Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wLuhR-LcvMPOhnYJotWoxJR1R04.roa
File: wLuhR-LcvMPOhnYJotWoxJR1R04.roa (raw, json)
Hash identifier: UrZ2jNFEgUE+7yEKzBghctgFxWI+RQKvx1Eu0oTSbu8=
Subject key identifier: C0:BB:A1:47:E2:DC:BC:C3:CE:86:76:09:A2:D5:A8:C4:94:75:47:4E
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018DECAABA6878FA08C5E9938CB9806EDF9B
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wLuhR-LcvMPOhnYJotWoxJR1R04.roa
Signing time: Tue 27 Feb 2024 22:23:48 +0000
ROA not before: Tue 27 Feb 2024 22:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 193.29.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:aa:ba:68:78:fa:08:c5:e9:93:8c:b9:80:6e:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Feb 27 22:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0bba147e2dcbcc3ce867609a2d5a8c49475474e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:6d:99:0d:ad:0d:5a:2f:0a:18:a6:fd:ae:
08:a7:30:e1:b2:9e:83:52:2e:8d:d8:c3:3e:35:ae:
16:5e:14:64:f9:78:9f:40:4c:bd:3f:68:de:c7:c7:
ec:2d:13:01:8d:84:db:ce:b4:bf:61:3f:ef:bd:b5:
e3:da:00:25:ed:94:c3:16:14:a8:a6:ac:7f:5c:f0:
f8:a2:2e:63:ab:13:a0:d2:66:89:70:21:5c:66:77:
8e:0d:8e:d5:26:70:95:7e:9e:98:08:64:2e:e7:b6:
6c:a5:1b:fe:bf:74:5c:1c:75:0e:75:0c:4a:33:4e:
b3:c0:b9:29:94:b7:3d:fd:01:6c:2d:ec:d0:25:b1:
dc:8d:1c:99:9d:63:90:03:83:ba:a7:c6:b2:9e:af:
a0:9f:3f:9c:7c:5c:c2:c0:72:b0:f1:3a:ad:63:3c:
c4:ca:d3:6d:74:e2:af:fe:02:d9:56:25:f7:f8:b8:
03:79:ad:0b:25:de:4b:e0:5b:fb:b1:b5:c7:a6:16:
16:0b:ed:0d:b9:ef:1f:66:b7:2b:fa:32:07:80:66:
0f:a9:42:ea:94:33:99:ef:ac:59:58:6e:14:ff:13:
eb:0d:80:a8:e9:12:cf:14:4a:c8:38:dd:43:71:46:
15:43:15:7f:4c:a9:ba:28:70:76:5a:3d:51:f7:ed:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:A1:47:E2:DC:BC:C3:CE:86:76:09:A2:D5:A8:C4:94:75:47:4E
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wLuhR-LcvMPOhnYJotWoxJR1R04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:51:00:b8:a7:9d:5f:02:1e:0c:fc:af:0a:35:b0:c2:15:f6:
64:28:0e:59:b7:28:15:aa:ac:ce:6c:08:6d:b5:c2:5e:58:8a:
22:20:b6:ec:56:d1:61:dd:75:85:06:3d:b9:07:93:cb:aa:32:
ef:46:4d:6d:9e:20:71:26:8a:5b:b5:43:dd:c3:b0:0b:c4:35:
6c:35:0c:3f:ff:26:03:b3:f7:2a:40:df:ad:77:93:f3:81:1e:
c6:ff:9b:a8:28:18:28:f9:37:a3:a2:ff:14:cc:bd:9d:af:36:
d5:95:64:fc:44:63:de:54:04:aa:a5:0c:16:4a:35:87:31:2d:
36:e5:a2:66:19:36:f1:45:23:30:0c:55:e7:14:fb:3c:42:b5:
15:44:fa:e7:56:f1:46:d9:cb:fd:01:3a:84:41:3e:4e:91:c8:
37:bd:fa:88:56:36:a9:d6:55:45:17:6a:6b:17:de:76:f8:80:
53:d1:92:f9:a0:bd:d3:44:45:52:86:fa:6f:a6:24:d8:29:88:
2d:b5:af:53:9a:2d:3e:4a:e7:71:a4:f2:5d:23:4f:16:48:d9:
56:b1:c6:29:54:bd:3b:10:6a:3f:c3:53:db:f0:83:aa:82:4c:
87:af:bf:b6:37:04:d1:1a:ff:9d:a3:79:6a:c6:ae:f7:8a:55:
9d:68:f3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:47 2025 by rpki-client