Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/W26ZqjqHqJjDL39ur5MOByNqIds.roa
File: W26ZqjqHqJjDL39ur5MOByNqIds.roa (raw, json)
Hash identifier: 0jU+Z1p1KvFeE69GaV/1hkIxIM6ZLT+t/K51maZsks4=
Subject key identifier: 5B:6E:99:AA:3A:87:A8:98:C3:2F:7F:6E:AF:93:0E:07:23:6A:21:DB
Certificate issuer: /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial: 01941FFA5706B834EE118D27E0DD64E0DAE2
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/W26ZqjqHqJjDL39ur5MOByNqIds.roa
Signing time: Wed 01 Jan 2025 03:48:07 +0000
ROA not before: Wed 01 Jan 2025 03:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51367
IP address blocks: 195.191.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:57:06:b8:34:ee:11:8d:27:e0:dd:64:e0:da:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Validity
Not Before: Jan 1 03:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b6e99aa3a87a898c32f7f6eaf930e07236a21db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:14:85:72:92:42:86:99:c8:9d:ea:92:ca:
ca:48:d7:a0:85:b9:90:66:b3:fe:b1:7d:0b:94:03:
e7:f2:0a:c2:3d:47:fc:56:42:7d:e3:07:9f:5e:e0:
4f:96:77:50:c0:03:8b:6d:1f:08:97:28:dd:0e:7c:
1b:23:d0:0f:bd:26:aa:71:8b:da:53:a7:87:53:e7:
12:06:da:65:e8:01:88:17:c2:29:95:dc:2b:d1:fe:
69:ea:35:3e:48:97:f1:2f:07:90:b7:dd:09:20:46:
b4:b9:8e:d7:e9:61:7a:86:5e:19:90:67:17:5d:00:
e9:5c:0e:fe:76:75:b8:b1:9a:3f:50:38:cb:0f:e5:
ee:12:bb:5b:64:be:08:49:53:ce:a6:70:9d:1f:7b:
85:6a:25:cc:9c:5e:fd:8b:d9:44:3b:d8:21:b9:47:
cf:a2:22:00:6d:45:76:8e:aa:b6:d8:60:9c:07:e2:
06:75:f7:0c:b8:8c:33:a0:4e:fd:4b:58:d3:c0:b6:
e7:04:09:45:2e:2e:2d:39:e5:6c:35:c8:13:cb:4d:
92:d0:b4:2f:87:b6:93:03:74:e2:4a:6c:63:8c:3f:
d7:5d:ab:c0:97:87:cb:47:e7:88:b0:8b:4a:3d:20:
52:b6:6a:01:e1:fe:b9:24:72:7d:2e:f0:f7:e7:f2:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6E:99:AA:3A:87:A8:98:C3:2F:7F:6E:AF:93:0E:07:23:6A:21:DB
X509v3 Authority Key Identifier:
keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/W26ZqjqHqJjDL39ur5MOByNqIds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.72.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:bd:e1:79:70:a5:7c:5e:83:42:f7:02:64:c5:26:2d:a2:86:
f2:81:d2:26:e8:8a:ec:62:ee:73:37:ca:d3:db:3c:8a:a7:9e:
00:a9:bb:d1:f1:9f:94:6c:ef:7e:fe:99:b3:0f:cb:53:a8:ab:
f0:6b:49:58:cb:46:e1:31:81:2b:49:df:af:5c:0e:69:65:7b:
1e:e7:2e:14:47:f0:02:d5:3a:1e:a7:39:75:4a:23:94:d0:02:
b9:67:76:9b:6d:09:75:f1:9d:1f:1c:9f:d7:78:3b:e2:70:1e:
24:10:5f:9e:b9:79:8e:2e:d6:79:ac:11:4e:83:de:ff:ca:32:
3b:b6:e4:fc:64:6d:49:c2:f8:41:c3:44:dc:76:8f:a3:f7:bb:
be:7f:61:04:31:de:61:0b:6a:5d:7c:38:4d:76:22:e7:31:cf:
43:44:c0:95:05:0e:97:0d:c3:e5:7d:47:e2:17:6c:5c:90:87:
64:35:e5:13:08:cf:07:8b:26:53:18:2f:7d:68:28:89:3e:2d:
8c:0a:b8:06:24:b4:5b:d0:86:c6:58:55:06:9d:71:ea:7a:1d:
ad:73:03:0d:97:1f:12:c0:19:b9:85:49:51:fd:24:30:ef:a8:
6b:4d:0a:20:78:46:52:29:e9:1f:a8:0c:00:1b:ca:e8:2d:a5:
c4:95:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:48:29 2025 by rpki-client