Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wiciPpolPSXi2K49MgqK-EWMUsU.roa
File: wiciPpolPSXi2K49MgqK-EWMUsU.roa (raw, json)
Hash identifier: P6cnvk5w2zn5y0/eAL7I/g93W4namUufMbH+p0LEx9g=
Subject key identifier: C2:27:22:3E:9A:25:3D:25:E2:D8:AE:3D:32:0A:8A:F8:45:8C:52:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282493010F416366E45DF111CBF5DDA1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wiciPpolPSXi2K49MgqK-EWMUsU.roa
Signing time: Thu 02 Jan 2025 17:51:13 +0000
ROA not before: Thu 02 Jan 2025 17:51:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60701
IP address blocks: 94.156.103.0/24 maxlen: 24
194.180.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:93:01:0f:41:63:66:e4:5d:f1:11:cb:f5:dd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c227223e9a253d25e2d8ae3d320a8af8458c52c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:eb:ad:e1:af:b5:4a:85:b7:e2:f5:4e:65:
01:83:34:34:3d:4a:2e:43:aa:0d:80:c5:01:f0:20:
74:03:68:20:de:4b:22:4e:f1:fe:66:92:92:40:3a:
f1:98:55:12:bc:7a:a5:8b:2d:9c:48:3f:9c:d3:87:
08:7a:4e:a5:60:b2:0d:b6:ec:5d:25:28:25:f9:fe:
5c:cf:0a:c1:ef:3c:52:c7:35:cc:91:7f:37:d6:24:
23:00:2f:6c:f7:db:6d:13:85:eb:af:ce:a3:9d:86:
2c:4e:1c:0e:e4:f0:cc:99:a2:33:57:14:b8:42:29:
f5:9a:24:70:08:5f:38:58:a3:9b:a7:b1:a6:2e:bc:
d8:22:a2:83:91:5e:26:17:fe:01:79:ff:1f:88:a0:
28:db:5c:15:ec:83:fe:22:c1:48:cf:25:63:48:6f:
84:6b:38:9a:7f:03:da:aa:e4:eb:f6:1b:b6:c7:0d:
60:a2:4c:03:5f:f3:36:98:38:f4:94:6c:fe:10:bc:
ce:ae:4f:47:2b:8e:e0:97:04:7d:45:3f:6b:e2:96:
2d:b6:95:88:69:25:1b:53:58:fb:10:3b:9a:b3:f4:
30:f4:9f:32:dd:92:75:18:5a:74:de:2c:a9:c3:65:
34:4f:43:08:d9:94:41:8c:2c:00:85:b4:91:18:4f:
fd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:27:22:3E:9A:25:3D:25:E2:D8:AE:3D:32:0A:8A:F8:45:8C:52:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wiciPpolPSXi2K49MgqK-EWMUsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.103.0/24
194.180.39.0/24
Signature Algorithm: sha256WithRSAEncryption
34:05:38:2c:c7:01:99:f1:16:a3:01:7f:4b:cf:cb:eb:53:18:
3a:6b:d7:6f:b4:26:bb:83:98:02:70:e4:75:e2:fe:3b:9e:27:
a3:eb:db:2c:ab:dc:9f:2b:df:6f:ab:ec:cf:5a:b0:54:ef:d3:
0f:59:ff:1a:71:01:bf:41:2f:b4:1a:fc:d2:87:cb:ad:f4:0d:
e2:b4:2b:16:83:fa:27:91:45:8d:6a:41:a7:eb:82:c6:bf:f8:
5e:1a:59:50:b9:18:54:ab:c0:61:96:79:4b:18:c6:69:0c:49:
46:8b:7e:c4:5e:eb:16:d7:38:78:51:b4:1c:dd:e8:20:39:06:
68:3c:52:43:d9:15:e6:ed:00:9f:97:e1:f1:f5:77:b8:38:24:
b7:7f:23:74:3f:21:30:53:d0:08:26:fc:5f:39:25:37:81:a1:
17:d7:8e:19:45:93:46:ad:a5:65:ca:26:41:cc:45:10:80:db:
83:39:e2:d2:2e:33:ac:e3:c6:60:9d:57:1d:18:7c:ee:d4:a5:
78:0d:02:d0:75:87:9f:55:8c:1b:01:57:cb:34:62:52:74:c3:
02:49:42:01:42:d8:a2:42:20:43:b8:f2:3e:4f:5a:3d:f6:87:
93:0d:62:99:39:49:fa:97:8e:65:ea:6f:12:04:71:2c:ef:8f:
ab:d5:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:33 2025 by rpki-client