Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WVXGRhfShVSbEJxmM4gbiPebWTo.roa
File: WVXGRhfShVSbEJxmM4gbiPebWTo.roa (raw, json)
Hash identifier: r3dNn56VLEFVVe1R7cmQkU1LgWZXPHnfonLJ2ydVHrk=
Subject key identifier: 59:55:C6:46:17:D2:85:54:9B:10:9C:66:33:88:1B:88:F7:9B:59:3A
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01942747CCD2830EF565EB7E89858A560EEB
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WVXGRhfShVSbEJxmM4gbiPebWTo.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23959
IP address blocks: 194.50.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cc:d2:83:0e:f5:65:eb:7e:89:85:8a:56:0e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5955c64617d285549b109c6633881b88f79b593a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:8c:c9:21:c3:30:5a:8a:c4:34:c6:5e:67:
b8:60:89:f9:cc:a6:02:d6:71:58:78:3a:41:bf:9b:
e8:03:34:40:89:14:fb:3a:4e:dd:d0:38:cf:d1:66:
96:2e:4d:d8:16:bb:c1:a7:bd:2c:4c:f7:04:3f:24:
08:59:87:fc:c5:c4:2c:a2:5b:5c:f3:48:46:14:c4:
a8:ff:92:bb:10:02:c7:34:30:ff:40:63:3b:cd:3f:
2a:b9:1c:c6:a5:da:8a:17:d0:03:7a:04:d4:d1:c3:
52:62:b1:36:48:3a:83:2c:8f:3b:3e:7a:68:d8:2a:
ce:9f:ec:7a:80:1e:01:17:53:3e:f3:fb:10:4f:2e:
1b:8c:ae:4a:91:6c:e1:7a:cb:07:b0:e0:b1:b6:c2:
1b:34:6c:2a:6d:c6:7e:d4:93:66:97:0b:e4:90:9e:
ba:1e:8f:8a:53:32:75:c1:3e:6b:5f:de:37:5d:24:
5c:56:fb:db:6b:65:2a:70:ba:f9:b7:12:ca:1b:e0:
e4:29:c9:30:bc:b1:1e:73:ee:eb:bc:8f:d8:30:14:
9e:b0:2c:97:ca:3f:43:01:bb:d1:d8:26:11:25:c3:
a8:9d:9b:cd:29:48:f1:f9:94:15:ef:ce:3d:d3:8a:
55:12:f0:a4:ec:9d:83:b8:25:5a:93:4c:4e:22:6e:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:C6:46:17:D2:85:54:9B:10:9C:66:33:88:1B:88:F7:9B:59:3A
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WVXGRhfShVSbEJxmM4gbiPebWTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.18.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ce:0f:10:73:8d:e0:ee:09:53:25:a4:f6:39:e0:a3:a0:7d:
d6:3a:9f:ff:c7:5c:0a:2c:61:c2:6b:40:d5:07:df:73:aa:ce:
bd:46:5e:d2:11:93:a5:dc:f9:06:6f:81:a3:71:18:14:c5:1d:
e5:89:ee:49:a3:f5:3e:48:28:77:bc:3d:21:e4:7f:7d:00:db:
b9:eb:e7:a6:31:f4:f1:a3:e5:03:f1:7f:49:c9:d3:1d:b4:58:
3a:c9:f3:08:6f:e9:c5:8e:32:46:c5:3b:b0:5c:72:c2:81:be:
80:48:bf:81:f7:15:0c:2b:f5:20:e2:b3:a2:63:8d:b1:b8:1b:
4b:f3:63:63:9e:d5:7a:b3:3f:48:d4:9a:5f:41:b1:40:f7:4f:
1d:98:6b:a8:92:36:4a:20:22:f9:c7:c2:d4:af:8c:f9:b6:b0:
c5:8e:b6:e6:96:fe:19:d6:43:77:fa:fa:40:2e:c7:c8:5b:10:
ef:07:5e:32:e1:20:13:41:e1:1d:94:c5:0f:2d:ae:28:b9:e9:
79:70:4c:96:a1:aa:54:82:69:13:00:d6:73:4e:88:c4:09:c6:
0d:82:ab:33:66:de:b3:32:28:82:30:cb:ef:25:31:f9:0d:1f:
d0:44:64:d6:17:76:37:c8:81:ee:12:10:21:0f:48:34:6c:bd:
bb:cd:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:47:52 2025 by rpki-client