Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa
File: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (raw, json)
Hash identifier: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=
Subject key identifier: C3:3B:8F:88:39:A1:9C:FE:CD:BF:F0:E9:D9:02:3B:87:98:77:3B:E8
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 01941FFA3F79513F2E859E0D71A41188A927
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 193.43.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3f:79:51:3f:2e:85:9e:0d:71:a4:11:88:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c33b8f8839a19cfecdbff0e9d9023b8798773be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:b3:ff:e4:b5:b1:1b:da:e3:6a:46:e1:ae:
80:2e:c9:8c:b0:c6:c6:b6:56:e0:0b:80:16:6c:3a:
f0:a9:2f:6a:66:98:b1:c9:c9:c3:6e:81:31:72:0a:
8e:dc:1c:a7:aa:29:84:fb:77:eb:53:aa:5d:53:bd:
6a:59:bb:4b:4b:c9:61:39:ac:1e:eb:d8:59:62:4a:
c0:fc:5d:4e:13:c8:89:72:60:b3:cd:bf:70:18:d2:
8e:40:4b:2f:08:5c:f9:aa:06:21:c0:05:28:ef:bb:
a5:9a:8c:00:77:24:4e:85:51:f0:f7:91:8d:37:87:
c1:94:d9:b0:3b:cd:d1:f2:bf:52:55:00:16:57:f7:
9f:6f:93:b3:69:a6:99:4b:f8:35:fc:2b:d6:2a:0a:
b8:a5:36:e8:a6:63:27:82:02:f8:c2:77:40:1b:28:
9b:5b:61:3d:9d:8c:b0:5e:48:0d:f8:0c:da:f4:0a:
cf:6f:7f:9d:96:db:cd:33:f7:a7:cd:15:a0:5a:21:
12:df:31:d8:04:16:3c:9e:3c:a1:fb:06:32:71:e7:
7d:a6:e1:ad:1e:41:7f:90:91:61:dd:63:92:e1:f6:
2f:77:de:38:62:e5:d2:ad:f9:ff:b2:ea:04:17:e8:
45:30:3b:78:82:88:58:08:52:0b:7c:c9:5f:ad:b3:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:8F:88:39:A1:9C:FE:CD:BF:F0:E9:D9:02:3B:87:98:77:3B:E8
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5a:ee:4e:8f:36:b1:c1:66:9c:6b:2e:b8:e5:85:24:05:02:
9f:ca:d6:c9:e7:cd:73:36:19:ee:5d:72:9c:d6:79:c0:8b:cf:
6f:24:07:50:b0:90:2c:ef:22:6f:09:40:de:93:72:9e:91:70:
e6:62:65:07:b9:f9:57:7b:4e:1a:1b:a4:6f:67:86:8b:f1:bc:
94:66:c6:b2:fe:9b:94:2f:a3:48:c2:14:2f:88:b5:3e:d6:c6:
c7:cf:f7:7c:b3:55:d1:6d:a6:e7:df:53:0e:1e:1a:38:72:77:
78:14:73:60:29:0b:b9:84:0a:7a:3a:06:64:f8:80:ab:21:22:
d3:e4:b5:ce:82:2f:c3:a0:a7:98:1f:1d:2a:2f:0d:c3:0c:ac:
4a:0b:97:46:82:b3:79:3b:c1:62:16:f4:3f:4e:24:8d:df:22:
c6:35:4d:c2:84:16:8d:1b:a0:5b:25:a7:be:29:7e:02:1d:8f:
c3:1e:f2:eb:39:60:b0:28:17:30:d3:ae:c9:f1:3a:3c:da:33:
90:1d:7a:45:2b:ce:ef:af:2d:80:24:42:b0:67:4b:3f:45:0c:
a8:dc:de:28:e4:6e:fd:bc:29:8d:38:45:49:e2:82:72:82:10:
b4:55:74:8c:75:ba:2a:9b:3d:c5:62:e6:93:81:e5:85:c0:ab:
bf:e1:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:41 2025 by rpki-client