Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/w5lUFfISkdR1rbXpw9EFPEpBgSE.roa
File: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (raw, json)
Hash identifier: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=
Subject key identifier: C3:99:54:15:F2:12:91:D4:75:AD:B5:E9:C3:D1:05:3C:4A:41:81:21
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 019425FCA8F3BC7F6A4FE29D5DA9F2CE760F
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/w5lUFfISkdR1rbXpw9EFPEpBgSE.roa
Signing time: Thu 02 Jan 2025 07:48:22 +0000
ROA not before: Thu 02 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50772
IP address blocks: 195.78.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:a8:f3:bc:7f:6a:4f:e2:9d:5d:a9:f2:ce:76:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Jan 2 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3995415f21291d475adb5e9c3d1053c4a418121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:67:f7:a9:3d:e8:99:40:39:51:74:f0:83:
f2:15:f8:d7:79:f0:ea:c9:5c:6a:fd:45:b3:80:09:
8e:9f:39:37:4c:d9:4d:2b:8a:4b:1f:94:2a:cc:20:
1c:92:d0:4c:6d:a2:de:8e:28:30:23:dc:31:8c:3d:
fb:d6:8c:05:ad:97:0e:04:aa:f2:cc:5f:3f:a4:b4:
7d:a7:74:a6:1d:e9:d7:4e:02:98:95:b0:ed:35:dd:
61:96:cc:11:a6:23:d1:4e:f6:26:09:92:c0:90:c5:
43:4b:21:29:0c:f2:b2:04:58:36:25:40:17:75:6e:
ff:c1:b7:ed:2f:3d:7d:f7:ed:65:e2:6e:2c:6e:a8:
79:77:49:4e:d3:3f:ad:75:4b:07:fa:99:a6:75:99:
bf:b8:f1:d3:41:e7:f3:9d:a8:30:f2:2c:2d:77:c9:
ec:60:1b:64:ba:90:5c:9c:99:c7:59:af:e9:10:91:
70:da:d0:e9:93:6f:cb:c5:5b:1a:f6:50:75:ff:af:
e7:59:19:bc:18:bd:09:88:42:93:0c:85:6b:9d:8a:
9d:72:c7:ee:88:25:31:c3:5e:6a:24:30:58:af:46:
02:bb:4a:ce:f1:95:33:dc:fb:f4:ea:d0:de:00:60:
c7:21:33:34:0f:5d:22:7e:03:70:2d:ef:75:1e:46:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:54:15:F2:12:91:D4:75:AD:B5:E9:C3:D1:05:3C:4A:41:81:21
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/w5lUFfISkdR1rbXpw9EFPEpBgSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.100.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:e7:42:79:f4:00:83:4c:94:3d:80:33:2d:c5:3e:94:0a:71:
21:5e:ce:4b:d5:5d:94:f2:5f:63:3c:57:43:25:2b:ce:e5:9c:
ab:55:5f:29:51:72:85:4e:2a:ed:22:c2:39:ed:43:c3:33:b8:
dc:36:13:4a:0c:8b:e1:13:bd:7e:17:63:77:a9:84:75:13:79:
e0:84:c0:a8:49:a4:f5:9b:d4:79:20:ea:a1:d2:5a:2e:b3:13:
2f:c5:48:a7:0d:9f:14:d2:44:e8:9b:88:53:f7:ae:b8:d8:48:
73:68:92:ff:6d:e7:bc:c6:f4:48:c8:e3:d7:dd:3e:66:b0:3f:
1a:ab:10:fd:70:3b:23:c4:ba:95:4c:43:fb:46:c7:53:4c:68:
d4:87:41:56:66:c9:67:02:d7:33:15:91:95:bb:7b:bd:b4:40:
4a:c7:c9:74:de:40:fd:f4:af:88:c9:68:57:b0:0b:d4:fc:c7:
83:47:6c:55:0e:f6:0b:3b:bf:b1:88:e8:c0:f7:e0:7a:82:fd:
e7:ce:c2:b8:08:9a:d4:92:0a:73:14:a2:1b:24:4d:d5:1a:4e:
03:31:90:20:78:7f:65:16:0b:15:c3:72:35:f4:95:e3:e8:9c:
ee:b1:2b:3e:f6:eb:6b:53:f0:ec:77:28:0a:32:a5:67:c3:5f:
37:75:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:35 2025 by rpki-client