Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/Ws5DKPvqbwWmiknqYjYd59bVY2o.roa
File: Ws5DKPvqbwWmiknqYjYd59bVY2o.roa (raw, json)
Hash identifier: YBEW16WVtIIoX5bJxlmYLW0GT3fXf0v/AYf7w0McGNc=
Subject key identifier: 5A:CE:43:28:FB:EA:6F:05:A6:8A:49:EA:62:36:1D:E7:D6:D5:63:6A
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 019421B25513BA1BFB083DD21F3BE1465F24
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/Ws5DKPvqbwWmiknqYjYd59bVY2o.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31554
IP address blocks: 193.200.126.0/23 maxlen: 23
193.239.194.0/23 maxlen: 23
194.9.92.0/23 maxlen: 23
194.42.102.0/23 maxlen: 23
194.116.200.0/23 maxlen: 23
2001:67c:1e0::/48 maxlen: 48
2001:67c:115c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:55:13:ba:1b:fb:08:3d:d2:1f:3b:e1:46:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ace4328fbea6f05a68a49ea62361de7d6d5636a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dd:9e:fd:6c:11:7a:31:de:3a:7c:85:34:a3:
34:db:83:67:99:f7:f7:6c:6b:de:61:f7:31:29:ab:
8f:81:47:d9:c0:fd:3f:ff:73:70:45:03:ad:91:86:
11:da:8d:1a:f2:36:80:61:3d:6f:72:d9:68:dd:58:
48:6c:c9:30:0e:11:aa:b0:ac:5c:b6:cf:f1:31:37:
5d:fb:26:d3:a9:31:42:00:6e:79:ab:78:64:52:43:
4c:69:8d:cb:08:cd:6c:92:86:ac:fc:8e:c6:7d:b1:
38:e9:67:24:14:bd:17:94:95:7d:6e:8d:12:3a:d8:
3e:3e:21:3c:7a:8a:c6:3f:fe:22:27:71:c8:6b:e0:
40:32:d9:4c:ca:4d:36:60:04:be:e4:db:4c:15:73:
08:6f:09:5d:cf:b7:f5:a6:2b:f9:74:41:dc:df:17:
fa:66:96:28:65:a6:36:2f:18:7f:a5:7a:af:36:a0:
08:d1:23:7b:d7:09:a6:a1:52:5e:c9:c5:4d:d0:c3:
7c:a4:15:f6:13:86:ac:f5:02:d6:21:ee:cf:92:0e:
b7:2f:df:28:08:4b:cd:b8:ae:66:b5:b3:1e:49:e2:
71:40:41:4a:a4:47:61:50:9a:99:49:7b:7e:f8:4f:
3b:e4:35:6c:0f:a9:16:00:f7:a9:29:d9:f0:61:72:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CE:43:28:FB:EA:6F:05:A6:8A:49:EA:62:36:1D:E7:D6:D5:63:6A
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/Ws5DKPvqbwWmiknqYjYd59bVY2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.126.0/23
193.239.194.0/23
194.9.92.0/23
194.42.102.0/23
194.116.200.0/23
IPv6:
2001:67c:1e0::/48
2001:67c:115c::/48
Signature Algorithm: sha256WithRSAEncryption
f6:ef:47:7d:2e:ae:72:8b:73:71:98:2d:19:aa:f3:9e:f6:a0:
d8:ce:6f:1a:1d:d8:68:b1:c4:79:42:17:57:a9:66:03:9c:f3:
f2:6a:56:0a:c4:23:8d:92:0c:5a:c4:87:48:2d:8d:fe:97:92:
37:a0:d2:72:26:14:66:ca:1f:0c:a8:73:fe:94:0d:7f:81:57:
d3:25:9f:8d:f4:d9:39:33:7c:0e:9c:10:55:c5:f9:91:6c:55:
cd:f6:e8:04:1b:65:3b:ce:e7:c3:63:19:c8:0a:15:f5:81:b1:
b6:4a:58:76:81:33:f4:16:1f:e3:69:07:dc:b2:f0:36:8a:7d:
58:0b:6d:54:65:bf:12:45:3c:af:cc:72:8c:76:a5:93:03:d0:
67:d2:42:0b:7d:49:84:e6:82:0b:dd:23:db:c3:22:e9:78:72:
ab:b3:bb:d5:d9:4b:31:23:b2:0a:fa:0c:b3:f4:91:11:a0:f1:
1f:ab:b5:31:5b:15:1f:9f:3f:0d:19:d7:ab:7c:ab:52:d1:4b:
f2:0c:fb:c8:75:37:3b:0c:2b:7f:00:77:04:5d:3d:13:b9:23:
04:48:a3:52:74:d8:88:8f:44:2a:ca:f9:95:23:75:bf:80:44:
3a:61:65:8e:21:c1:31:52:c1:2d:5b:00:e4:99:17:9f:a8:f2:
cf:11:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:08 2025 by rpki-client