Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wECHk9zShMaNUGwCaR3Hv53jdvM.roa
File: wECHk9zShMaNUGwCaR3Hv53jdvM.roa (raw, json)
Hash identifier: /ETIlnjDPbQWkn6fuTQTjiBYMtSsnrSroXUrxmMHqlE=
Subject key identifier: C0:40:87:93:DC:D2:84:C6:8D:50:6C:02:69:1D:C7:BF:9D:E3:76:F3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0195DC8971AD61861FB40F5F4ED2C23E1091
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wECHk9zShMaNUGwCaR3Hv53jdvM.roa
Signing time: Fri 28 Mar 2025 11:35:49 +0000
ROA not before: Fri 28 Mar 2025 11:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61138
IP address blocks: 194.87.119.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:89:71:ad:61:86:1f:b4:0f:5f:4e:d2:c2:3e:10:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 28 11:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0408793dcd284c68d506c02691dc7bf9de376f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:70:51:8d:93:ff:0f:37:a3:b5:f6:0b:bb:
a4:1f:a3:79:d0:5c:4a:0d:b8:21:f2:c1:f3:06:d1:
a3:38:be:56:2a:7e:6c:10:ac:92:fc:12:c0:81:a4:
91:58:51:39:87:23:5c:86:04:b0:de:22:b5:af:9d:
c5:7a:94:a4:3e:09:da:d9:1b:e2:4d:e4:0e:9d:b6:
c8:58:0e:b7:20:13:6a:b1:d8:af:e7:ea:e3:73:55:
50:4a:0d:e6:ef:d7:04:d0:5f:ff:96:27:b1:dd:10:
cb:70:e8:b9:4b:7d:e7:1e:9f:8f:86:e3:76:a1:d5:
4a:aa:8d:57:2e:c8:5c:6c:16:4b:3f:3c:90:cd:ab:
a3:f6:2f:fc:c0:04:bc:18:5e:fe:b5:08:4c:15:8b:
85:20:d9:1d:76:1b:c7:44:54:37:1f:b4:e7:49:72:
e5:07:f7:f7:fc:b8:3c:9d:5a:f6:3d:7a:27:e8:e5:
aa:bb:a0:6f:9a:7a:36:0d:fc:1a:d2:a8:7c:6c:5c:
ab:e7:2a:77:3b:8e:a5:83:56:75:1a:54:48:43:4f:
b0:10:42:5d:90:cd:ae:ff:8f:dd:6a:01:25:57:e7:
e8:03:15:76:6a:5d:ee:7a:a9:65:54:52:80:db:e6:
d8:bb:8d:0e:fc:8d:e2:70:65:c6:40:61:15:8e:e9:
fd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:40:87:93:DC:D2:84:C6:8D:50:6C:02:69:1D:C7:BF:9D:E3:76:F3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wECHk9zShMaNUGwCaR3Hv53jdvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.119.0/24
194.87.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5b:c0:c8:2e:48:af:6e:42:e8:fe:1c:86:79:a5:2e:6c:d4:
00:95:04:2c:a3:34:ff:93:e7:03:ad:9d:f3:7c:67:73:a7:72:
c1:e3:d4:d5:12:f3:b8:b9:00:69:12:d2:f5:23:db:63:e7:ec:
2a:74:53:a3:65:e7:78:24:35:7f:55:c1:5c:5d:d7:fd:73:49:
d6:d1:43:2c:89:29:a7:53:0e:c6:ba:67:85:c5:0b:ea:f1:4a:
4d:1d:34:c7:ea:56:49:f7:52:e7:9d:a5:04:a0:b7:cb:94:53:
ab:13:eb:d5:cc:51:9a:d3:0a:20:91:5a:95:b2:98:6e:c7:da:
f5:c4:71:f5:ea:54:1a:93:4d:43:2e:41:af:a8:96:26:d8:12:
97:df:f2:4b:d2:7c:dd:4a:30:57:05:f5:c4:f7:e7:f0:62:f6:
21:b1:2c:f0:7c:d3:bc:c0:2d:b6:11:94:2f:4f:27:84:70:e6:
35:13:2b:ed:74:9e:d2:ba:fe:f6:2f:0e:fb:27:0d:66:73:ea:
0e:0a:b0:a6:52:f3:6b:6c:f7:83:ec:9e:c3:ad:24:df:2f:2f:
5b:4d:56:63:0c:37:45:38:bf:d7:5f:d6:a2:b5:a2:58:24:01:
69:4c:4d:24:a7:c3:2b:e8:4d:f8:36:05:3f:8a:ee:8b:74:aa:
71:29:55:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:51 2025 by rpki-client