Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wpVyG2veNXXiqvd9qbb56p6RhMY.roa
File: wpVyG2veNXXiqvd9qbb56p6RhMY.roa (raw, json)
Hash identifier: A6UqxkMUpX9ZIGVbEYAfKZvH4lu0ByMng2y+/s3lvEU=
Subject key identifier: C2:95:72:1B:6B:DE:35:75:E2:AA:F7:7D:A9:B6:F9:EA:9E:91:84:C6
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019527712A8A38B1101E52DB0482F2DC94C6
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wpVyG2veNXXiqvd9qbb56p6RhMY.roa
Signing time: Fri 21 Feb 2025 07:38:02 +0000
ROA not before: Fri 21 Feb 2025 07:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 176.103.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:71:2a:8a:38:b1:10:1e:52:db:04:82:f2:dc:94:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Feb 21 07:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c295721b6bde3575e2aaf77da9b6f9ea9e9184c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:26:31:6b:d6:4d:18:13:25:34:03:6f:d0:
4b:4b:e5:ea:6c:75:17:26:73:06:dc:e0:4c:35:4e:
65:b2:4f:58:8b:80:ac:5f:41:43:2c:99:67:20:32:
86:aa:ca:ae:20:00:24:1b:c9:80:df:f2:f4:56:04:
5f:27:d1:43:77:d1:51:8c:5b:44:71:60:3d:68:79:
a1:95:b2:7e:5b:71:63:fc:b6:66:d6:c6:ca:5f:93:
aa:5e:fe:37:54:61:8c:91:2f:da:cb:bc:73:cb:65:
9d:12:1b:30:4a:42:4b:b9:82:ae:c8:3b:c1:bf:59:
c0:6e:a8:9f:91:6c:28:4a:86:a4:d5:35:60:0e:f6:
f0:ef:4d:bc:42:8b:81:aa:ff:d4:89:9f:84:4f:ae:
a2:52:42:52:71:72:f5:71:f2:a9:bd:0d:f5:a8:84:
e5:40:0a:0e:c3:6a:b0:d6:72:1e:af:81:61:c6:2a:
57:35:8a:5d:a3:d6:cf:ce:77:cc:6d:2b:d3:03:0f:
bb:7c:2a:ac:d8:a2:97:2f:9e:d9:40:95:07:d6:ab:
94:44:71:18:68:ff:57:de:51:6d:e3:55:2c:e5:ad:
fc:fb:a9:cc:f3:20:c7:c6:0c:29:26:ac:1b:93:a8:
6b:f9:dd:fc:9d:7d:e8:06:fb:0a:63:06:1b:2d:ba:
38:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:72:1B:6B:DE:35:75:E2:AA:F7:7D:A9:B6:F9:EA:9E:91:84:C6
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wpVyG2veNXXiqvd9qbb56p6RhMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:33:54:f8:73:b6:dd:54:1c:a9:ce:26:f3:bd:9a:40:78:07:
ee:73:64:50:a9:f6:1a:4f:56:f7:86:33:c2:47:81:c5:a0:17:
79:23:ab:8c:1b:99:60:53:87:1d:b4:49:db:c2:23:9d:5f:31:
41:a5:4e:fe:3d:b7:7d:0a:2e:34:c1:1b:77:83:a3:bf:31:e8:
ef:1d:59:3d:71:04:82:17:7d:bd:d8:df:85:d3:7c:0d:56:e6:
eb:c5:d9:66:cf:2f:73:8a:ff:f2:a5:60:68:7d:71:96:c0:cf:
53:c0:a9:38:1a:c6:52:71:e1:ec:02:07:b9:ab:2a:85:fb:d8:
eb:b5:85:2d:1b:d3:68:fc:e4:2f:0f:2a:7b:f7:e0:c9:0c:5f:
5a:f0:41:8e:13:72:07:fb:10:63:82:21:ad:66:3d:9a:2a:43:
9a:02:00:16:c4:dc:44:c5:79:1d:e4:74:bb:51:82:34:62:da:
58:08:72:f4:05:90:0c:38:74:21:16:c5:c4:f1:ec:1c:01:ec:
26:64:e9:ed:57:e2:f3:3f:dd:d1:2d:11:8c:71:44:1c:fa:76:
70:42:1f:93:fe:94:6c:97:83:5d:40:cc:f0:16:d8:28:ab:0e:
7d:ba:30:e0:a4:bb:1a:6a:09:cd:e8:b3:23:1d:d7:0b:25:6e:
4d:8c:a2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:10:44 2025 by rpki-client