Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/WgGE8SmHkkHtiKjEfowQOh6KXV8.roa
File: WgGE8SmHkkHtiKjEfowQOh6KXV8.roa (raw, json)
Hash identifier: 22fxBEDWF5kPp/e3BDEYhqrTgPBi1KncqCiTSsX2CWM=
Subject key identifier: 5A:01:84:F1:29:87:92:41:ED:88:A8:C4:7E:8C:10:3A:1E:8A:5D:5F
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 0194228D32923BE7E5132FE91D06B5326325
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/WgGE8SmHkkHtiKjEfowQOh6KXV8.roa
Signing time: Wed 01 Jan 2025 15:47:46 +0000
ROA not before: Wed 01 Jan 2025 15:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11269
IP address blocks: 194.15.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:32:92:3b:e7:e5:13:2f:e9:1d:06:b5:32:63:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Jan 1 15:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a0184f129879241ed88a8c47e8c103a1e8a5d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:eb:6f:d2:b8:1a:5d:bc:1c:69:4b:ef:b5:
0b:5b:99:eb:43:3c:ae:c9:be:ac:67:45:2e:44:df:
46:72:a9:d4:ac:aa:ff:ec:4c:3c:66:e7:b6:63:2e:
fb:de:0d:02:30:5b:7f:7a:df:37:b0:bc:01:d6:08:
14:c8:f7:84:73:59:39:f4:b6:9a:39:a1:37:f7:bc:
47:13:b6:b1:90:6c:08:9b:f2:60:54:be:05:77:e6:
0e:1c:ad:2e:7b:10:f0:13:d1:fa:92:e2:09:bb:98:
93:f2:b7:d2:ba:42:6b:d4:82:28:1b:5c:cf:9d:87:
bf:98:fa:d7:6e:d1:c7:0b:34:53:13:55:09:29:61:
1a:e2:f0:4c:75:0d:bb:a7:9d:3f:9c:8b:5b:a1:04:
bd:ec:9a:05:08:0f:04:68:48:32:f5:00:e4:d2:10:
51:41:44:ac:04:cc:c1:49:ce:99:9e:20:36:6b:4f:
b3:a3:98:9b:ed:bf:f7:49:63:7a:95:a9:c2:d7:a4:
d1:8f:b8:6e:bf:b2:83:9b:a6:6a:0c:d2:f4:72:26:
92:eb:8e:3a:f9:a1:8c:cb:fa:c0:5a:26:de:b6:0f:
73:ac:63:93:f0:56:1e:5a:58:c4:aa:09:96:bd:53:
02:a0:91:0f:ac:e9:59:43:41:7b:1f:1c:9c:a8:3e:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:84:F1:29:87:92:41:ED:88:A8:C4:7E:8C:10:3A:1E:8A:5D:5F
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/WgGE8SmHkkHtiKjEfowQOh6KXV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.241.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:54:8e:2b:50:43:26:f6:77:d3:fd:85:7e:3c:4d:20:a7:f4:
22:91:63:13:69:dd:8b:f4:4d:f8:30:30:f2:be:e9:50:f3:51:
89:77:63:07:31:b9:b0:ed:b7:9a:61:65:8a:14:e2:06:fc:75:
ef:e2:9a:f5:a3:3a:a8:d7:fc:61:d1:63:47:3b:4d:47:48:3c:
c0:9d:a7:64:a5:33:e6:7e:c8:97:e0:6a:3b:c1:96:3a:7a:96:
a6:8b:30:28:cc:0a:7f:bd:42:88:43:3f:ae:05:a2:a2:59:eb:
a4:4c:0c:46:5a:a2:08:0a:6f:1e:c9:ad:4d:f9:84:39:ee:76:
97:ed:4b:46:45:d0:f6:43:65:02:2d:a3:14:17:0d:e8:4e:a7:
ac:34:5f:cb:38:2d:69:51:33:52:2c:21:39:b6:21:04:7d:a7:
7a:e0:11:52:45:8e:c1:05:ed:fc:14:88:20:4f:f1:ba:01:bc:
f9:10:da:81:21:a8:f5:e3:e9:3c:86:b2:e2:5b:9a:4d:e8:5f:
c0:29:ad:10:38:3a:8a:87:96:f1:84:8c:ab:53:0e:82:94:a4:
2d:e5:0a:1c:d1:e9:3b:ee:ab:9c:b4:70:8b:c8:e0:3e:da:5d:
2a:e5:ce:2e:62:3d:77:e0:8c:88:0b:a5:22:e4:6c:4b:55:73:
5d:c8:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:12:18 2025 by rpki-client