Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/WBT1E8wMWVVtH50VHvbFOxWnsoc.roa
File: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (raw, json)
Hash identifier: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=
Subject key identifier: 58:14:F5:13:CC:0C:59:55:6D:1F:9D:15:1E:F6:C5:3B:15:A7:B2:87
Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456
Certificate serial: 019422FB02052CFF9BFA5D16E4B04543D285
Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/WBT1E8wMWVVtH50VHvbFOxWnsoc.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13984
IP address blocks: 193.25.186.0/23 maxlen: 23
2a09:6d80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:02:05:2c:ff:9b:fa:5d:16:e4:b0:45:43:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5814f513cc0c59556d1f9d151ef6c53b15a7b287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5f:c4:bd:8e:64:a5:11:fb:b7:15:7e:53:9c:
4a:ca:fa:f3:ac:75:64:94:31:15:50:43:72:a7:e2:
ea:7c:d8:47:39:6b:aa:58:9f:4b:d3:a8:45:fb:b0:
53:b4:be:3a:b0:16:13:cd:7b:73:f6:89:7f:e6:be:
9d:66:8f:f2:89:64:9f:74:6e:d3:ff:63:b5:72:14:
5b:73:d4:7f:60:94:20:bc:67:55:2f:a1:1b:fd:76:
22:96:54:af:1e:70:16:21:9e:1f:8c:77:12:72:3d:
2d:7d:af:c0:34:51:94:d6:d8:5d:9f:52:1a:e1:ae:
47:fa:4d:f7:fa:e8:5c:47:4a:a4:e7:2b:5f:29:96:
fc:e4:32:9a:5a:93:28:34:b4:05:86:8c:ea:c2:a1:
08:c1:95:10:ec:4f:8e:a3:2a:0b:fb:b9:d5:88:f6:
06:d1:95:e6:8d:51:e0:31:4a:ba:e5:72:b0:94:4f:
76:21:17:9c:8c:0a:4e:90:f1:5f:c1:b2:fe:b6:89:
48:6e:a1:a1:f0:0c:b1:c9:d0:ee:48:5b:a5:4c:c9:
e8:9e:07:e4:ca:28:94:ab:ac:e4:70:9f:4e:fd:2a:
b2:4c:40:90:45:72:c4:44:84:38:02:ce:22:ad:02:
1e:3d:0f:6b:74:e2:ca:b5:7e:6b:6d:f4:fd:5a:dc:
81:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:14:F5:13:CC:0C:59:55:6D:1F:9D:15:1E:F6:C5:3B:15:A7:B2:87
X509v3 Authority Key Identifier:
keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/WBT1E8wMWVVtH50VHvbFOxWnsoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.186.0/23
IPv6:
2a09:6d80::/32
Signature Algorithm: sha256WithRSAEncryption
5b:08:80:57:3b:d5:1b:87:f4:49:d8:36:1e:9c:45:06:ea:b0:
5a:b4:ea:f1:d9:17:ad:9c:5b:2c:d3:d0:8f:40:12:93:c3:7f:
9b:0b:ec:9d:a5:1c:c2:19:a4:36:99:c1:75:bf:65:bf:c6:36:
22:58:a9:98:aa:66:dc:14:cc:64:ce:cc:0d:18:6d:3b:ba:b2:
1c:d4:8e:82:f3:b5:11:dc:30:60:9e:ea:71:03:23:9b:98:72:
06:75:85:a8:5c:06:86:ce:bc:1d:06:01:14:48:31:3f:f5:95:
cf:a8:25:d9:4a:f9:45:6a:b9:dc:a8:da:53:f2:d4:4a:82:c5:
f6:31:54:25:10:f1:45:28:b9:b1:cd:f1:b9:94:40:fa:59:ea:
55:e9:6b:c0:b5:80:9e:77:f6:eb:94:49:51:d6:f0:f6:bb:ce:
c6:b4:8e:80:4c:13:57:fe:95:39:d1:34:48:b8:0e:ff:e1:a9:
9e:5c:ca:3f:23:18:74:a2:e6:ee:de:f7:6a:ef:b7:61:ff:65:
14:1a:25:0e:08:bc:30:d9:70:27:dc:84:e3:d4:22:32:c4:fa:
01:5c:0d:8b:aa:95:f2:cc:57:ed:ed:03:fd:d2:16:8b:2b:b6:
f0:a6:0e:9b:2e:97:85:ff:cb:3f:5a:fe:cb:53:7d:af:5f:4a:
e4:60:42:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:19:03 2025 by rpki-client