Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wukluxtFBT6gy1sBAuLdrnt-bkQ.roa
File: wukluxtFBT6gy1sBAuLdrnt-bkQ.roa (raw, json)
Hash identifier: S1of8rV5iB1V8tYPauGyPIyTRA5Ko4stUxlGAMjIu7s=
Subject key identifier: C2:E9:25:BB:1B:45:05:3E:A0:CB:5B:01:02:E2:DD:AE:7B:7E:6E:44
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683B195D7C3AFE3EE02B510552F054
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wukluxtFBT6gy1sBAuLdrnt-bkQ.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20549
IP address blocks: 193.233.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3b:19:5d:7c:3a:fe:3e:e0:2b:51:05:52:f0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e925bb1b45053ea0cb5b0102e2ddae7b7e6e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:56:e1:bf:89:c2:f7:ea:22:d5:9f:4f:47:
95:e0:c1:3d:86:d4:54:75:5f:2f:8e:b3:93:fb:41:
ec:8b:e2:ab:cc:69:5a:ad:50:9a:a1:43:37:6d:3f:
af:9a:90:91:53:be:07:2f:e8:2b:fe:a6:f4:da:40:
e5:4c:2c:9c:39:d6:11:fd:1a:bd:d6:c7:76:37:15:
46:0d:a6:9f:9a:8e:7f:49:c7:1c:3d:ca:83:4f:a9:
e3:17:6d:60:6a:7a:e5:ee:3a:f8:ec:2a:78:34:f3:
97:cb:d9:fc:81:94:ef:d5:79:b5:59:29:79:06:20:
fd:16:a6:9f:2d:24:83:09:e5:99:f0:c6:4d:7d:d0:
b5:ab:3b:7a:25:b3:19:61:8f:95:03:e0:c4:70:d5:
1a:8b:f4:b6:0d:10:8c:61:10:46:8f:e8:d9:3f:eb:
b1:21:47:5b:14:44:55:3e:84:ec:46:45:7a:cd:1c:
83:fa:47:3b:03:68:92:64:b8:2b:3d:af:45:99:0f:
9e:4e:40:94:ef:c2:e6:ed:36:4d:5a:40:37:5c:6e:
99:49:ab:76:4b:43:1b:98:84:13:90:4e:c4:0b:70:
9e:19:2a:e4:6f:cd:a2:c2:db:d9:d4:7a:a2:7f:0c:
f5:87:69:8b:c0:d7:30:cb:f0:15:ae:b6:83:b9:3f:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:25:BB:1B:45:05:3E:A0:CB:5B:01:02:E2:DD:AE:7B:7E:6E:44
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wukluxtFBT6gy1sBAuLdrnt-bkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.64.0/21
Signature Algorithm: sha256WithRSAEncryption
14:78:f4:57:2f:3e:0e:56:51:14:88:e7:6f:bf:39:3f:29:f8:
65:ad:dd:88:96:1a:fc:24:57:9d:2b:58:f0:f6:e7:59:72:9c:
89:75:8d:f0:06:13:f4:32:e9:ca:f7:48:57:c6:0b:63:5d:0c:
e3:50:75:4f:e8:19:7c:03:f1:08:68:d7:47:7d:34:c2:4b:69:
b0:88:25:83:4f:dc:ec:b4:6f:c3:d7:61:96:37:a5:02:9a:ed:
05:31:62:45:86:0f:6f:65:99:31:2c:9c:e8:af:8a:09:9a:c2:
ad:48:95:13:80:c9:ca:ef:fa:ba:8b:3e:3e:94:db:c4:e2:f2:
5f:6a:4b:85:f2:87:fc:51:01:96:a9:cd:b8:cc:0c:d3:5e:d6:
09:ac:bd:0f:0d:e7:24:44:97:63:5d:46:74:3f:f1:9f:5d:18:
7a:e5:61:88:2a:9c:52:c9:56:a6:52:50:a2:21:1d:f4:4f:61:
7a:a3:30:76:ec:2e:d0:fd:2f:5c:73:bb:eb:c4:a3:c6:60:8f:
47:5a:2e:4f:df:0a:58:ee:d0:13:54:7f:e1:bd:1a:67:cf:a6:
4b:d8:bc:20:a4:bb:f9:38:8e:be:41:ad:89:59:c5:5c:de:10:
06:a9:7b:51:d4:a5:f1:de:3d:15:35:0e:e7:9a:2c:a0:d1:13:
4a:ac:7f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:45:50 2025 by rpki-client