Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/wIodltuZamN_XbrkxPEbxEvk-zQ.roa
File: wIodltuZamN_XbrkxPEbxEvk-zQ.roa (raw, json)
Hash identifier: rVn8wcQMjL6Fr2tjBFZGRxqvuP5jpiydhf+juvmtDHk=
Subject key identifier: C0:8A:1D:96:DB:99:6A:63:7F:5D:BA:E4:C4:F1:1B:C4:4B:E4:FB:34
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 0194228D686A1F117EDD071B6DFCE4695B5F
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/wIodltuZamN_XbrkxPEbxEvk-zQ.roa
Signing time: Wed 01 Jan 2025 15:48:00 +0000
ROA not before: Wed 01 Jan 2025 15:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 193.36.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:68:6a:1f:11:7e:dd:07:1b:6d:fc:e4:69:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Jan 1 15:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c08a1d96db996a637f5dbae4c4f11bc44be4fb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:8a:16:2b:f6:aa:c0:f2:2a:36:e1:54:4c:
96:69:7c:1d:58:19:5e:05:5e:b2:33:a2:fe:bc:6d:
0d:01:99:01:e9:ed:81:f3:48:a2:f7:25:aa:57:3c:
85:90:a1:89:6c:f9:ce:1c:a4:7d:c7:ce:a4:20:65:
10:d4:25:4f:c7:50:ae:e6:49:fe:fc:0a:77:e0:11:
cf:5e:82:52:77:94:03:1f:b4:ba:4f:e0:17:1a:e4:
04:3c:f9:1f:a7:39:49:7b:e0:7e:08:e8:b5:b3:5f:
42:93:56:9e:49:0e:44:76:2b:40:66:ff:1d:14:8e:
7f:df:bc:11:77:a3:90:3e:39:f4:64:64:4e:b2:8c:
fa:ca:92:e4:f9:da:84:97:71:3a:b4:e7:e4:14:74:
24:01:c3:07:3f:b1:ef:16:0b:61:96:38:c1:a1:51:
f2:b9:58:04:ea:c7:5d:34:3b:95:c1:54:e0:f9:de:
07:eb:5f:14:07:c3:42:99:d8:1a:92:15:1a:f8:5e:
92:a2:15:cb:6a:9a:76:e6:a0:02:1d:06:86:8d:5f:
50:6b:47:cc:9d:8e:e2:02:4b:fc:04:1e:67:4e:6a:
ec:49:c8:88:29:5f:11:17:23:30:a3:b4:3a:f5:a0:
07:c9:3b:cf:83:c9:e2:1a:a7:5e:48:2e:75:72:97:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:1D:96:DB:99:6A:63:7F:5D:BA:E4:C4:F1:1B:C4:4B:E4:FB:34
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/wIodltuZamN_XbrkxPEbxEvk-zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.242.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:59:e4:20:4d:8b:e5:a3:e3:f3:6c:9c:f2:18:03:de:8c:b4:
c1:26:df:f4:a5:8b:8d:4e:08:6d:ba:d5:d3:17:db:4d:c8:91:
3c:47:10:4f:fc:67:37:93:ed:0d:c8:a6:40:35:99:0e:22:47:
83:c4:5d:f9:b9:c0:ce:bf:6e:75:f6:3b:3a:e1:60:f6:eb:60:
c1:da:67:05:f0:55:60:2d:07:97:b6:8d:41:f8:ff:ab:ad:39:
14:b3:45:58:50:f8:a8:1f:43:1c:45:d8:8a:d7:5a:8e:b7:43:
27:73:c2:ca:9f:1d:4d:6d:ab:02:1f:12:09:f7:10:d0:07:11:
a7:6f:98:85:fa:c5:ce:78:b9:8c:cc:1e:5c:01:7d:b2:9f:f4:
e3:d7:e4:82:83:92:23:07:a9:56:f1:60:8b:a3:c3:1d:b7:2f:
88:aa:06:ce:20:41:7b:25:c9:66:1a:66:99:df:bd:aa:18:03:
68:27:44:93:32:62:b5:64:3d:92:14:18:a7:60:63:cc:e6:c7:
80:58:62:19:6d:45:a9:6b:d6:9f:26:92:97:c4:1a:17:be:28:
b0:c8:f6:46:5f:f7:80:7c:be:c4:b8:7b:20:4b:39:ab:0e:56:
40:0b:30:da:a5:6a:55:d8:81:ff:44:80:27:d8:ea:54:cb:a3:
03:a8:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:28:59 2025 by rpki-client