Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa
File: 1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa (raw, json)
Hash identifier: /lrkBjM9dGMr6D7JGPVc5syjsFBtCzanEGLfhb4dKM0=
Subject key identifier: F9:66:59:9E:34:7C:0E:56:6A:2D:48:9B:71:15:1C:63:39:B4:40:35
Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Certificate serial: 0194221F4013AB6CD87310EDDCBDC1C7B03A
Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa
Signing time: Wed 01 Jan 2025 13:47:40 +0000
ROA not before: Wed 01 Jan 2025 13:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212550
IP address blocks: 141.138.13.0/24 maxlen: 24
141.138.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:40:13:ab:6c:d8:73:10:ed:dc:bd:c1:c7:b0:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020
Validity
Not Before: Jan 1 13:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f966599e347c0e566a2d489b71151c6339b44035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:24:65:f0:30:aa:3a:30:41:74:57:5c:23:
d7:9c:18:00:7e:fe:2e:5f:12:0f:a7:5b:c9:48:ce:
d5:f3:f7:3e:a9:2b:62:9f:4b:e4:eb:e0:58:a3:3b:
cd:2a:78:92:81:10:b1:9f:33:df:28:92:eb:1c:c4:
59:42:d0:b0:15:82:fa:ef:89:8c:c0:77:e4:44:53:
a5:29:80:13:97:9a:f4:9a:74:31:70:d6:12:e6:ed:
b1:5c:cb:77:be:00:97:ec:ae:ca:a4:34:77:2f:3d:
63:6e:d9:5a:28:f3:66:4c:31:88:35:bf:8a:38:60:
c2:ab:e4:38:83:5f:ca:12:03:81:3b:97:a4:6d:d1:
0d:1e:83:40:78:6c:2c:79:dc:c4:65:05:df:92:8b:
28:a2:e6:e1:97:a6:8b:9b:01:e6:f3:1b:77:b1:b6:
67:27:c2:2d:66:b6:84:07:0f:02:4b:5c:cb:e9:9a:
3a:4f:c0:c5:ea:1c:b2:71:de:7d:40:32:2d:49:72:
b3:9d:0a:ca:de:5e:9f:8a:6d:a5:88:f7:07:4c:5f:
09:79:84:e2:79:e8:48:fc:22:22:37:c0:ef:71:45:
53:b7:e4:71:a7:63:82:50:37:b3:f1:80:93:2a:4c:
06:d7:67:aa:63:af:95:73:95:b2:81:56:c3:a6:1a:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:66:59:9E:34:7C:0E:56:6A:2D:48:9B:71:15:1C:63:39:B4:40:35
X509v3 Authority Key Identifier:
keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/1-WZZnjR8DlZqLUibcRUcYzm0QDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.138.13.0/24
141.138.15.0/24
Signature Algorithm: sha256WithRSAEncryption
21:b8:96:8e:c8:42:5f:cb:30:d1:eb:75:90:54:97:27:1a:bc:
1a:2d:a5:20:a2:e1:df:15:8f:53:0d:84:22:b1:48:f9:23:e1:
21:93:2a:66:53:f0:c3:ff:e8:f9:0a:eb:53:fa:bf:c3:f6:8c:
62:f0:25:c8:36:7b:dd:de:64:f3:62:ce:8a:7f:49:15:86:2f:
a6:71:03:e9:e5:24:52:34:e3:41:04:65:16:a8:e5:42:0b:22:
d8:41:c1:cc:8e:18:10:0e:a8:cd:48:1d:b7:33:e2:1a:ab:91:
ca:68:bd:2c:7c:ae:80:09:b7:ec:5b:ad:30:0b:02:48:8d:4a:
ee:26:78:00:ef:83:14:46:2a:43:5a:cc:7c:5b:22:b8:f1:92:
c0:6e:b8:43:2e:f4:1a:cd:6c:af:c1:82:8e:40:51:1c:59:64:
f5:79:62:84:73:e7:e0:4c:43:95:69:8c:92:4b:43:33:79:5c:
c5:18:d7:ea:5a:56:98:ef:b6:5d:2c:1d:35:6d:9b:8a:93:3e:
f4:4f:a7:c5:f1:9a:f1:e8:c5:d2:96:f3:73:31:9d:43:2a:63:
f8:7d:7d:ad:28:bb:57:27:ec:45:ec:85:24:b6:e8:48:06:51:
38:f2:da:fc:14:2c:7f:8f:da:1d:bb:0d:b4:f2:4a:11:8e:f0:
d5:f7:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:14 2025 by rpki-client