Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa
File: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (raw, json)
Hash identifier: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=
Subject key identifier: 5A:2D:91:4F:17:D3:4D:C8:37:8C:80:3A:54:D0:B1:26:1B:97:B5:27
Certificate issuer: /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial: 0194252159B66B70C1BA5CDBAAB9CF4DD007
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203153
IP address blocks: 212.73.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:59:b6:6b:70:c1:ba:5c:db:aa:b9:cf:4d:d0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a2d914f17d34dc8378c803a54d0b1261b97b527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e1:07:a3:0b:01:31:d5:37:2a:2d:b9:1f:15:
58:f9:a2:64:d6:da:a4:4d:d1:ad:2a:83:fa:c7:9b:
14:90:41:4c:ad:ea:1c:6a:ea:88:41:ca:57:30:d8:
f3:f0:59:a7:d4:69:82:ae:88:c7:4d:2d:1d:80:4e:
c3:28:82:20:60:f0:14:dc:e7:72:b6:75:44:0a:6d:
88:ac:36:5b:07:1b:30:a6:f5:70:5d:f6:c8:2f:10:
91:c7:e0:02:a7:8c:5f:e2:bf:95:c8:31:45:f2:dc:
51:9c:f1:67:d5:c8:92:64:bb:f1:ff:46:e5:94:2e:
6f:6d:03:76:24:0f:0e:1d:82:cd:76:2d:31:3d:e9:
ff:96:15:c0:23:b3:15:83:a7:94:5a:5b:61:bb:39:
12:be:f4:86:94:d0:c1:1b:b8:26:fe:41:43:af:06:
eb:99:a4:de:b2:f1:34:2d:a8:f2:c6:0a:19:a9:ed:
8a:8f:66:d2:8c:75:e6:9c:64:4f:3d:91:66:ff:50:
ee:a0:13:b7:e5:b9:28:8a:9d:72:84:f4:5c:fd:58:
33:7a:71:62:95:5d:99:f6:2d:ab:f1:e5:7e:1b:90:
cf:64:48:72:05:01:45:a0:5a:6e:eb:6c:5c:5c:d8:
6f:91:cb:68:b9:51:e5:ca:75:3f:aa:e5:e4:ca:f4:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2D:91:4F:17:D3:4D:C8:37:8C:80:3A:54:D0:B1:26:1B:97:B5:27
X509v3 Authority Key Identifier:
keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.73.154.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f7:d4:5c:01:43:54:84:b9:89:1f:de:66:60:64:92:69:33:
ff:4c:5a:0a:c9:ae:54:4c:2c:44:19:04:23:d1:6d:5e:fe:19:
c5:a9:36:1e:57:85:57:84:1a:43:87:f4:e5:09:05:97:0d:37:
59:11:46:2b:a8:24:ab:83:a3:9e:c2:45:0a:a2:c1:7c:45:84:
10:b8:59:94:33:ec:d0:0b:a7:24:93:9e:34:52:9a:d8:45:24:
98:ec:7a:f7:4e:34:93:08:5f:ab:21:c8:92:1b:53:e0:49:4b:
de:76:99:8a:89:7b:32:35:e7:10:06:d7:54:20:5b:4b:80:26:
e9:85:e9:17:67:d3:1a:c5:7e:d0:73:16:30:f7:ef:18:39:78:
c6:81:d7:ab:b1:63:c8:1f:52:66:7d:d9:68:9c:02:3c:c9:bc:
d8:09:7a:97:bd:8b:05:da:6f:d1:de:22:d9:e7:87:af:5c:41:
e4:d5:2f:31:c6:0a:d7:fe:33:21:d6:1a:0e:67:16:12:9b:a5:
6d:80:bf:8c:81:bc:44:02:4b:8c:98:64:62:f3:27:4d:76:09:
8d:9e:4c:71:1a:57:23:ce:32:11:74:31:61:f8:cc:e9:d4:6b:
70:10:57:09:52:ae:ff:1b:93:61:3e:ff:d9:38:9e:e8:20:23:
a6:40:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:14:58 2025 by rpki-client