Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wC6V1E1oU0yguZlOvljYpTxiiiY.roa
File: wC6V1E1oU0yguZlOvljYpTxiiiY.roa (raw, json)
Hash identifier: YVY6TlY8pr8a0x5+ZsRHjEnIdufZ1LLaPhiHLz+KNhE=
Subject key identifier: C0:2E:95:D4:4D:68:53:4C:A0:B9:99:4E:BE:58:D8:A5:3C:62:8A:26
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01951EAF0A6E9ECCC357C29F377C67511077
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wC6V1E1oU0yguZlOvljYpTxiiiY.roa
Signing time: Wed 19 Feb 2025 14:49:02 +0000
ROA not before: Wed 19 Feb 2025 14:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213427
IP address blocks: 155.254.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:af:0a:6e:9e:cc:c3:57:c2:9f:37:7c:67:51:10:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Feb 19 14:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c02e95d44d68534ca0b9994ebe58d8a53c628a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:77:09:49:98:6f:55:df:89:b7:ff:fe:05:
3f:cd:e0:06:47:86:91:e5:85:20:e6:14:d5:cc:1b:
53:92:24:fc:9f:33:13:83:12:41:7a:68:d2:67:6a:
c8:ab:5d:bf:e6:65:c3:ae:7c:1e:8c:9e:77:49:43:
26:9a:ad:e0:1f:cc:f8:ff:81:64:27:1d:9b:25:25:
a5:50:f5:32:56:be:70:3d:41:cc:02:d7:ac:e0:c8:
f5:99:c6:af:48:99:e7:ff:4e:8b:c8:c3:46:2d:f1:
b0:78:c8:e0:65:c1:b7:ec:71:b6:5a:f5:b9:4b:37:
88:37:d0:22:7e:77:a2:2a:db:48:39:ab:ab:a4:0b:
ec:4c:58:a2:b4:cf:79:c4:b4:cd:b1:22:8f:9b:14:
76:a4:84:c2:a5:4c:88:76:7f:62:fb:45:98:1b:ae:
70:32:00:a9:a5:cb:7e:d9:37:f4:cf:78:8b:98:73:
ea:95:5d:3d:c7:a1:1d:53:35:01:2d:1f:1f:da:61:
9c:7e:4e:a7:88:91:ce:45:ee:b6:53:b9:a6:74:8e:
04:fc:81:87:63:0d:c6:a6:ee:dd:0d:d8:3c:e9:a2:
a0:0f:ab:3a:ff:cd:53:df:e1:e8:50:e9:66:5a:c3:
c1:23:ab:fb:f2:a6:e1:ee:90:30:b0:03:26:9b:33:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2E:95:D4:4D:68:53:4C:A0:B9:99:4E:BE:58:D8:A5:3C:62:8A:26
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/wC6V1E1oU0yguZlOvljYpTxiiiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.62.0/24
Signature Algorithm: sha256WithRSAEncryption
68:59:06:00:5e:61:14:2e:ea:38:16:f4:2b:88:1b:37:d1:d5:
9f:e0:2a:b3:38:c1:90:20:9b:86:9a:a0:b4:61:4d:ec:53:4d:
10:d6:6e:55:0d:da:be:5c:d2:0a:4e:c0:37:3c:46:e8:df:60:
06:41:00:d9:a3:07:e9:6d:d1:f5:68:98:fa:98:30:1e:6b:a4:
8f:4f:ae:e5:e4:be:1e:ed:05:29:e1:f5:68:5c:18:6c:b3:c0:
6c:62:85:5f:99:67:66:f5:17:1f:fb:6e:0b:e9:c7:13:9f:98:
e6:e0:76:48:b9:f3:4f:b9:b0:ce:c8:e9:da:c5:3e:03:1e:28:
be:d0:cc:de:40:3c:5c:98:1d:be:8e:c9:18:ab:58:71:32:44:
a6:1b:98:36:17:de:3b:6a:c7:52:58:0b:1d:2a:0c:51:35:13:
43:6f:b3:63:57:69:5e:28:8b:e6:20:d7:47:e9:a1:33:21:b7:
af:85:e6:d2:54:4b:b5:6f:47:59:43:6d:8c:76:0c:72:20:38:
80:27:a5:46:eb:b6:35:09:b0:d5:79:fa:ba:8e:50:d6:69:8e:
2c:34:fe:97:fa:38:f0:7a:9f:fe:0e:d3:5b:d7:6f:9a:26:73:
93:d2:a8:98:9b:a0:27:0b:79:10:b5:89:a4:c6:42:39:b6:4a:
6f:ca:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:50:13 2025 by rpki-client