Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/Wl7r4uJNVYrMjnlZ-z4SsO1Ags4.roa
File: Wl7r4uJNVYrMjnlZ-z4SsO1Ags4.roa (raw, json)
Hash identifier: PydHDotmQzJPAMz0KwvIxTfSMUxz++HoDxMeEIfTsFg=
Subject key identifier: 5A:5E:EB:E2:E2:4D:55:8A:CC:8E:79:59:FB:3E:12:B0:ED:40:82:CE
Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049
Certificate serial: 0194258EC880D40B7113BDD9B77590C5C896
Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/Wl7r4uJNVYrMjnlZ-z4SsO1Ags4.roa
Signing time: Thu 02 Jan 2025 05:48:21 +0000
ROA not before: Thu 02 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 194.126.231.0/24 maxlen: 24
195.114.106.0/24 maxlen: 24
195.114.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:c8:80:d4:0b:71:13:bd:d9:b7:75:90:c5:c8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049
Validity
Not Before: Jan 2 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a5eebe2e24d558acc8e7959fb3e12b0ed4082ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:d4:54:8f:00:b7:02:72:f7:ff:45:70:e9:
40:2d:5b:e2:99:b2:d2:22:23:f7:1b:6b:31:57:e2:
dd:7d:09:e1:54:43:b0:e7:cb:18:06:39:6a:0f:83:
f2:51:4d:07:71:cf:99:f2:21:1f:b2:27:59:4e:4a:
de:78:1a:65:25:fd:50:7e:73:0c:f6:6a:48:a5:78:
57:18:14:b9:58:25:d2:6e:82:53:64:1d:92:93:1f:
4d:75:09:01:76:11:01:f6:d0:2d:ca:f6:35:5d:dd:
85:77:03:1a:ee:2f:d0:dd:51:9c:86:df:68:82:ea:
af:5b:d2:6d:b4:d9:78:1d:a5:48:a0:f1:e3:92:61:
93:0b:35:b8:e8:99:03:75:ab:b7:0c:57:20:d1:5f:
41:80:9d:92:77:8b:99:75:25:92:65:af:9f:09:6d:
f1:dc:ef:0c:b6:88:d3:e4:ca:b9:dd:b8:55:6f:64:
2f:42:f3:74:37:f4:41:26:1f:8c:fb:f6:15:4b:f0:
76:4d:51:38:6f:a5:61:14:33:d4:62:3b:e6:95:58:
2d:40:05:79:57:f5:0f:ff:0d:82:17:94:40:5f:5e:
c4:e1:2a:fa:fd:55:39:70:ae:1c:c0:15:d7:67:44:
c9:1f:44:ed:84:57:d9:22:22:b3:0e:f5:42:a4:38:
fa:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:EB:E2:E2:4D:55:8A:CC:8E:79:59:FB:3E:12:B0:ED:40:82:CE
X509v3 Authority Key Identifier:
keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/Wl7r4uJNVYrMjnlZ-z4SsO1Ags4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.231.0/24
195.114.106.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:54:e2:f3:c1:18:d5:d0:38:6b:47:10:55:1d:01:85:6f:78:
96:71:71:1e:fe:5a:7d:40:4a:fd:7d:3f:e2:1d:4a:e4:3c:c0:
98:68:db:27:0c:7b:e3:4b:72:9a:7c:86:19:3e:a6:39:73:e5:
b8:8a:69:27:a3:54:fb:e1:db:d4:4e:a0:e2:e2:40:0b:a4:28:
03:0a:27:f8:ef:6f:47:f0:dd:a0:ef:e3:4a:93:bf:26:63:b3:
9c:b6:24:cc:38:9f:dd:88:1d:2b:0c:f3:58:7e:50:f5:26:66:
01:86:0f:fc:0d:d9:31:6a:54:50:a9:3d:fe:b8:4a:7a:de:16:
de:ae:7b:e1:a0:20:7a:5e:86:72:f3:bd:88:f9:fd:bb:10:6d:
52:25:4e:d1:c8:39:a7:0f:a8:b5:36:a8:f1:ff:cd:b9:0c:2d:
16:af:29:8e:82:3c:5d:f7:24:43:ed:54:67:91:f2:13:43:f5:
a2:4c:4c:1d:d6:8a:62:ff:d2:34:a7:fb:c4:f8:ef:87:70:fa:
b6:5c:60:35:6d:70:f8:70:9c:ad:42:44:13:de:2b:52:3d:06:
3b:00:55:a0:90:ed:ce:3b:9f:73:fd:95:39:fc:58:b6:2c:08:
dc:b8:a8:bd:d7:80:ef:50:b9:05:b1:5b:ad:b0:b7:4a:90:ff:
77:62:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:34 2025 by rpki-client