Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa
File: W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa (raw, json)
Hash identifier: GOtvHAAEQEDyzwtDsA3aSlZZHxuWNeU6Rlg4PiHPszw=
Subject key identifier: 5B:EF:99:2A:BE:62:8F:40:6D:B8:85:EC:E6:BB:C9:C9:7B:77:77:CC
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 019423698B2E57177C907936E8630C431ECF
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa
Signing time: Wed 01 Jan 2025 19:48:26 +0000
ROA not before: Wed 01 Jan 2025 19:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 193.134.96.0/24 maxlen: 24
193.134.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8b:2e:57:17:7c:90:79:36:e8:63:0c:43:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Jan 1 19:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bef992abe628f406db885ece6bbc9c97b7777cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:16:68:19:6e:3b:ef:1e:fa:04:07:3d:d2:
bb:ac:f4:35:3b:b2:d0:cc:05:da:99:1b:c5:87:d4:
ef:4c:99:46:c2:40:db:37:c7:2b:94:9a:09:83:32:
bb:1d:8c:f7:b5:68:a2:94:72:98:66:f3:d6:70:f6:
8a:32:67:01:c3:89:0c:2e:c5:f0:be:ba:f3:04:4f:
5f:94:e1:8e:cc:ec:ab:4e:53:97:71:84:1e:76:6a:
e2:b2:c9:0a:79:27:27:a9:73:18:9e:20:21:47:f6:
ec:98:e7:08:1c:e8:b7:a0:8d:68:c7:2a:dd:01:30:
25:0d:d4:4d:92:09:2d:7d:5e:40:d6:5a:9b:c9:ff:
97:2e:1a:ff:d6:25:9e:16:fc:8d:9c:44:e5:25:16:
dd:75:46:3f:11:eb:8f:b0:74:86:5b:ac:b5:1c:22:
bd:6b:af:3c:a7:59:1b:03:a2:57:24:6e:12:61:b4:
f6:34:49:9d:8c:1f:00:70:33:fb:83:d7:45:1e:b4:
45:49:a4:53:f3:4d:4b:b8:aa:9c:89:34:b5:87:d1:
da:64:5f:78:a8:57:40:30:d4:9e:4e:f2:f6:c4:4e:
6d:3b:14:5e:c6:ee:b2:93:25:e0:ba:11:d1:e3:e4:
bc:73:7c:43:e3:d7:19:af:84:35:72:09:70:d8:00:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:99:2A:BE:62:8F:40:6D:B8:85:EC:E6:BB:C9:C9:7B:77:77:CC
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/W--ZKr5ij0BtuIXs5rvJyXt3d8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.96.0/24
193.134.98.0/24
Signature Algorithm: sha256WithRSAEncryption
57:14:34:2e:db:94:32:e4:9b:3a:62:32:49:9e:e7:35:26:15:
81:73:37:62:cd:eb:25:ab:06:e6:8e:fb:ce:0c:50:f4:d8:c8:
91:48:81:01:af:bf:5b:f3:da:b5:2d:c6:ac:91:a6:71:e6:37:
17:8c:6e:1d:31:fd:e5:11:80:77:a4:f6:30:98:6a:10:c3:b1:
26:e3:56:22:29:f7:cc:c7:71:da:ed:48:c7:de:71:9b:b9:78:
56:5e:4b:30:50:51:e5:e7:91:f7:c7:a6:fb:6c:55:fd:b7:41:
f8:2c:4e:11:c0:c6:26:da:85:26:31:f8:3d:8d:e7:10:4e:45:
6f:fe:f1:46:0c:d0:7b:ea:17:70:59:10:22:12:1a:c4:66:ed:
c3:7f:1f:c5:77:f3:ab:d4:f3:67:57:06:a5:3d:08:84:16:d0:
a5:5a:98:cd:d8:35:4d:4c:1b:26:f2:b9:27:68:40:c7:43:3b:
7e:54:7b:cc:db:b0:1a:20:76:ab:f6:ea:87:89:00:68:46:8e:
6b:ab:09:d1:5a:8a:56:be:52:00:cf:16:8d:7b:60:b6:c3:e7:
19:28:9e:fa:9a:81:bb:c1:7b:21:ba:91:6d:04:68:8b:e1:4d:
89:cf:7e:03:55:b2:8e:73:54:84:7d:18:52:f9:03:50:d5:6d:
2d:9d:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:39 2025 by rpki-client