Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/whqum5btfebJ92EiHlAqEY1dMyI.roa
File: whqum5btfebJ92EiHlAqEY1dMyI.roa (raw, json)
Hash identifier: sd3Z4KpjAwY2NA9vLDkpCk4Gn41kPN8SDpZ7IYPGDjE=
Subject key identifier: C2:1A:AE:9B:96:ED:7D:E6:C9:F7:61:22:1E:50:2A:11:8D:5D:33:22
Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Certificate serial: 019427B69352AA7247BC3A0ABD128C4B561F
Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/whqum5btfebJ92EiHlAqEY1dMyI.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57342
IP address blocks: 194.76.112.0/24 maxlen: 24
2a0c:ffc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:93:52:aa:72:47:bc:3a:0a:bd:12:8c:4b:56:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c21aae9b96ed7de6c9f761221e502a118d5d3322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:70:66:a1:3e:62:7d:d4:ea:57:08:fb:9b:
72:8b:d3:15:e1:7d:55:1f:db:93:33:cd:f6:19:dd:
02:df:bb:10:39:8d:a9:41:0c:44:c3:84:74:8a:d3:
46:23:89:3f:2a:e1:e5:80:a1:09:34:ef:7c:6d:1c:
c9:e8:bd:fb:92:81:d4:8a:95:8a:ec:2d:ff:92:87:
20:44:23:a6:a2:de:5a:93:03:81:0f:48:fd:b6:d1:
67:fa:5e:c7:2b:68:45:2f:8f:32:a9:6c:7b:8d:bc:
f0:90:a6:d3:94:9e:50:4c:c6:67:a3:e4:36:4d:e4:
29:f4:23:c9:21:d1:21:8e:00:73:2f:1e:3a:bf:37:
e0:4b:98:ba:b3:9a:37:df:ed:5d:f3:32:7f:ec:ba:
89:52:d2:13:a0:e8:a1:9a:78:0e:21:57:af:06:5e:
f9:a4:71:9f:6b:ac:4f:08:67:bd:b0:72:e7:0e:39:
01:4e:00:84:08:d9:42:cb:08:a1:dc:17:61:6b:5b:
41:ee:5a:cf:dd:9c:e3:d3:b0:23:ac:65:74:ae:13:
63:e3:0f:7c:30:f7:1d:62:8f:77:d3:27:7b:dd:5a:
fb:6a:a7:d0:44:a8:fb:af:b8:e8:59:c7:03:3c:7f:
dd:d8:a1:87:3f:fa:d5:de:d9:e3:e0:5e:4d:29:6e:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:AE:9B:96:ED:7D:E6:C9:F7:61:22:1E:50:2A:11:8D:5D:33:22
X509v3 Authority Key Identifier:
keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/whqum5btfebJ92EiHlAqEY1dMyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.112.0/24
IPv6:
2a0c:ffc0::/48
Signature Algorithm: sha256WithRSAEncryption
78:b0:bc:bc:3f:4c:67:eb:c5:dd:fc:0a:2d:ae:b9:61:d7:21:
7d:bc:3e:4e:fb:f7:aa:f3:05:bd:1f:1a:7e:65:47:24:83:c4:
7d:2f:9f:0d:5f:8e:f1:e4:7d:a9:1e:c4:f9:6d:8e:a1:d0:29:
af:cd:2b:e6:ce:46:86:f2:e0:17:45:25:3e:19:20:32:bc:47:
6a:b8:32:4c:74:ff:70:01:69:83:a8:f3:22:25:1e:7a:f3:d1:
28:60:28:42:81:03:f2:2a:63:0b:37:9b:61:52:bc:2e:af:f9:
96:81:c8:f7:ba:75:fe:b0:a8:5f:b5:3e:31:c1:2a:5c:cf:c7:
4d:1a:46:d8:40:5a:73:1c:8f:fa:5b:df:f2:83:2e:01:13:6a:
40:04:86:fc:b4:e3:94:4a:5a:4b:c3:21:2b:71:36:d0:a5:21:
a7:47:60:c9:be:0f:1f:81:cd:1e:d7:55:6d:8e:70:34:19:22:
ba:a5:d5:2b:3f:9a:d6:b3:f3:8f:aa:84:69:0d:46:0f:11:9d:
76:46:49:88:7d:17:ae:bc:f2:57:d5:f0:16:05:99:86:46:57:
8f:e9:f5:91:75:20:a0:9c:79:4a:8a:db:e9:d6:3d:c6:80:ce:
ce:10:c1:44:bd:6f:9e:d5:f6:9c:5d:7a:d3:21:e1:25:57:e3:
ab:1b:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:13:54 2025 by rpki-client