Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa
File: wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa (raw, json)
Hash identifier: Wo5vjTxSHNPOFI8oUhIjkfhiLwT8LICLQf6Pc8oi+dU=
Subject key identifier: C2:70:85:F0:6E:99:64:69:D1:F7:38:06:35:70:43:CE:E7:5B:7F:6A
Certificate issuer: /CN=3298056b806a7b7cc1633345dc55836a45a244c7
Certificate serial: 019420D5C3655625C907642784DFEB8EC674
Authority key identifier: 32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa
Signing time: Wed 01 Jan 2025 07:47:47 +0000
ROA not before: Wed 01 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38927
IP address blocks: 193.19.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c3:65:56:25:c9:07:64:27:84:df:eb:8e:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3298056b806a7b7cc1633345dc55836a45a244c7
Validity
Not Before: Jan 1 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c27085f06e996469d1f73806357043cee75b7f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:dc:79:a1:cb:dc:5d:41:dd:e2:2c:a0:b7:
c5:29:6f:8c:3e:18:ad:da:7d:cf:ca:fc:b2:23:3f:
bd:e0:e6:58:4d:30:02:4b:2c:23:d5:88:40:74:bc:
f9:a2:a8:ea:a7:f9:7a:33:c1:e5:56:af:da:e5:42:
3a:55:f7:ce:77:3c:cf:e4:f6:c8:ea:1a:8c:af:3a:
ac:ef:84:08:e3:77:30:0a:d7:f4:b0:d3:d3:7f:0c:
18:43:ff:3a:19:e5:f3:47:e8:8c:f7:33:4d:23:cf:
dd:be:8c:b4:b5:2a:b1:8c:5e:d6:4f:29:fc:c4:90:
1a:ab:77:95:7e:e9:56:63:62:3a:6c:35:72:18:8e:
11:49:ac:6e:b4:55:79:f6:bd:55:41:fe:fc:20:4f:
2b:a8:42:3f:1e:2f:65:76:4c:28:1d:96:7d:95:5c:
5e:7f:4a:7c:0a:41:f0:05:18:32:1b:8d:9f:a8:c3:
06:57:f8:c5:6c:63:96:44:76:f5:a6:5f:cc:14:27:
52:b9:2b:6c:0f:24:62:8e:3b:b5:0a:47:32:47:50:
47:8b:cc:34:4b:c8:95:c2:e1:e8:01:c7:e1:db:f7:
15:85:29:08:43:24:1e:2c:ec:fb:ec:4f:23:fe:d7:
2b:fb:a0:40:99:7d:97:5f:90:e2:d4:81:f8:58:ce:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:85:F0:6E:99:64:69:D1:F7:38:06:35:70:43:CE:E7:5B:7F:6A
X509v3 Authority Key Identifier:
keyid:32:98:05:6B:80:6A:7B:7C:C1:63:33:45:DC:55:83:6A:45:A2:44:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpgFa4Bqe3zBYzNF3FWDakWiRMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/wnCF8G6ZZGnR9zgGNXBDzudbf2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/bf2bb4-36d3-4b17-8bcf-44a957132639/1/MpgFa4Bqe3zBYzNF3FWDakWiRMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.112.0/23
Signature Algorithm: sha256WithRSAEncryption
10:1a:72:b3:ae:13:f6:82:e3:74:35:c9:56:0f:6b:be:4f:06:
39:6e:7a:91:59:b5:27:7f:be:55:35:e0:4e:c6:89:65:4b:ee:
49:a7:03:c9:03:54:e6:7e:59:e4:52:ce:33:05:7b:a9:6d:8d:
f9:e4:0a:69:55:74:63:05:66:e3:9f:91:e5:9d:97:8d:2d:e1:
b7:20:4c:12:2e:67:65:4a:f5:5c:bf:18:96:3f:3d:c8:26:20:
d0:9e:ff:a1:04:47:bf:0e:3d:e1:8d:87:c9:28:d3:73:28:0c:
c3:33:5a:73:3e:0d:dd:f3:62:ae:f3:8e:00:89:34:d3:d6:a5:
d9:ce:9b:43:bf:9a:eb:0a:08:cf:56:cc:0f:94:f2:28:eb:1f:
4e:67:d3:9f:eb:e7:15:5f:4f:14:6b:5a:a1:4d:58:15:ff:7f:
46:fe:b5:49:34:ad:83:15:2f:66:d2:b4:10:ac:94:7c:9e:3e:
0b:3e:ac:e2:ca:6b:d0:a8:bc:a3:23:9c:2b:20:a7:66:b1:72:
ea:98:b2:12:a3:5b:d1:bc:e5:52:c1:da:f6:7b:6b:5b:0e:c7:
a1:b5:af:a7:78:39:fa:6e:a5:45:d6:66:ff:7b:d6:2f:8e:0a:
6f:df:aa:b8:47:f4:7c:76:f7:b2:9b:44:a8:70:57:18:cd:5a:
f2:58:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:36 2025 by rpki-client