Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa
File: wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa (raw, json)
Hash identifier: W+sz9TCOY3wSjFpbMXmTZluRFQBYvoOF99W06O++/x8=
Subject key identifier: C2:AC:31:02:F1:59:89:9E:9B:3D:10:E8:03:4C:CE:F9:B3:61:84:87
Certificate issuer: /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial: 019423D80243C02FEF9DDAA1914022DA37C5
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa
Signing time: Wed 01 Jan 2025 21:49:06 +0000
ROA not before: Wed 01 Jan 2025 21:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8400
IP address blocks: 193.203.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:02:43:c0:2f:ef:9d:da:a1:91:40:22:da:37:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2ac3102f159899e9b3d10e8034ccef9b3618487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:fa:21:48:82:74:64:a6:24:ce:e2:c1:96:
4e:7f:89:cb:37:78:57:9a:e1:74:dc:28:a9:1b:d4:
8a:10:93:02:b4:cc:d7:31:d1:c2:19:3e:5c:d4:58:
46:78:0d:37:92:83:34:21:4f:33:a0:b2:dc:3b:8f:
71:46:7e:73:91:19:c9:97:90:84:67:23:2f:14:15:
7f:18:b4:83:75:5e:5b:4d:b9:49:a2:67:80:3c:67:
6e:d3:f1:d4:dc:da:38:f2:09:88:96:54:40:cf:ff:
91:4a:c2:e8:68:da:ff:bd:f1:9e:e3:c1:a2:da:23:
99:1a:26:56:c9:57:42:8f:71:27:b3:24:b4:33:d6:
10:00:f9:e0:ad:c4:3f:17:70:4e:fa:11:9d:d7:2b:
54:98:84:d6:6c:b1:bd:17:86:a5:c1:e4:0b:e8:73:
09:46:ec:f4:ed:39:ab:29:55:ff:20:17:1f:a7:89:
a1:df:8f:14:72:f2:34:d6:13:41:ab:18:e3:7e:c5:
92:28:54:37:48:d3:d3:5b:ce:2a:9c:67:c8:3e:3a:
fa:00:ad:bb:d1:cb:b5:8c:7c:d4:49:5c:ad:20:29:
a4:8d:47:32:1d:54:14:37:f6:eb:3f:b3:d5:30:0d:
f8:93:ef:61:80:8a:43:49:4c:a0:3a:a7:b9:12:b8:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:31:02:F1:59:89:9E:9B:3D:10:E8:03:4C:CE:F9:B3:61:84:87
X509v3 Authority Key Identifier:
keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/wqwxAvFZiZ6bPRDoA0zO-bNhhIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.18.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:1d:84:29:8d:c3:c4:67:2b:23:5e:9e:97:1d:30:95:64:94:
cf:f8:84:d0:1a:59:0e:96:9a:01:25:19:03:d9:d0:41:fd:7c:
94:f9:63:5d:52:84:f6:9e:85:03:95:bb:1b:56:99:10:27:39:
fd:45:76:fc:fc:44:10:e3:a7:05:db:df:be:0a:34:47:95:5a:
a6:22:ee:8a:3a:cf:45:c2:3a:c2:47:ca:b3:93:1b:62:95:96:
de:d5:3e:c6:63:82:ba:9b:46:c5:f4:e8:60:b4:3b:61:35:7d:
a9:55:79:76:08:ed:60:fc:3c:4b:96:36:9b:f0:66:8e:a2:39:
42:a4:c3:31:3c:a0:44:02:99:d6:72:df:6d:71:c7:20:0f:14:
db:fd:b3:33:63:d1:a1:74:40:7c:d5:68:85:fc:b6:6b:af:f4:
a0:a4:4c:8a:af:e5:49:94:42:17:cc:29:03:14:df:5d:37:53:
70:b5:53:d7:f9:21:f8:43:ad:10:36:9f:fa:4f:04:ac:82:4b:
10:77:b7:bb:88:9a:9b:84:46:6e:8a:24:fc:f8:da:78:f2:d2:
24:da:f9:62:b4:24:1c:26:f0:23:34:ff:5a:83:07:e6:1c:34:
44:95:f7:42:86:63:e6:3f:03:ba:68:6a:80:79:f4:37:c5:4f:
52:8d:32:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:04:24 2025 by rpki-client