Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZwU7hrrx79oh8N9UT1Woj_7n_0.roa
File: wZwU7hrrx79oh8N9UT1Woj_7n_0.roa (raw, json)
Hash identifier: dT0AQSbGK+mKAkRcsXS9JPzi045UtgUyr7WStEySrGk=
Subject key identifier: C1:9C:14:EE:1A:EB:C7:BF:68:87:C3:7D:51:3D:56:A2:3F:FB:9F:FD
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0193862F0B2540385CF7DE1371D3D172E4E3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZwU7hrrx79oh8N9UT1Woj_7n_0.roa
Signing time: Mon 02 Dec 2024 07:04:10 +0000
ROA not before: Mon 02 Dec 2024 07:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213323
IP address blocks: 80.96.48.0/23 maxlen: 23
81.181.232.0/23 maxlen: 24
194.102.150.0/23 maxlen: 24
194.153.228.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:86:2f:0b:25:40:38:5c:f7:de:13:71:d3:d1:72:e4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 2 07:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c19c14ee1aebc7bf6887c37d513d56a23ffb9ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b5:0d:fe:f0:78:35:db:a8:26:4f:62:dd:7c:
3f:77:7b:d0:62:91:56:01:97:02:7e:72:e4:46:83:
3c:5e:9c:fa:26:5d:61:1a:0f:94:c4:5f:54:f0:3c:
53:ec:93:8a:aa:11:3c:69:3b:e5:71:72:b8:77:97:
bf:cb:cd:2b:d9:de:e3:2c:38:74:6e:a5:e8:40:39:
4a:b1:3f:ac:e2:9d:f4:c9:87:3a:0f:27:61:8e:db:
3a:bc:9c:8b:2e:8e:b0:b0:14:72:7f:6b:59:bc:bc:
34:40:35:4a:26:89:2e:89:d3:3d:c9:83:0f:c0:76:
4e:02:00:64:e3:e6:d6:77:4d:89:16:78:6c:36:27:
c2:d7:f9:0b:ab:67:fa:3e:f3:a7:4d:5c:37:35:1f:
d8:3b:ce:d4:a1:2c:4f:f7:8f:b8:ea:7d:c9:e4:56:
51:84:6c:5f:20:e4:8e:b3:63:ca:ff:f3:5c:63:83:
df:f9:b8:fb:6c:6d:90:d5:c7:e1:f0:5d:d2:89:40:
50:85:5f:d1:f0:2a:57:c2:1f:b3:0c:bf:f8:a1:87:
bb:d0:b1:21:20:c6:e9:1b:11:87:42:e9:66:54:5c:
df:74:a5:78:eb:ef:e1:ca:c7:0b:68:c6:b1:0e:ca:
e2:55:d3:dc:9c:78:b4:6a:63:24:05:3d:99:47:ee:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:14:EE:1A:EB:C7:BF:68:87:C3:7D:51:3D:56:A2:3F:FB:9F:FD
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/wZwU7hrrx79oh8N9UT1Woj_7n_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.48.0/23
81.181.232.0/23
194.102.150.0/23
194.153.228.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:db:1f:78:05:b5:c6:e1:f9:30:82:89:2c:0e:ad:7c:48:6f:
b0:da:a2:da:98:67:d7:ba:0d:90:b1:5a:70:63:2b:29:f2:f8:
46:05:27:db:d6:0c:89:23:cd:b5:e1:f9:65:e9:54:ef:e7:d3:
3f:c7:55:2e:a2:8c:ce:70:38:8c:92:9d:0f:7b:d9:9d:5c:d2:
3c:72:c1:67:e6:f0:a3:6a:12:00:f4:4f:3b:8e:b3:66:03:2e:
32:84:77:eb:a6:f3:35:a5:e7:d3:9d:17:2d:4d:d4:b7:d7:9a:
29:fe:69:e2:e7:e8:3e:d0:f5:59:42:f4:6b:f3:08:82:8a:2b:
9d:31:7d:02:e4:a4:7c:e2:94:85:86:58:8c:06:ed:92:89:3b:
8c:af:ce:e7:9e:4f:1e:b2:c9:47:b4:42:eb:ac:35:a7:9d:82:
c4:56:a5:dc:24:46:5a:57:e2:e0:81:0c:2f:2e:16:f2:a4:7b:
a7:07:1f:cf:09:a4:b7:36:63:b0:60:75:84:30:48:1d:ff:f9:
16:5b:8f:9c:09:f3:aa:60:51:81:51:ac:c3:ac:00:c5:6f:37:
96:30:0f:8d:da:ca:98:0b:5c:1e:0d:f0:15:80:2f:18:25:c2:
78:ce:64:2c:cf:37:f6:76:18:4b:18:1a:2d:76:f3:b3:c1:92:
f0:51:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:47 2025 by rpki-client