Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7WcUp7VboIfJPuJw_2eN0YJowc0.roa
File: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (raw, json)
Hash identifier: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=
Subject key identifier: ED:67:14:A7:B5:5B:A0:87:C9:3E:E2:70:FF:67:8D:D1:82:68:C1:CD
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019427485B6257E91408BB501F7269BB25EA
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7WcUp7VboIfJPuJw_2eN0YJowc0.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60638
IP address blocks: 94.184.140.0/22 maxlen: 24
94.184.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5b:62:57:e9:14:08:bb:50:1f:72:69:bb:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed6714a7b55ba087c93ee270ff678dd18268c1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:96:77:be:72:83:f1:3f:29:4f:e6:d5:6e:
42:11:36:99:c2:be:84:11:f5:d3:00:d8:49:b8:80:
18:8c:66:89:84:a3:44:d3:6a:37:e8:d9:38:5f:cf:
f0:d1:4a:2e:35:43:ee:11:9c:bb:a5:44:7d:6d:8c:
9f:98:43:b9:49:4a:af:b6:79:0d:65:8b:1a:9d:51:
aa:b5:fe:6e:7d:b9:55:45:10:02:02:de:e6:04:62:
13:ee:2f:7b:70:bb:de:ba:81:66:15:1a:4a:90:8c:
32:91:ab:bb:d7:6b:72:5d:d2:36:8e:c1:da:18:fd:
ab:9c:9e:1b:5f:02:cb:92:11:4d:47:fb:90:e7:ae:
c5:ef:ec:2b:82:6d:c7:58:17:ef:71:87:2b:cf:ec:
d3:43:51:6e:c3:57:4b:18:e5:5f:e7:8d:36:bf:1e:
37:95:75:a5:78:0d:a1:cd:df:01:16:38:3d:bd:af:
01:45:5e:90:a6:1c:f2:fb:e1:9e:6f:52:8d:b7:f9:
7c:79:3f:0e:4e:20:2c:6c:b3:99:bf:2c:9f:8b:a0:
70:a5:13:3a:c8:23:cf:80:3e:9e:d8:79:91:12:a3:
35:da:75:78:af:46:af:97:2f:98:32:8d:ef:e5:a8:
16:29:a0:1a:de:a3:12:89:45:98:58:7f:2b:82:94:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:67:14:A7:B5:5B:A0:87:C9:3E:E2:70:FF:67:8D:D1:82:68:C1:CD
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7WcUp7VboIfJPuJw_2eN0YJowc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:24:96:1e:61:dd:4f:c7:13:38:59:dc:93:21:c0:41:30:63:
fc:79:3b:24:b9:c1:d6:d6:30:5c:62:e1:64:8d:e8:f5:cc:41:
ae:08:9f:37:73:a7:2f:73:61:e3:9e:38:02:86:ad:b8:51:02:
97:fc:54:f5:87:07:92:13:f9:0d:f5:53:ff:e2:c4:3a:fa:12:
a4:2a:f6:42:86:d2:d1:3a:0c:80:94:18:f8:79:f1:fc:fa:a4:
c0:b4:6c:73:7a:b3:33:68:6e:aa:9e:6a:1d:95:43:60:19:2f:
d4:22:bb:b1:4b:a9:e2:39:43:b7:b9:54:bc:6d:30:fe:0e:63:
14:4d:e1:b7:fa:e4:40:c8:09:d4:54:6d:38:2f:d3:f2:ce:90:
2c:e7:88:e9:4a:93:d0:d0:b4:f3:e7:dd:51:be:76:6e:51:70:
0f:82:6c:c3:c0:19:d7:a0:53:cc:d4:dd:e8:68:be:0a:18:72:
ba:93:22:cd:e8:d6:d1:d8:fc:8a:bd:4a:28:2a:59:7b:6b:b1:
28:75:57:73:2e:54:a9:2a:00:66:94:b6:2a:2c:28:13:7c:c4:
2d:77:10:6b:b9:84:45:55:b5:ac:3d:14:23:bf:49:5f:7b:9e:
72:92:51:d6:c7:4e:42:21:0c:cc:2a:5b:8f:3b:03:58:12:4f:
5a:0c:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:27 2025 by rpki-client