Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa
File: wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa (raw, json)
Hash identifier: OepYAELbBzS8mDh4vcbHfRlHazKGsQKZdJc2NWmplLQ=
Subject key identifier: C0:32:21:9F:64:7C:82:9F:00:93:66:57:04:88:62:90:06:89:5B:E8
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 0194252192B0A219BD885E0B12B7DA701A49
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207035
IP address blocks: 193.161.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:92:b0:a2:19:bd:88:5e:0b:12:b7:da:70:1a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c032219f647c829f009366570488629006895be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:5d:f2:c2:8a:69:a0:78:e8:ef:4e:f6:df:
16:c7:2b:cb:4b:bf:fc:0b:9c:19:cb:17:2c:b6:11:
af:5d:8c:ec:a7:4e:4f:8c:6c:ba:39:0b:28:1d:11:
82:d2:7e:32:35:8a:e9:5c:cd:ba:33:a3:f5:63:31:
a2:8c:fb:3f:e9:1f:26:d6:c3:51:85:16:3a:f1:05:
57:7d:42:09:63:4f:2b:24:dd:2d:47:4d:25:25:94:
c7:af:0d:23:99:74:ac:45:54:92:06:b2:bb:43:5d:
d4:bc:0c:fc:19:0c:62:22:7f:d7:dd:04:80:8f:ef:
fe:67:e2:75:91:3f:e1:19:c2:3a:e1:60:40:d7:40:
a5:10:8c:1a:b5:7a:c5:ad:a3:60:d2:d9:1e:a5:ef:
b6:67:93:39:66:b9:14:73:07:62:7d:30:44:6b:b7:
3c:22:ec:65:7f:58:89:c7:3a:40:bf:cf:59:22:bb:
b1:d6:18:2e:a0:bf:e8:7e:73:e2:48:ff:b1:ac:7e:
ba:ac:89:df:5d:27:03:2f:8a:a0:99:9d:60:b6:a3:
20:eb:a9:6f:5f:4f:ea:86:df:8d:82:7b:28:d1:ec:
8e:1f:94:83:5e:d9:6d:14:f1:7b:12:f9:7c:8d:d6:
aa:ab:f1:c2:5a:e7:11:60:e3:68:dd:d5:22:31:bf:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:21:9F:64:7C:82:9F:00:93:66:57:04:88:62:90:06:89:5B:E8
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.30.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:f8:b6:a8:7b:4a:c7:a6:b0:99:b9:55:a6:c1:db:99:6a:85:
2b:96:7a:3d:91:b3:ff:d6:21:d0:bc:37:65:cf:53:88:27:e1:
f8:fb:f4:ea:b8:70:df:98:5c:cb:8e:ee:70:45:75:f8:98:ea:
cb:d2:39:6e:e0:78:ac:01:bb:5c:3d:9c:3c:35:34:a2:5e:95:
0e:36:36:67:71:6c:50:99:c5:91:bf:53:b1:d1:61:e3:9e:22:
0d:4f:c6:53:33:69:87:9e:06:eb:e7:85:f5:a8:61:d0:b4:ef:
4d:74:d8:64:3b:82:87:ba:0e:c1:92:8b:0d:68:cb:dc:a4:27:
c2:10:b0:e8:04:b0:77:a6:c6:74:43:ad:41:d5:f9:02:7d:7a:
c0:9e:d7:bf:de:b2:94:e0:4d:40:89:e5:94:c4:56:e7:81:55:
d6:83:15:66:ca:3c:49:e1:1d:a2:2e:1a:e8:7b:08:5f:0d:f1:
cf:30:6d:20:e5:b2:05:c4:87:5c:cd:64:c8:f1:75:d7:66:e3:
d9:2a:8d:24:46:48:9e:92:37:5c:4d:bf:ba:65:44:af:87:e4:
87:b2:b6:44:c7:6d:23:d8:b8:58:e6:6f:f1:50:8a:23:76:db:
10:1b:43:d3:ff:16:53:91:f8:85:e5:2d:be:1a:f4:46:59:6d:
89:62:92:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:47 2025 by rpki-client