Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa
File: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (raw, json)
Hash identifier: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=
Subject key identifier: 59:A7:EE:E7:FE:93:07:C1:4F:CB:EA:90:47:2B:A8:00:41:83:01:7D
Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e
Certificate serial: 01942522274B2231D0F04841CFF5B90A9F77
Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214867
IP address blocks: 194.56.152.0/23 maxlen: 24
2a14:5040::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:27:4b:22:31:d0:f0:48:41:cf:f5:b9:0a:9f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a7eee7fe9307c14fcbea90472ba8004183017d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:b0:df:e5:0f:d0:6c:6f:0a:06:33:c6:f4:
d7:1d:08:ab:0f:21:6f:8c:95:20:bf:5d:d8:89:d3:
16:82:11:66:56:75:54:5f:4f:0d:03:ff:74:1a:79:
ac:7c:a2:b6:d6:14:56:ea:a2:47:64:30:24:cf:52:
f6:42:01:8a:00:06:51:d6:b5:ed:6d:39:77:82:29:
9e:37:ca:ef:29:f0:75:8d:d0:ca:0a:47:84:87:0e:
9d:64:84:32:46:c6:1c:7c:0b:46:d1:64:17:30:77:
6e:2e:f7:1e:5b:ca:80:02:b7:83:a7:2d:4d:66:88:
f8:dc:b4:84:62:a4:05:15:1b:f7:7f:22:50:aa:bf:
65:19:8d:a3:5b:a2:17:16:b7:89:ed:7d:9d:02:ea:
6a:c9:12:77:6c:cd:a0:9e:21:6e:04:00:05:07:62:
da:50:c5:f7:95:60:86:8f:11:4a:2b:a1:69:5c:a8:
30:44:02:f4:29:e2:cb:5b:96:64:48:18:3a:8a:73:
09:5b:61:de:03:02:46:4b:ee:f6:06:dc:80:03:4b:
f5:2e:08:1b:e2:4e:3d:54:85:7a:bd:76:d4:e9:22:
8d:f3:f2:b4:ad:a5:0e:b6:01:c5:59:a6:6f:7b:af:
c1:40:e0:4d:e6:89:12:b5:22:71:72:86:11:07:bf:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:EE:E7:FE:93:07:C1:4F:CB:EA:90:47:2B:A8:00:41:83:01:7D
X509v3 Authority Key Identifier:
keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.152.0/23
IPv6:
2a14:5040::/29
Signature Algorithm: sha256WithRSAEncryption
a5:10:57:88:e2:89:a3:5d:0a:97:0f:b5:08:30:67:44:63:c2:
27:fc:1f:f1:15:40:79:21:6a:8f:a5:a3:6a:97:78:ee:62:a8:
e8:05:30:69:bb:b3:d0:a7:42:9f:a3:93:50:cf:eb:0b:aa:49:
fd:bd:7e:df:39:c8:4c:ee:9d:8e:92:25:02:bc:ae:ec:1a:2c:
a8:93:99:59:cd:d2:74:8c:30:e2:f4:cd:54:42:8a:14:ba:40:
fd:8b:e2:69:04:0d:a5:c7:72:e5:22:4a:0d:e5:12:95:7e:55:
36:97:a2:3f:4b:c9:be:8e:a3:13:49:2a:44:2f:9b:32:34:3c:
3d:3a:b0:08:05:96:ba:bc:f4:dd:0e:ed:96:ae:b8:10:15:f9:
ce:77:67:1b:7a:0a:1a:f1:77:69:5a:0a:fd:ca:c0:27:1d:14:
40:f7:c8:ed:64:c1:51:7e:d5:11:0f:a2:2d:30:66:66:b8:22:
a4:14:ff:13:ae:b1:12:41:67:3e:8d:c7:54:b4:3e:fe:a3:2d:
13:5d:87:41:b5:ab:41:ae:37:18:ee:af:83:c6:ff:b8:48:61:
fe:42:c4:48:9f:85:4e:ad:92:d4:f9:37:f0:fd:3f:f2:57:ac:
05:43:e4:6f:f9:ac:76:aa:b3:df:83:55:12:03:a7:16:55:20:
b2:c9:50:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:20:46 2025 by rpki-client