Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/WuLl5WEm72PKP2EjN4PzkOllUEM.roa
File: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (raw, json)
Hash identifier: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=
Subject key identifier: 5A:E2:E5:E5:61:26:EF:63:CA:3F:61:23:37:83:F3:90:E9:65:50:43
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 019422FB95A63E52D1BF287F6D5448732B0D
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/WuLl5WEm72PKP2EjN4PzkOllUEM.roa
Signing time: Wed 01 Jan 2025 17:48:20 +0000
ROA not before: Wed 01 Jan 2025 17:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43997
IP address blocks: 193.35.148.0/24 maxlen: 24
193.35.149.0/24 maxlen: 24
193.35.150.0/23 maxlen: 23
2a0c:7fc0::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:95:a6:3e:52:d1:bf:28:7f:6d:54:48:73:2b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Jan 1 17:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ae2e5e56126ef63ca3f61233783f390e9655043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:34:33:83:dc:71:9a:ad:3d:a6:76:5b:d4:
16:25:21:43:ab:ec:c5:9a:25:9c:32:9c:02:73:cb:
3d:92:61:b7:56:22:29:55:00:24:87:1f:66:37:49:
52:b7:94:33:82:90:c8:28:12:04:35:c2:6a:26:f5:
34:d3:c7:31:e1:f2:19:5a:cc:a4:c3:14:02:da:ce:
6c:10:a7:8e:fe:43:94:35:9c:d0:28:e6:30:ee:cf:
1b:c5:c0:4b:35:ff:93:3a:73:64:70:86:fe:a4:f2:
60:2c:2f:5f:30:ba:aa:4d:09:94:ce:0c:8d:bf:3b:
8c:8b:d2:c7:50:3f:af:a7:b6:0f:33:b1:78:ae:ed:
66:8c:c8:71:7b:92:8e:2d:3e:b7:bb:f1:e8:8c:13:
d0:b5:c4:6b:15:7f:cd:a0:77:76:dc:5b:33:f1:c1:
a3:12:19:4c:b7:96:c1:0d:50:55:8c:99:c4:4e:d4:
b7:01:d7:ea:f4:6d:57:77:cc:12:05:ce:2f:5e:84:
65:09:45:76:9d:36:ad:94:2a:30:8f:10:d6:3d:04:
f2:23:a0:ab:bc:bd:af:8c:58:06:a5:3c:f2:98:b4:
e6:59:96:5d:6e:07:80:dc:62:f2:c0:00:7f:6a:ac:
66:b2:24:0c:6c:af:8b:f1:fc:7c:2a:73:f0:e8:85:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:E5:E5:61:26:EF:63:CA:3F:61:23:37:83:F3:90:E9:65:50:43
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/WuLl5WEm72PKP2EjN4PzkOllUEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.148.0/22
IPv6:
2a0c:7fc0::/40
Signature Algorithm: sha256WithRSAEncryption
6b:23:7f:65:7c:c8:e0:02:4b:a4:ce:e4:d5:71:58:99:21:69:
e0:8e:a5:ff:06:d8:21:a7:71:26:53:50:5f:85:c0:2c:ae:95:
53:b2:4a:02:30:4e:d0:3b:e9:5d:c1:48:91:21:b8:95:8c:83:
ab:44:08:3d:25:70:8f:82:62:a0:a4:49:2c:94:46:d4:17:9e:
26:6f:e5:83:57:80:e2:96:8d:f7:24:bd:ec:36:4c:d4:a0:32:
36:a3:e8:2a:4e:e9:0c:ef:c1:87:42:3c:a1:e8:89:b1:7b:ae:
3f:b6:85:ff:0f:e9:36:ea:0b:c1:c0:06:ee:f6:b8:b5:ae:1c:
bd:13:69:ba:5b:10:47:62:97:f3:94:7a:f6:bf:c7:b5:2c:46:
9a:9e:a0:a1:6a:eb:c8:0a:e8:2f:bd:43:35:38:9f:73:d8:9f:
32:3f:86:6c:e7:bc:18:10:93:98:1c:24:9a:ef:c9:a2:f9:66:
e1:91:6b:a8:65:ee:2c:ac:fd:ed:6e:39:07:97:c9:6e:3e:e2:
db:42:1a:9a:86:aa:2a:ca:b5:cb:93:d6:26:c9:ed:7c:a8:a7:
e8:4a:d2:07:dc:9d:6c:e1:8b:93:6f:d0:49:91:26:a3:7c:1c:
69:72:c6:a1:f0:1e:3b:4c:85:bf:d7:5a:46:90:f2:3b:5b:c0:
85:43:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:19 2025 by rpki-client