Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/WpUhoumLDTywn-hlHQU-VDabUzs.roa
File: WpUhoumLDTywn-hlHQU-VDabUzs.roa (raw, json)
Hash identifier: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=
Subject key identifier: 5A:95:21:A2:E9:8B:0D:3C:B0:9F:E8:65:1D:05:3E:54:36:9B:53:3B
Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial: 019425FDB327B6F2A49F27FDE18184441298
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/WpUhoumLDTywn-hlHQU-VDabUzs.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6738
IP address blocks: 46.18.192.0/21 maxlen: 24
185.86.176.0/22 maxlen: 24
195.114.26.0/23 maxlen: 24
2a03:3280::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b3:27:b6:f2:a4:9f:27:fd:e1:81:84:44:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a9521a2e98b0d3cb09fe8651d053e54369b533b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:a8:30:81:e1:11:3c:8d:aa:eb:13:53:43:
1c:f9:49:9c:74:18:2e:75:d2:15:9b:de:ce:b9:39:
d7:44:74:6f:7c:75:7a:42:86:4c:ac:40:85:5f:aa:
58:13:19:de:46:7f:06:b4:e0:ff:35:0e:7d:2f:1c:
b5:3c:8c:2f:f2:49:55:3b:7c:14:16:cc:26:8b:f8:
61:2b:40:4c:af:43:b7:85:3f:3f:e9:43:01:f1:81:
73:a8:2e:cc:53:4b:e5:7e:94:25:47:56:3d:1e:ae:
bf:7b:eb:47:2e:ac:eb:12:bd:ae:ff:6d:d0:3c:0b:
c7:b8:59:d0:54:ce:5b:54:90:eb:a9:04:7c:2f:6b:
5a:18:c9:ba:08:9a:ee:2a:7e:ab:04:d6:e3:d5:59:
7a:45:be:38:f5:fc:f9:e1:f1:bb:fa:f4:5d:9f:45:
02:46:ec:d1:82:87:97:89:6e:61:d6:dd:70:83:20:
5f:fe:a2:59:1a:3d:06:e5:d2:f7:97:c2:76:ee:b1:
ad:ad:8e:ee:15:57:23:f4:8b:2c:fd:81:9c:e7:50:
36:34:71:98:f6:90:a7:e1:39:2f:67:fd:5c:54:0e:
b5:88:ca:ce:4b:e0:de:31:b7:51:c5:ba:bc:21:6e:
5a:ad:21:b2:13:5f:53:ef:4b:04:54:78:60:77:99:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:21:A2:E9:8B:0D:3C:B0:9F:E8:65:1D:05:3E:54:36:9B:53:3B
X509v3 Authority Key Identifier:
keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/WpUhoumLDTywn-hlHQU-VDabUzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.18.192.0/21
185.86.176.0/22
195.114.26.0/23
IPv6:
2a03:3280::/32
Signature Algorithm: sha256WithRSAEncryption
1a:ad:5c:5a:8c:3e:24:a2:8e:68:ec:3c:43:ca:68:14:b4:99:
5a:b6:6e:76:9a:f2:c9:3a:c7:df:61:d4:47:a2:64:bb:22:b0:
eb:d5:75:22:a6:95:30:d5:51:f5:34:19:4f:22:a6:20:37:a3:
88:ea:a4:e3:da:32:ec:a8:bf:43:29:20:91:44:72:df:dc:2c:
ba:ed:c7:99:30:f3:95:42:26:99:2c:15:dd:a6:6d:67:69:a9:
b8:6b:f8:81:07:c3:38:02:0b:7e:85:f3:d9:f4:49:6f:72:31:
ee:5f:d9:d8:59:46:fe:24:18:2c:f3:1c:d7:d5:54:77:7a:34:
d8:47:1f:98:35:bf:36:7f:2b:60:bf:46:2f:ad:e9:9d:9d:ee:
d1:9e:9f:27:64:97:e3:77:34:9b:b0:c1:ab:c3:5c:76:96:fb:
06:08:bf:ff:a1:6d:d9:81:07:31:bc:be:1c:1a:80:a5:6a:ea:
1d:c3:09:f0:8b:61:de:3a:d8:df:dd:b1:2c:76:0e:51:c5:5a:
5b:2c:a0:b2:39:fb:3a:3a:d4:62:94:c9:c7:a2:a9:9d:17:bb:
08:e0:af:02:ca:3d:59:c3:c4:8b:3b:d7:db:ff:9d:0d:0e:3f:
d8:3b:42:b3:27:28:97:ea:02:db:f1:07:ea:6c:77:54:83:7f:
1f:a0:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:06 2025 by rpki-client