Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa
File: WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa (raw, json)
Hash identifier: kx4fWFzO9g7cyAxp6MdcGUoII+Luoha51Ph8bVepefA=
Subject key identifier: 5B:19:11:F7:D3:43:EA:19:20:F7:38:D5:19:7D:D0:47:CF:CF:DD:28
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 01942825508223CDF4C1459FE0D40014B9BE
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa
Signing time: Thu 02 Jan 2025 17:52:01 +0000
ROA not before: Thu 02 Jan 2025 17:52:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136526
IP address blocks: 185.202.103.0/24 maxlen: 24
193.239.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:50:82:23:cd:f4:c1:45:9f:e0:d4:00:14:b9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jan 2 17:52:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b1911f7d343ea1920f738d5197dd047cfcfdd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:a4:ba:74:17:60:35:03:5d:c0:4a:da:cf:
78:de:e9:24:de:58:86:19:a6:82:51:4a:fd:87:48:
da:b9:ba:15:45:8b:12:15:60:cb:ca:0e:16:44:2a:
82:90:e5:9f:3e:36:61:18:5a:55:5b:7a:36:ce:ce:
a0:7e:0a:ac:c0:4b:70:bd:c0:40:32:cb:7e:54:cf:
3f:c8:c6:5f:b5:18:20:14:6e:53:e6:37:24:51:16:
c8:51:fa:b8:ab:92:a3:e3:3e:84:be:2b:9a:8f:d2:
6f:9c:04:12:c1:27:d2:cd:49:24:25:9d:d3:12:fa:
56:5c:8e:c8:ed:1d:ff:e7:f7:a9:79:42:d7:52:55:
d4:42:0a:66:66:63:77:e4:97:9c:22:ac:31:4e:1e:
65:59:55:b8:9d:5f:fd:70:e4:aa:ef:61:98:d9:a9:
55:19:5e:c7:fb:0d:a8:d1:4b:3a:63:fc:82:dc:d3:
53:1d:c7:34:16:1c:27:e0:60:35:10:10:f2:e3:16:
a0:d9:a6:52:72:b7:00:89:d4:1c:6d:0b:92:4b:11:
b7:f7:5e:ed:99:08:58:ea:53:1b:28:59:04:9b:4a:
0d:52:37:80:ff:f6:ca:82:14:a0:e5:ea:54:73:e3:
d8:3b:7b:23:9e:37:4b:75:df:18:47:34:bc:7a:78:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:19:11:F7:D3:43:EA:19:20:F7:38:D5:19:7D:D0:47:CF:CF:DD:28
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/WxkR99ND6hkg9zjVGX3QR8_P3Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.103.0/24
193.239.154.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a3:b1:2d:45:b9:b3:7e:01:ab:f8:97:fb:b9:7f:ac:22:5c:
ed:7f:4f:2d:22:53:8d:e8:2d:d8:8c:ff:e3:59:5e:85:dd:05:
b1:76:8f:51:41:12:50:f3:25:19:7d:fc:ae:c8:c1:fe:f7:2d:
e2:2f:b4:fe:23:7f:4e:a7:92:69:30:50:7e:5c:46:f0:3c:df:
9c:d2:3b:3b:8b:f6:6e:5b:45:a2:97:8d:3a:3a:a0:67:e4:01:
1e:a5:67:b0:a8:20:3f:77:8e:75:7a:bc:ac:f7:0b:d7:9b:fe:
eb:ed:a8:00:54:40:58:67:df:79:86:87:bc:aa:f7:a3:fe:14:
63:10:0a:14:12:68:78:79:50:8c:dd:80:c1:54:23:77:94:b7:
f8:29:fb:6d:7c:26:61:b7:27:9a:7b:35:4f:e9:a5:87:c3:ca:
0c:47:62:80:e6:70:59:47:db:e3:b4:27:87:84:91:25:a8:6b:
f5:cb:b0:2d:a2:c7:bf:5f:55:07:33:7b:80:fa:47:81:1f:ee:
96:c5:e8:e2:64:f9:54:47:85:f3:ea:04:18:e3:d9:c7:d9:42:
a1:ef:9c:89:fb:eb:9e:8a:4e:21:9a:d2:93:92:41:4e:57:0e:
04:b1:ac:e6:16:4e:90:45:1c:db:9f:d2:46:ad:49:0a:67:99:
6f:85:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:05:09 2025 by rpki-client