Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W6KimnIvk6eMeq6kUdiYBYfkS-I.roa
File: W6KimnIvk6eMeq6kUdiYBYfkS-I.roa (raw, json)
Hash identifier: AOQFniSs/VHMJkjafFbskYQZSS9mKL/SO280+LccuXE=
Subject key identifier: 5B:A2:A2:9A:72:2F:93:A7:8C:7A:AE:A4:51:D8:98:05:87:E4:4B:E2
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50C92CA8
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W6KimnIvk6eMeq6kUdiYBYfkS-I.roa
Signing time: Sat 01 Jan 2022 16:01:43 +0000
ROA not before: Sat 01 Jan 2022 16:01:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16114
IP address blocks: 194.209.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1355361448 (0x50c92ca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:01:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ba2a29a722f93a78c7aaea451d8980587e44be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:bd:51:22:61:6d:14:7e:02:05:f4:36:f2:
8f:cb:b9:5c:cb:ba:4f:97:26:50:b0:10:40:40:13:
5a:d2:07:2e:94:44:6c:2e:75:ea:d5:bb:8e:1e:7d:
e8:fb:12:72:71:b2:df:3e:d3:aa:8c:f9:fe:29:fb:
6d:71:e8:e5:04:2d:a0:68:31:df:bc:42:b3:a2:a9:
14:f2:68:a0:3e:88:1f:f7:bb:8a:fa:07:d1:2f:38:
ce:c6:e8:76:55:33:cd:58:fb:01:f6:8c:74:92:c6:
4d:fe:56:69:d6:a7:04:2e:2f:5d:a1:cf:dd:1f:7a:
f8:a1:99:c0:e6:9c:be:14:21:92:ab:17:cc:e5:30:
a9:b0:af:2b:2f:19:14:e9:98:54:32:9d:dc:ec:67:
c1:ff:e9:90:63:92:a0:0c:9e:9d:0d:4f:f8:97:ed:
25:29:ff:ef:00:9a:6a:3e:4a:8e:ee:97:50:2c:01:
a3:35:80:35:4e:69:78:38:f8:6c:31:8b:df:7b:b1:
b5:b1:9c:07:cb:ba:ed:2d:ad:08:2b:87:59:d3:60:
7b:5c:78:a0:1f:0c:8e:9e:4e:52:5e:33:c5:05:f7:
f9:9c:0c:5b:79:6c:29:4b:7d:9d:08:26:12:bb:29:
3d:71:4e:64:04:84:6f:e8:2e:74:68:6c:71:d9:3f:
f2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A2:A2:9A:72:2F:93:A7:8C:7A:AE:A4:51:D8:98:05:87:E4:4B:E2
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/W6KimnIvk6eMeq6kUdiYBYfkS-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2d:d6:b1:d2:54:80:b9:39:b4:1b:b3:8c:a8:fb:bf:20:64:
16:77:93:76:93:2c:5f:1c:b6:9e:50:16:88:ce:01:0b:a8:f1:
40:f4:76:41:b7:98:23:5e:2b:1b:d3:af:ae:06:4a:c1:f2:be:
d9:00:58:ae:dc:51:b9:5e:7c:53:7e:82:c5:9f:c7:2c:a7:2a:
ac:2d:f1:c1:ea:49:83:9a:75:7a:aa:ff:88:5c:2b:78:5b:60:
1d:46:79:a3:ae:8c:a2:9c:f5:2d:ac:54:c2:24:05:f2:67:bd:
c4:e5:bf:b6:e0:52:f9:29:16:72:62:46:54:0f:a4:db:07:d1:
83:a3:8c:9d:92:fc:7f:2f:f2:62:39:d1:a5:6e:cc:f8:95:31:
d0:7c:66:1a:9b:9f:60:f4:39:d2:00:82:18:35:5a:e9:69:dc:
a2:56:6d:01:f4:2b:6e:9e:01:dc:e2:37:29:98:a9:9d:79:c7:
16:6c:5d:7e:d8:3f:ca:45:9f:a4:70:a4:97:84:5d:d8:3a:9a:
fa:42:ed:15:b4:60:18:3c:d5:e5:1d:73:26:42:0d:eb:04:c3:
a2:f6:78:3e:a8:97:5d:5b:70:f1:60:77:8f:6e:b2:38:e6:81:
db:c7:ad:bd:64:85:ce:e1:b0:8d:ed:53:6c:b1:06:f4:45:43:
32:ba:e3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:27 2025 by rpki-client