Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WeCt8pup8wDWF42xeyTZdR7k2GQ.roa
File: WeCt8pup8wDWF42xeyTZdR7k2GQ.roa (raw, json)
Hash identifier: EDkq8tNxM3yn5LOawEnrqC45Ne8Yoo76GfpxJFb6xWI=
Subject key identifier: 59:E0:AD:F2:9B:A9:F3:00:D6:17:8D:B1:7B:24:D9:75:1E:E4:D8:64
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1D6A10090301F8036CBB5B0AA5740
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WeCt8pup8wDWF42xeyTZdR7k2GQ.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41694
IP address blocks: 195.56.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d6:a1:00:90:30:1f:80:36:cb:b5:b0:aa:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e0adf29ba9f300d6178db17b24d9751ee4d864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:21:6e:06:63:35:cd:67:3d:44:26:6a:42:
d9:e0:bb:fb:b9:e7:9e:3c:54:cb:64:fc:5c:bb:48:
aa:46:82:b6:11:48:c3:f0:08:c1:ca:f1:55:3d:53:
ff:e3:83:c4:e1:8d:f3:16:36:4f:50:6b:8e:9c:7e:
c7:57:12:88:3c:73:73:ab:17:59:75:90:e8:0f:74:
45:13:33:d1:a5:8a:13:98:d8:ba:2f:bb:71:0b:ca:
7f:03:72:73:ac:f5:d9:1c:23:43:60:6c:ce:4d:75:
99:31:39:7d:97:a9:03:42:bd:bc:32:0c:80:d1:55:
5e:84:0b:b1:a7:91:88:8a:1e:df:23:e2:85:22:53:
d0:6a:68:e8:74:f0:31:36:bf:51:fa:ea:8a:3c:dc:
d7:6a:ec:52:4b:bf:c1:d1:a5:86:23:64:59:63:6d:
68:5d:ca:7f:70:3e:f3:ba:d0:c9:76:a2:00:cb:b7:
c5:5c:c7:fc:f9:48:45:d1:47:cd:5f:25:f7:41:a8:
22:24:3b:26:a4:3f:46:7f:36:1f:4e:e0:62:33:7a:
74:0d:37:d3:e0:0b:eb:16:61:b9:e9:55:f0:df:54:
6a:8e:60:95:32:30:1f:05:6a:10:a6:b7:69:45:71:
65:23:13:d3:1e:b9:fe:7d:01:94:57:ec:25:99:11:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E0:AD:F2:9B:A9:F3:00:D6:17:8D:B1:7B:24:D9:75:1E:E4:D8:64
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WeCt8pup8wDWF42xeyTZdR7k2GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.56.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2d:24:10:a7:27:6c:03:e4:3b:01:22:48:05:f0:ad:f5:e5:
e4:0a:c8:ff:47:f1:73:56:30:64:0a:cd:d8:c7:61:ae:1d:4d:
9c:db:0f:94:99:e4:56:c3:fa:24:de:30:df:bc:0a:da:5d:6f:
d6:85:87:dd:35:b6:0c:fe:26:5b:7b:41:71:6a:dc:5b:49:01:
c2:30:05:6f:6b:16:9a:25:9f:22:44:77:c7:4a:9b:44:3e:f6:
83:ad:9f:4c:09:e2:e5:80:6d:47:31:c9:02:dd:99:19:e6:38:
bb:cc:f1:7e:05:fb:dc:e3:24:6d:1a:02:36:af:53:48:44:d8:
14:87:d2:9d:0e:54:3b:5e:24:1e:14:25:3f:8d:dd:13:64:34:
6d:9b:0d:d7:a5:aa:da:f6:66:1b:ce:79:a9:a8:c3:e1:86:be:
fe:96:a5:72:02:a0:35:5a:b6:7c:a2:38:e1:1a:6b:4d:15:ab:
71:90:27:17:49:74:59:94:33:a0:8d:55:d3:36:16:9b:01:22:
8f:08:d3:97:95:c2:da:41:ba:74:e8:89:47:2a:bc:f1:bd:f7:
4d:8b:b5:77:92:03:98:70:ba:08:cd:ae:3a:de:2a:e2:04:0d:
e7:7b:d1:b4:90:35:87:1f:e5:1e:30:82:50:7e:75:7a:50:8a:
44:cc:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:38:51 2025 by rpki-client