Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZVhf-Yk12npDsFH3zItFjcYp_8.roa
File: wZVhf-Yk12npDsFH3zItFjcYp_8.roa (raw, json)
Hash identifier: q48sKfLLmKHe2DEI39vvR0avJoc2MmlHS5XM85RywRI=
Subject key identifier: C1:95:61:7F:E6:24:D7:69:E9:0E:C1:47:DF:32:2D:16:37:18:A7:FF
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C336D5E8DC05032C7434474BEAD55
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZVhf-Yk12npDsFH3zItFjcYp_8.roa
Signing time: Wed 01 Jan 2025 01:47:49 +0000
ROA not before: Wed 01 Jan 2025 01:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61120
IP address blocks: 194.105.10.0/24 maxlen: 24
217.156.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:33:6d:5e:8d:c0:50:32:c7:43:44:74:be:ad:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c195617fe624d769e90ec147df322d163718a7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:0b:60:0c:61:7a:51:9e:9c:d7:b5:12:09:
f0:26:d7:c1:7c:2b:13:63:1c:27:7f:af:46:68:01:
b6:ac:26:8d:b8:e1:ed:54:b1:e3:f8:6c:c8:4a:41:
fd:dc:9e:b9:54:a8:bb:6d:31:31:c3:57:e0:14:54:
83:a2:10:f9:07:00:32:5e:70:ab:09:c3:0f:51:ee:
a3:14:ff:ba:4c:1b:cc:43:f8:29:02:8c:4b:14:ce:
db:ab:d3:2d:8b:d7:35:50:65:d4:c2:30:9c:37:25:
fe:c0:01:11:a6:2b:70:af:6d:2a:87:2e:a3:ca:cf:
5a:46:9e:8d:a7:90:62:ae:06:f2:7c:19:38:2a:37:
a5:e4:1e:ef:e4:fa:e0:9f:cd:80:0f:23:03:54:b5:
29:a4:ea:3e:e2:ff:3d:75:cf:01:41:aa:fc:93:72:
94:f2:9e:b5:aa:59:78:4f:8d:f6:62:9e:c1:32:b0:
b5:95:99:8f:51:53:2f:50:2f:18:bf:16:b2:7e:a2:
87:7a:51:88:b5:f8:42:0f:f4:ec:4b:13:4d:93:29:
72:41:84:ef:4f:2c:d6:70:6d:b4:cd:1a:78:1c:16:
39:c1:c4:55:0e:e4:0a:8e:0b:96:25:c7:7a:fb:ad:
b6:79:9b:3a:b6:eb:d7:63:a9:c8:f2:df:a1:67:17:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:95:61:7F:E6:24:D7:69:E9:0E:C1:47:DF:32:2D:16:37:18:A7:FF
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZVhf-Yk12npDsFH3zItFjcYp_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.10.0/24
217.156.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f0:35:cc:7f:ce:d6:e4:44:b4:50:d1:76:6f:c6:02:b1:c5:
51:a8:49:e6:20:51:fd:38:69:90:ed:df:50:48:f7:ae:9f:e1:
62:a9:8d:e9:ed:11:2d:16:0c:91:9c:a8:5c:d3:d7:b9:f3:29:
9c:ea:36:5a:13:16:2c:dd:0d:4a:d8:a3:09:2f:22:a9:f0:a2:
7a:40:8f:fe:aa:6f:94:93:b8:79:88:2c:a9:31:7a:8c:ee:7f:
3b:94:09:01:f0:d6:38:b4:37:51:21:80:d2:f0:00:5d:e9:e3:
4b:a2:d4:e4:51:e7:61:e4:da:d9:f4:43:a9:c2:d6:46:f2:c1:
21:f7:58:2c:be:82:ff:d7:c6:be:cc:3a:e7:55:37:34:ff:5a:
1d:fd:81:d1:2e:18:de:de:7e:31:ac:59:cc:ef:28:cf:5e:aa:
72:d3:83:17:b8:ff:f1:37:ec:58:a3:34:0d:c7:48:ee:fe:cf:
16:dd:f8:7c:61:f1:f5:0a:51:fe:00:0d:8e:8d:c1:32:e8:f0:
3a:88:c2:b0:16:23:cc:56:95:30:7c:3e:03:e9:03:99:14:2e:
bf:94:3d:dd:45:2e:5e:ac:27:e8:83:28:3f:e9:59:66:f1:f9:
d4:37:f0:c3:b7:3d:70:8d:22:0a:66:59:0a:b0:71:c3:06:b4:
8c:95:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:56:43 2025 by rpki-client