Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/WUYHmqFyP61kI6BD9sMT7KF9l-U.roa
File: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (raw, json)
Hash identifier: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=
Subject key identifier: 59:46:07:9A:A1:72:3F:AD:64:23:A0:43:F6:C3:13:EC:A1:7D:97:E5
Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial: 0194221FF01BBDC0794809975C3F519FFC44
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/WUYHmqFyP61kI6BD9sMT7KF9l-U.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199330
IP address blocks: 194.169.218.0/24 maxlen: 24
2001:67c:13cc::/48 maxlen: 48
2a04:2b00:a005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f0:1b:bd:c0:79:48:09:97:5c:3f:51:9f:fc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5946079aa1723fad6423a043f6c313eca17d97e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:4b:f7:f6:ee:5f:1f:4d:1b:4c:de:5a:46:
06:ca:cf:fa:0d:b6:7c:af:02:f8:b7:bc:24:dc:f0:
97:0b:3e:2c:c7:7b:22:3f:c9:85:2d:58:76:f2:c4:
b4:56:fe:6f:b8:dd:08:6c:98:a6:04:c1:fb:5a:cc:
98:a7:f8:f7:b7:7d:90:dd:8f:9d:2e:e5:64:d9:47:
4b:b5:05:06:6a:b5:05:a7:2c:c6:50:7c:a0:37:f1:
32:3d:ba:63:c1:b5:d0:a8:59:0f:1c:b0:20:a1:16:
c8:02:70:39:5f:db:43:b4:1e:36:f8:20:11:54:a8:
10:ed:d4:3e:6f:9e:e7:b4:79:bb:63:63:9a:c0:67:
5e:bd:20:43:9b:7c:d7:69:03:fc:87:49:8b:8d:2c:
01:91:a7:0e:94:cb:73:a8:7e:29:d5:af:62:8f:01:
63:60:eb:c3:0d:e2:95:29:cc:68:b3:97:e0:d1:63:
c8:70:9a:29:1f:e0:fc:50:60:46:c8:b3:b0:1a:b2:
6f:e1:95:e1:f6:03:aa:22:13:6d:08:de:fa:9c:94:
21:c4:95:b7:52:e3:9b:c0:1e:86:3d:10:0a:c4:a3:
a8:79:9f:59:5f:49:e2:7d:85:50:d1:13:ba:1d:5b:
48:31:5d:c1:08:48:7d:77:2d:ae:f8:78:7f:49:86:
31:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:46:07:9A:A1:72:3F:AD:64:23:A0:43:F6:C3:13:EC:A1:7D:97:E5
X509v3 Authority Key Identifier:
keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/WUYHmqFyP61kI6BD9sMT7KF9l-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.218.0/24
IPv6:
2001:67c:13cc::/48
2a04:2b00:a005::/48
Signature Algorithm: sha256WithRSAEncryption
96:49:a3:9d:5c:f9:04:ad:ed:56:64:46:92:dd:0c:17:c5:27:
d0:17:e2:fb:68:56:d8:79:f3:c8:9a:85:4f:05:54:46:b2:7f:
b4:41:9c:37:be:5a:b2:a3:e2:4e:c2:c6:d1:73:45:dd:59:8f:
05:c6:0c:97:f5:e0:6e:d1:cb:29:0a:24:66:e5:3c:49:68:3e:
71:0e:03:3f:5e:f9:05:0b:b3:75:43:2c:48:f7:b8:a4:66:ca:
fb:85:cc:79:75:ea:14:56:19:af:d9:0e:21:97:9a:6e:87:2b:
55:10:bd:c1:89:5c:64:52:dc:74:42:ae:3d:38:40:24:70:14:
9e:4c:52:77:a1:f0:4f:a5:55:84:3e:3c:9a:fe:4d:38:b5:86:
aa:97:88:8b:0f:b7:3c:53:be:37:0a:69:1c:61:89:64:2d:8f:
c0:19:ed:85:6f:37:95:85:ee:90:09:12:83:96:70:bf:e8:25:
bf:18:01:76:7f:c9:16:5a:9e:77:d7:8d:c1:69:fd:b4:7a:cb:
0a:6d:b2:b1:02:69:fc:4b:bf:1a:e5:47:ae:6d:aa:80:ea:75:
5b:be:74:12:12:9e:54:a8:ac:a1:49:51:65:2b:b7:d6:33:f7:
ea:3b:1e:02:00:da:6b:a4:40:d9:f1:aa:b4:b8:b8:46:f1:07:
97:5b:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:47 2025 by rpki-client