Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/w5HnLtF4Me5n7OHUmGug2mAnL6U.roa
File: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (raw, json)
Hash identifier: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=
Subject key identifier: C3:91:E7:2E:D1:78:31:EE:67:EC:E1:D4:98:6B:A0:DA:60:27:2F:A5
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 019420D656BF2663D77EDDC55CD56F38077E
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/w5HnLtF4Me5n7OHUmGug2mAnL6U.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213231
IP address blocks: 194.45.217.0/24 maxlen: 24
194.45.233.0/24 maxlen: 24
194.48.3.0/24 maxlen: 24
194.48.191.0/24 maxlen: 24
2a07:e6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:56:bf:26:63:d7:7e:dd:c5:5c:d5:6f:38:07:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c391e72ed17831ee67ece1d4986ba0da60272fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:4a:fc:60:80:6d:96:57:1c:09:5b:03:b6:
5a:b0:62:81:5b:b1:a3:1a:05:98:6c:03:5f:b5:55:
54:93:43:13:90:e0:0d:d0:f4:2b:e6:f8:df:a3:9d:
17:e9:4a:96:f1:42:66:87:8d:b6:6e:67:bb:5f:da:
52:df:11:64:64:05:6c:7e:8b:44:0e:ea:a5:4e:b2:
2e:04:d5:e3:ca:7f:c4:ae:aa:0a:22:fd:75:fd:4f:
a0:db:02:3f:78:3b:ac:b3:ad:4e:bc:fe:05:81:c1:
ca:b5:19:95:42:bc:e3:31:8c:12:34:b2:16:88:48:
88:55:b0:e8:79:9b:73:2a:fd:34:46:e4:0d:64:08:
34:af:35:59:6c:3a:0c:16:7a:4d:d9:82:86:e5:71:
8a:72:0e:d2:16:85:68:77:99:09:3a:6b:ed:eb:03:
60:6f:94:65:ea:eb:7d:bf:9c:99:a0:06:d1:d6:86:
90:22:1c:00:d8:e5:ec:06:50:0c:ff:14:8c:1b:6a:
8a:f7:df:75:a5:99:45:1b:71:88:b7:38:b0:a7:b3:
49:be:31:ce:d7:8d:ea:63:cc:81:de:55:15:dc:d7:
14:e4:ae:cf:ae:fc:0b:ad:e7:b5:dd:99:ec:8c:5c:
dd:d2:60:34:94:0a:97:f6:15:e5:b5:75:3e:c7:dc:
3b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:91:E7:2E:D1:78:31:EE:67:EC:E1:D4:98:6B:A0:DA:60:27:2F:A5
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/w5HnLtF4Me5n7OHUmGug2mAnL6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.45.217.0/24
194.45.233.0/24
194.48.3.0/24
194.48.191.0/24
IPv6:
2a07:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:d0:9f:9e:69:e3:d2:af:d6:08:09:86:0f:15:93:ff:bb:e9:
6e:e7:20:ab:a4:f1:72:36:24:98:95:ac:57:41:8a:d4:51:d8:
4a:69:d9:9c:b2:bf:61:16:24:fa:ff:02:37:5e:bb:00:8b:20:
71:34:21:68:f3:e9:b6:bb:06:97:f8:72:6b:2b:78:bf:8c:c6:
7c:13:ea:cc:06:5e:75:c0:d8:1d:ba:17:9a:54:21:5f:4e:2d:
68:e6:96:c2:83:95:ae:b4:fd:ff:6e:60:43:c4:25:e5:77:2f:
08:6a:15:d5:21:23:25:c8:a1:7d:64:00:a2:b4:c9:b0:29:ec:
dd:91:de:9b:95:48:65:f6:54:e2:2c:20:fb:af:d4:55:82:49:
1e:45:d0:f2:fd:9a:2e:15:97:23:ad:13:d8:a0:94:43:32:a8:
55:99:ee:d7:ef:4f:85:6a:d4:2b:01:5c:66:9a:b4:1d:c4:0c:
2c:8e:11:79:8d:24:60:18:29:14:48:45:d6:f0:fa:84:4a:cd:
ac:27:75:0b:cb:69:dd:c6:21:8e:88:2f:55:80:bc:5f:48:a8:
59:07:fd:c5:7d:bf:bd:85:e1:ee:12:85:dd:0c:92:38:ff:41:
be:eb:f8:e5:81:3f:7d:05:78:0a:33:c1:d7:bf:eb:9e:7f:84:
60:66:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:51 2025 by rpki-client