:88:8e:82:ff:86:a4:17:
a8:a9:a2:27:ce:b0:8c:74:e3:2f:d5:7b:96:0b:01:
3a:58:ff:c3:ef:90:6b:d2:0d:de:1e:95:45:27:ff:
64:ba:a9:5b:90:fe:bb:9b:bd:c6:ca:f8:18:85:eb:
00:ea:f8:58:8b:05:d6:2f:d5:81:ac:f4:08:9e:e0:
34:03:40:4b:61:d3:8c:dc:44:74:61:1a:31:d9:a3:
41:a0:34:c3:e5:2b:1a:9e:6f:1a:4b:a2:6e:4a:26:
03:26:ac:11:56:7c:19:e5:45:9c:23:0b:0f:c1:05:
42:bc:45:47:b2:64:1a:31:55:c7:e7:e6:c9:18:c3:
22:df:4b:79:77:ef:ef:5f:8e:b4:cc:d4:a3:d5:2f:
da:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:9C:ED:67:93:35:BB:D5:C8:A4:59:9C:AA:18:E4:89:25:3F:E0
X509v3 Authority Key Identifier:
keyid:41:60:03:00:EE:ED:5A:F5:D7:FC:09:D8:FC:15:8B:65:93:5E:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWADAO7tWvXX_AnY_BWLZZNe0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/W0mc7WeTNbvVyKRZnKoY5IklP-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94fdd8-04dd-4a22-8410-7d79c07173f4/1/QWADAO7tWvXX_AnY_BWLZZNe0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.64.0/24
IPv6:
2001:67c:e14::/48
Signature Algorithm: sha256WithRSAEncryption
79:98:1e:c1:8d:42:c3:4e:b9:70:5a:50:ac:05:2e:92:15:5d:
31:ac:ba:15:ae:5d:f9:87:84:31:27:f1:bf:53:34:1d:03:3a:
c0:61:7f:33:fd:6a:ce:0c:0a:bd:43:fe:dd:c5:ef:ed:db:c5:
c7:47:9d:38:dc:c8:98:08:4c:be:53:d3:44:12:f3:c1:9b:8d:
4b:1a:a7:d0:12:63:bd:50:37:93:9b:a0:7f:73:30:f2:c5:e0:
25:69:ff:4c:96:80:e1:fb:74:d5:35:20:72:69:8b:d0:02:5f:
db:b3:4b:3c:d8:43:4b:ba:da:ea:bf:70:9b:bd:64:8a:1d:66:
d5:48:00:3e:bd:de:f0:a2:b7:c6:af:0c:94:e8:d5:91:ee:54:
f0:2f:9f:f1:37:38:54:55:52:49:b6:96:72:07:05:b2:86:b0:
f3:24:72:94:27:62:62:9a:69:03:7b:66:a0:5e:3e:32:d9:bf:
15:24:85:ed:fa:05:30:ea:0c:25:26:84:0b:48:6f:a6:8f:2b:
d2:01:64:d8:66:1e:80:ca:1d:9f:c9:81:bb:da:f6:01:eb:38:
57:29:39:43:5e:db:0e:44:20:26:16:af:fa:b1:93:a6:fb:e0:
bb:70:47:08:bb:d4:54:7a:6f:18:b3:c6:6b:d1:8d:d3:6f:f8:
35:5a:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:34 2025 by rpki-client