Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/WainZrZS95pV_wUDdXdKx-4zd8w.roa
File: WainZrZS95pV_wUDdXdKx-4zd8w.roa (raw, json)
Hash identifier: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=
Subject key identifier: 59:A8:A7:66:B6:52:F7:9A:55:FF:05:03:75:77:4A:C7:EE:33:77:CC
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 01942444A669B50E63641EC4E08A1B446E27
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/WainZrZS95pV_wUDdXdKx-4zd8w.roa
Signing time: Wed 01 Jan 2025 23:47:46 +0000
ROA not before: Wed 01 Jan 2025 23:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40065
IP address blocks: 193.134.208.0/24 maxlen: 24
193.134.209.0/24 maxlen: 24
193.134.210.0/24 maxlen: 24
193.134.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:a6:69:b5:0e:63:64:1e:c4:e0:8a:1b:44:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Jan 1 23:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a8a766b652f79a55ff050375774ac7ee3377cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:16:3f:e6:de:1d:94:1a:d4:7a:78:23:2a:42:
b9:a3:fe:75:78:53:af:2e:e3:4f:56:cb:77:d3:fc:
31:69:3a:77:21:3d:34:a3:10:6c:90:a5:c7:3d:a9:
57:e1:41:8a:6f:54:4c:cf:f6:80:e2:0d:de:7d:18:
b1:a5:a1:29:09:33:12:fa:4e:fb:10:12:30:23:3f:
54:a8:16:1f:c8:29:01:ee:5e:00:8b:5e:16:57:83:
24:a8:15:8a:aa:07:5e:94:dd:f5:f3:6e:45:35:89:
07:c9:e9:31:c2:2a:db:4f:37:e8:bd:e0:04:6d:5d:
cb:eb:42:bb:0a:3b:6c:6f:fb:54:9e:40:d7:d5:18:
4d:48:f6:60:83:54:23:eb:97:b2:b5:3f:ec:67:12:
8c:79:ee:af:25:a8:34:4b:21:9e:ac:7c:02:22:db:
41:ee:8e:27:26:26:30:eb:2c:2a:08:1b:62:34:06:
04:9d:c7:83:3d:fc:a0:f0:37:0f:2e:92:42:e0:a7:
6f:a4:f5:63:71:77:b1:3e:4b:fd:6e:35:9f:71:e4:
d8:8e:c8:98:e3:12:8c:a8:b2:d4:51:fc:4a:d6:fa:
12:f7:17:a2:44:78:02:f3:57:21:4a:a3:18:0f:d1:
d8:18:93:bf:6c:ae:c0:b8:57:4e:de:ab:3a:44:69:
09:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A8:A7:66:B6:52:F7:9A:55:FF:05:03:75:77:4A:C7:EE:33:77:CC
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/WainZrZS95pV_wUDdXdKx-4zd8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.208.0/22
Signature Algorithm: sha256WithRSAEncryption
78:b5:76:c1:eb:55:1f:c4:c0:e1:57:91:f5:ab:8a:97:06:61:
74:21:53:2f:44:a9:39:84:b8:cc:e3:22:bc:d6:7b:79:66:6a:
d1:ab:6d:f4:08:46:ea:a4:c4:36:4d:27:8d:d7:f0:53:b1:72:
66:f2:be:96:6f:46:f8:55:48:5b:69:4a:c9:05:52:b4:1f:d2:
af:a8:83:89:d6:15:62:26:09:52:23:0f:4e:dd:19:2e:81:ec:
66:cd:60:62:08:53:c0:5b:a3:37:e9:a8:cc:65:98:c3:45:23:
08:ba:4f:91:ad:9c:f4:37:40:73:ea:b4:80:59:3a:d7:8f:da:
2f:04:08:f7:a7:53:75:f4:a7:16:e9:b0:08:20:17:3a:49:44:
4f:e5:b9:8a:16:ac:89:d5:db:60:93:4a:f6:a4:51:ce:78:83:
f7:7f:52:1a:03:a7:7c:7e:ad:aa:29:09:df:6b:2d:c2:cb:74:
c6:b0:7e:2c:33:d6:1e:ab:7a:90:a8:53:1b:c6:58:e9:c9:43:
99:e5:a4:7c:ef:71:28:0d:5c:fd:d5:ee:ca:5b:d3:6a:c1:62:
f1:03:85:9f:1a:c1:47:e9:d3:eb:63:2e:ca:61:ab:66:e0:1a:
6f:b2:d6:d5:6c:2c:4b:4d:06:81:d9:50:1e:3b:a5:c7:c0:2b:
19:0c:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:13 2025 by rpki-client