Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/WuDdHOb-0ajIhQAb_bev4tWYHyY.roa
File: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (raw, json)
Hash identifier: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=
Subject key identifier: 5A:E0:DD:1C:E6:FE:D1:A8:C8:85:00:1B:FD:B7:AF:E2:D5:98:1F:26
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 01941FFA1C79B2CB372A42995A125B9ECEB2
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/WuDdHOb-0ajIhQAb_bev4tWYHyY.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 178.212.92.0/24 maxlen: 24
193.37.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1c:79:b2:cb:37:2a:42:99:5a:12:5b:9e:ce:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ae0dd1ce6fed1a8c885001bfdb7afe2d5981f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:66:17:0d:85:a2:0a:eb:a9:ed:43:70:68:
3f:21:23:6a:4e:44:1a:16:e0:db:a8:ce:3f:ae:22:
ec:36:b8:6e:72:6a:b5:1f:bd:c7:81:b0:0f:c9:6f:
a8:88:49:00:bb:0e:62:78:e9:be:af:0a:8f:ba:da:
9b:82:b4:15:ba:5b:cb:97:ba:cc:ad:c1:02:89:c2:
0b:c5:17:ef:eb:96:e5:fb:03:c9:41:66:11:2d:a3:
cb:3e:2a:24:09:5a:77:cd:d8:67:69:18:57:1a:e4:
98:5b:d0:53:01:cd:e4:b0:11:03:c3:a3:47:b8:71:
e2:dc:f1:c1:05:56:40:82:58:60:f1:46:e3:6d:15:
9c:74:de:89:57:00:74:07:06:45:05:bf:c8:c4:d9:
4b:b0:e3:35:07:f1:7f:9b:d2:72:ab:79:c8:58:10:
bf:bf:a7:4f:fb:75:89:70:ab:02:1f:39:36:5a:a9:
e8:5a:c6:e8:d5:94:ce:bf:07:b2:f9:54:4d:f7:48:
95:2b:4e:d2:b2:1b:d2:de:d1:44:5f:6e:03:e3:66:
01:59:46:1e:c0:18:e0:3a:e5:56:10:20:4d:e8:6f:
df:49:cc:41:52:1f:97:3d:5d:cc:38:c9:90:00:d8:
a7:77:b3:69:2f:7d:4b:41:07:87:74:54:75:a9:79:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:DD:1C:E6:FE:D1:A8:C8:85:00:1B:FD:B7:AF:E2:D5:98:1F:26
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/WuDdHOb-0ajIhQAb_bev4tWYHyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.92.0/24
193.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c5:36:9f:d7:63:b2:a9:b5:bd:d1:c9:89:a6:cf:d5:af:b3:
65:82:c9:74:67:5b:50:a1:2f:41:68:4d:68:ca:6c:e3:06:c9:
49:20:ac:87:f6:c1:e7:13:f4:e5:51:10:3f:1f:ae:2c:5f:94:
0f:95:c0:be:5f:c9:4e:bf:51:0c:b2:e5:c9:83:21:f4:7a:d5:
f6:80:34:0f:98:da:d6:5b:c0:c7:a4:61:dc:41:c4:d3:bd:92:
8e:b0:01:98:46:5e:3e:4e:16:01:60:a0:ec:1f:d1:da:fa:9f:
af:8d:9b:13:5a:6e:20:f8:d1:ae:04:40:0b:f5:c7:64:57:5e:
43:43:86:9a:02:34:f2:db:d7:4e:aa:41:f8:cd:4d:49:47:40:
7f:33:22:c4:3a:05:74:53:5b:08:6c:b2:ad:80:5c:16:eb:7a:
9e:24:0e:76:9f:1f:67:ba:8a:ce:0a:2c:ae:f7:f9:f4:e3:ce:
da:f4:9b:23:30:08:2f:41:9d:30:8d:9d:73:de:2f:f1:75:7c:
92:f1:7f:8e:e4:38:e8:5c:9e:8e:4c:7e:59:f3:6b:80:a7:6b:
ba:36:4d:62:be:ce:2f:19:47:ca:3a:25:89:56:32:ea:8c:1a:
34:fe:b0:43:da:7c:25:c0:2e:a2:71:31:f8:09:f8:92:7c:1c:
32:3a:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:26 2025 by rpki-client