Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa
File: wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa (raw, json)
Hash identifier: t8VFb4R1YuauyoB16s9G5smfDaNXuP879i5idHgDRZg=
Subject key identifier: C1:23:BC:41:FE:7F:BF:5A:7E:A0:D0:E2:7D:BB:13:23:DB:54:68:F6
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 019421B1F4522760AA482CD671B698615CE4
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202703
IP address blocks: 194.93.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f4:52:27:60:aa:48:2c:d6:71:b6:98:61:5c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c123bc41fe7fbf5a7ea0d0e27dbb1323db5468f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:38:e1:3c:01:b4:15:21:a7:ce:ce:17:ce:fb:
a0:ad:29:ea:8e:6d:28:6b:57:fb:50:08:5d:5f:c9:
76:f7:63:27:00:25:68:31:c6:5e:b9:d1:89:ec:af:
00:44:d8:ce:e9:8a:5c:93:db:e4:4a:ae:8c:e5:04:
5e:95:6c:17:80:df:88:8e:63:95:eb:49:d9:24:9b:
f9:0f:46:ed:7f:08:95:28:b1:45:22:fe:88:24:f0:
69:53:8e:ab:52:81:71:9c:68:4d:ef:ad:0e:7a:57:
af:bc:66:c8:03:a2:8b:bc:07:8a:b9:04:77:ec:7d:
05:e3:66:37:39:ce:9b:1f:7d:c5:12:c7:35:d1:ae:
cc:ee:62:89:96:d9:89:e8:21:f6:9d:0d:81:c9:e2:
f0:19:34:df:dc:76:7b:53:c4:d2:46:7c:9e:ac:13:
c6:87:3d:72:c6:d1:8a:1b:cf:12:3b:2c:33:e2:87:
c7:e0:75:68:5f:67:bc:3d:e4:0f:d0:d1:7d:90:ac:
16:1e:b8:a8:68:7d:1d:46:39:5a:9e:00:27:1d:d9:
2a:9f:ef:f7:6b:5a:ed:c3:63:3c:43:da:72:8c:24:
28:4a:c3:be:b8:3f:88:c9:80:6d:a4:72:3c:88:25:
ec:8c:d6:51:32:30:a2:7f:92:e4:64:fa:1c:19:e2:
8b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:BC:41:FE:7F:BF:5A:7E:A0:D0:E2:7D:BB:13:23:DB:54:68:F6
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/wSO8Qf5_v1p-oNDifbsTI9tUaPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.79.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0f:a9:40:2e:72:02:50:1c:bc:f4:9c:ce:c6:23:ef:db:f7:
9b:fb:8c:f4:92:c1:70:f9:fc:d8:b3:41:7e:5e:0e:17:09:4f:
fa:43:b2:75:a1:da:b9:d4:a8:37:10:79:e4:2b:08:8c:19:07:
92:40:8d:ef:fe:6e:86:1d:1c:ff:75:1d:45:6b:29:dd:de:06:
12:05:7c:e2:a9:e8:26:d8:67:be:97:86:75:07:ab:19:a3:10:
fa:0e:10:53:ec:61:55:9b:15:b3:f3:a2:17:88:10:15:a2:70:
00:af:ea:0d:0a:aa:ed:3f:0a:bb:c8:3b:31:03:27:e5:95:a6:
2f:ca:42:ec:0f:5e:04:86:b9:57:79:29:62:8d:40:78:70:bf:
6f:f5:f5:4a:62:aa:d6:19:fc:27:4a:a9:d2:3e:b1:37:1d:b4:
99:1f:aa:69:65:ae:06:b7:dc:4c:80:f7:f6:f3:40:b5:c2:1f:
4d:21:af:9a:fb:69:8c:e6:6a:0e:f4:53:e0:8a:23:e6:86:bb:
3b:7d:a4:25:2e:57:64:05:ae:2d:4d:bd:49:03:9b:4b:fd:c3:
e8:f8:1d:30:4c:bd:a4:37:32:82:21:04:a8:41:2b:01:52:47:
c6:b9:61:97:03:10:9b:88:0e:a3:02:4d:46:70:c0:0a:fe:bd:
b5:d7:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:37 2025 by rpki-client