Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa
File: wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa (raw, json)
Hash identifier: uBYBylJRjDgsdsAh3Gf2WJ38oblmNaRqlj9rvalMb+M=
Subject key identifier: C1:C5:AD:25:66:5D:1E:D4:37:30:1F:89:18:66:F8:5E:0B:6F:45:96
Certificate issuer: /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Certificate serial: 01942368D8EB7803555A7438A6B92E000C8E
Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa
Signing time: Wed 01 Jan 2025 19:47:41 +0000
ROA not before: Wed 01 Jan 2025 19:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60318
IP address blocks: 193.104.157.0/24 maxlen: 24
2a06:b300::/48 maxlen: 48
2a06:b300:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:d8:eb:78:03:55:5a:74:38:a6:b9:2e:00:0c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Validity
Not Before: Jan 1 19:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c5ad25665d1ed437301f891866f85e0b6f4596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:3e:d4:3b:4c:66:fa:44:f8:29:fc:a7:ec:
b1:3b:5b:cb:83:ef:6e:e7:0f:d3:a7:08:71:f3:b6:
31:b5:e9:b1:c7:d1:55:bf:b5:f4:d9:3e:57:64:07:
12:fd:8f:7c:d5:d0:c0:41:d7:3d:17:3b:69:5f:93:
f1:98:7e:ee:1e:e5:d6:3e:95:cd:fb:c5:31:53:63:
de:09:96:38:0c:bd:3d:57:0d:e5:71:67:80:cc:d5:
3e:ca:7c:a5:17:49:48:ac:b8:8f:3a:a9:3d:18:fd:
f9:24:fd:68:c4:f3:e5:4a:61:c7:dd:ad:b4:89:94:
c7:07:93:f6:09:aa:68:e9:e0:e0:e9:6e:91:40:e1:
9a:a4:86:b7:31:dc:14:ea:6e:dd:88:75:e1:6a:ab:
9b:57:50:e8:62:bd:bd:5e:c1:12:bf:7d:58:85:05:
64:56:26:ec:3e:3a:27:3d:c0:90:8e:d3:9e:1c:ac:
6e:d1:f8:11:f0:a8:1a:ca:e7:e1:34:1d:ae:24:00:
0b:34:22:3d:97:66:65:80:fb:53:1d:08:70:39:c7:
df:b7:ee:8a:73:d5:46:6e:41:79:ef:31:1c:59:4b:
df:6e:38:a0:71:af:53:7b:90:b9:1f:29:43:66:70:
71:1b:29:d2:16:3c:8b:b9:c8:db:43:04:6b:9d:b4:
a1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C5:AD:25:66:5D:1E:D4:37:30:1F:89:18:66:F8:5E:0B:6F:45:96
X509v3 Authority Key Identifier:
keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.157.0/24
IPv6:
2a06:b300::/47
Signature Algorithm: sha256WithRSAEncryption
6e:6e:28:8b:a2:fc:c5:b1:99:68:c8:65:c8:04:23:3e:51:fd:
95:d7:fe:7e:db:ea:38:e1:39:bf:60:67:2f:51:d6:4b:f8:69:
e6:5c:9a:29:8e:f4:c4:e7:75:08:98:ce:34:f1:a4:57:e3:e3:
e3:89:24:8f:b0:8c:67:a5:44:64:a2:47:e2:b0:f3:bb:3b:7f:
dd:4d:b5:3d:aa:75:9c:f3:72:fc:48:90:54:f5:2a:96:98:21:
bc:02:84:c0:28:5d:cc:e6:04:76:11:7f:3c:7b:32:4a:99:04:
cc:88:f3:0d:57:44:70:b0:50:e1:c6:7b:a1:a8:9c:86:6f:30:
f3:79:65:2f:86:47:5b:7f:f0:45:40:bf:e7:d2:df:de:55:bf:
69:98:c8:0f:3c:5c:50:a4:cf:0c:24:e9:ca:23:d7:40:78:a0:
87:ca:a5:23:b9:60:ac:91:be:1c:a3:7d:60:cd:c3:ca:54:a1:
dc:a3:5a:83:d5:dd:d7:dc:b5:8a:2c:7e:a3:7a:28:c0:8e:b3:
42:91:01:12:5d:a7:12:bd:92:ba:52:1b:77:16:b2:cf:a3:0a:
77:ca:e7:81:07:8c:da:db:8f:7a:cd:54:5c:c1:7e:a2:4b:ad:
10:14:98:8a:91:fc:6f:7d:fa:5b:f1:be:e5:b2:3b:70:bd:a5:
9e:25:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:14:41 2025 by rpki-client