Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa
File: wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa (raw, json)
Hash identifier: 1qal0bkeh/nfDvlv2LnznS6FzwmXQAEY+XJKvfyD2Pw=
Subject key identifier: C0:8A:7F:3B:08:1C:AA:8B:1F:E1:97:E4:76:8A:B6:40:BB:E7:25:4C
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 01942445790737A5149541084913424848F9
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa
Signing time: Wed 01 Jan 2025 23:48:40 +0000
ROA not before: Wed 01 Jan 2025 23:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209256
IP address blocks: 194.6.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:79:07:37:a5:14:95:41:08:49:13:42:48:48:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c08a7f3b081caa8b1fe197e4768ab640bbe7254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1e:c1:9f:ee:7c:75:d9:da:2f:3d:38:14:0f:
2a:e6:ef:65:71:dc:23:b1:be:27:19:b9:f7:8f:28:
e1:09:40:40:22:b5:63:62:2b:bb:02:45:75:f4:24:
72:2a:ee:d1:40:71:1d:ce:d8:50:6c:0c:e5:a6:0c:
16:9d:c3:d4:35:cf:c2:95:38:03:cc:d9:fa:b7:db:
ec:ec:e9:e7:43:c7:df:52:f9:6a:18:05:42:41:46:
27:cc:9d:ad:a3:a6:67:85:46:ce:b8:97:d6:36:85:
f2:92:ad:8d:02:36:98:5c:7d:47:84:3b:95:c6:c4:
7d:76:35:67:5d:14:7b:0e:a6:04:08:20:48:a4:9e:
39:f8:3a:3f:ec:bb:be:bc:9b:34:67:0f:7b:ec:6e:
55:17:e3:a2:84:6d:46:fb:59:b0:55:20:b6:00:61:
b3:ab:37:3f:74:9e:98:0f:24:0a:fc:c8:e1:46:03:
ee:c8:9c:27:25:7e:80:73:8c:bb:0b:13:03:49:f2:
15:73:2b:50:61:d9:29:5e:9e:dd:3c:09:d8:68:45:
79:75:10:9c:89:ad:e3:08:9b:37:a2:bb:11:61:25:
a4:0d:3e:74:a1:df:d5:73:0e:f2:b9:f6:72:f2:0a:
aa:7e:4f:57:01:19:9f:b5:0a:2d:af:b3:47:ae:76:
b7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:7F:3B:08:1C:AA:8B:1F:E1:97:E4:76:8A:B6:40:BB:E7:25:4C
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:73:62:e9:aa:ce:cf:26:ac:b5:df:6a:d3:da:41:d1:d5:cb:
fe:14:18:22:e1:5a:ad:5f:df:4f:ee:b8:b9:2a:40:36:75:04:
67:50:d1:85:cf:cd:58:18:80:5c:34:c6:6d:4e:48:77:88:9e:
2a:3b:ca:ef:0c:0f:8d:3e:1e:a1:6b:ce:a2:b5:d7:dc:ad:eb:
44:7e:4f:ab:9c:f2:ba:a7:ec:8b:f2:de:2e:57:c7:09:5e:c4:
84:66:b3:c2:0c:2a:60:4f:0d:78:49:a3:e6:72:3d:3a:84:19:
76:4f:a5:06:d5:3c:56:cc:29:76:3e:67:b0:bf:47:e9:50:af:
0a:51:dc:16:18:87:0c:e5:69:2b:3b:5d:d9:d8:e6:b8:0d:08:
0b:bc:30:fa:fd:35:7b:45:a1:77:8f:84:6c:bd:20:30:56:d5:
61:3e:1e:f5:96:1f:22:82:b0:ae:57:5c:23:33:49:2d:bf:61:
2a:f0:4e:e4:7c:da:c7:c2:f1:89:98:c3:f2:78:5e:de:01:5e:
bf:36:ae:75:43:e9:95:26:b7:90:b9:38:a5:4f:95:9c:62:77:
ce:19:2e:d5:cd:24:ee:cd:84:bb:ed:b2:b4:e7:d3:b4:27:e1:
10:75:c5:2c:fb:d6:74:14:28:b5:09:94:86:a7:b4:cf:05:b2:
b1:79:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:56:05 2025 by rpki-client