Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/WbpoYqM2oX3v4QquNuj3aOGKhQQ.roa
File: WbpoYqM2oX3v4QquNuj3aOGKhQQ.roa (raw, json)
Hash identifier: rq9cnpsLBzesNH6rgMT8gVQiRyG9ecQKConKub1KWeo=
Subject key identifier: 59:BA:68:62:A3:36:A1:7D:EF:E1:0A:AE:36:E8:F7:68:E1:8A:85:04
Certificate issuer: /CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Certificate serial: 01942522265AD8961F337432FEF96922155A
Authority key identifier: 80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/WbpoYqM2oX3v4QquNuj3aOGKhQQ.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3360
IP address blocks: 193.19.196.0/24 maxlen: 24
193.19.197.0/24 maxlen: 24
194.125.246.0/24 maxlen: 24
194.125.247.0/24 maxlen: 24
195.22.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:26:5a:d8:96:1f:33:74:32:fe:f9:69:22:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8079afcba5a8762fb79f4e5e0d7a35ee84cd3df4
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59ba6862a336a17defe10aae36e8f768e18a8504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:7f:ed:10:d4:25:40:45:b5:7e:4d:cb:3c:
98:e9:57:41:e3:d6:a2:cb:bf:4f:b4:ce:72:23:4f:
b3:ae:bc:84:a6:5f:22:67:0b:1a:6d:54:57:69:e7:
41:5a:3d:1f:5c:3b:23:eb:49:ef:b0:a1:a4:34:32:
70:c0:1e:4c:5d:4e:78:dd:58:fc:ba:10:21:75:ef:
39:b5:59:f5:b7:cc:58:b1:70:ad:1d:71:47:ec:e9:
de:24:a8:0e:b6:86:ed:a0:d6:a7:c4:a4:70:5e:b1:
a8:7a:b6:64:a7:b5:e1:cf:46:9e:2a:45:59:a7:a2:
81:3a:6e:b2:bf:b1:77:8c:4c:eb:bc:d1:f0:47:3f:
c9:80:65:c1:e9:46:6d:0d:aa:2e:80:24:f9:d4:a9:
10:0a:cd:bd:79:14:74:99:6e:bc:cc:2c:24:33:8a:
48:33:9e:c8:ee:ce:a9:95:4d:82:e9:42:c6:b0:46:
70:1b:0a:96:35:ba:56:2f:3e:c3:27:28:39:69:0f:
c9:19:ad:26:5f:b3:12:61:fd:54:38:09:b9:bf:5c:
44:7a:97:17:bb:47:fe:59:99:8a:3b:11:02:6a:e1:
de:35:3b:83:10:40:83:e7:b1:d8:88:52:db:b1:fa:
71:3d:69:e3:ab:98:71:15:69:2b:bc:51:04:78:95:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:68:62:A3:36:A1:7D:EF:E1:0A:AE:36:E8:F7:68:E1:8A:85:04
X509v3 Authority Key Identifier:
keyid:80:79:AF:CB:A5:A8:76:2F:B7:9F:4E:5E:0D:7A:35:EE:84:CD:3D:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHmvy6Wodi-3n05eDXo17oTNPfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/WbpoYqM2oX3v4QquNuj3aOGKhQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d5eb6f-b781-4d52-8283-d2e10c97645f/1/gHmvy6Wodi-3n05eDXo17oTNPfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.196.0/23
194.125.246.0/23
195.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:ad:61:27:fa:ef:cd:b4:1c:d3:d2:52:b4:60:de:43:78:d7:
7c:6a:5e:13:f4:43:be:d0:fd:53:e1:5a:ab:ed:1a:43:0d:9b:
13:ab:39:21:3e:46:72:a9:af:4a:1b:7f:63:42:aa:f2:27:b8:
a3:91:24:4f:cb:d1:4b:a0:70:a3:2c:6d:b7:91:11:30:ed:0e:
95:f4:0e:6b:84:fb:28:3c:5c:f1:12:b6:09:c9:ec:bc:97:8c:
09:08:ca:e8:63:9d:13:8d:09:53:d6:28:4c:ef:1b:43:3c:20:
7a:62:1f:79:cd:ed:62:5e:cd:f5:b6:d2:9e:6a:5d:fc:09:1b:
bd:83:37:f1:5f:5a:01:8c:ec:fd:88:24:8a:ff:5d:7c:b7:39:
e5:cd:fb:98:2a:5b:55:f9:89:d8:d9:9b:24:fb:1a:73:d2:9b:
1b:a7:a3:2a:54:ab:97:0c:ff:2e:55:89:74:de:21:fb:1d:83:
e0:a4:e8:f6:13:0a:4c:a2:2c:3b:7e:3f:7a:89:76:84:08:b5:
97:bb:f3:af:b6:a8:c2:74:6e:32:fb:a0:e3:27:b7:8b:65:8c:
51:b7:1c:bd:7b:3b:cf:97:05:c4:1d:86:52:4a:84:1b:26:80:
ce:34:2d:e9:04:0a:5f:56:27:9a:10:92:3a:b2:0a:96:e8:30:
c7:ee:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:06:05 2025 by rpki-client