Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/WwmcE7wGl7pyI1JEZUrcMqc8ydE.roa
File: WwmcE7wGl7pyI1JEZUrcMqc8ydE.roa (raw, json)
Hash identifier: eYdzJRuLYCeHIGBMM52itYWmfWw58ujov0m3EgFoPMo=
Subject key identifier: 5B:09:9C:13:BC:06:97:BA:72:23:52:44:65:4A:DC:32:A7:3C:C9:D1
Certificate issuer: /CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Certificate serial: 019420D5AF337E425480DD3264B1F7D34F67
Authority key identifier: DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/WwmcE7wGl7pyI1JEZUrcMqc8ydE.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6696
IP address blocks: 193.105.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:af:33:7e:42:54:80:dd:32:64:b1:f7:d3:4f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12f965a9ec33e2c2e87b6161beefb8be286ca3
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b099c13bc0697ba72235244654adc32a73cc9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b3:f3:8d:ea:71:de:17:2f:c0:da:83:e5:dc:
de:7f:45:99:7b:93:70:82:20:98:d2:8c:32:da:14:
51:f4:49:f5:dd:58:d3:da:e2:06:b4:46:fc:18:5a:
aa:e3:0d:06:f4:ec:be:5f:85:73:d1:d0:96:bf:b6:
46:45:8e:7b:ab:9f:b6:af:66:74:bc:59:74:c4:48:
d8:d7:31:30:95:41:2f:3f:73:bf:f1:5c:af:27:c5:
3e:50:77:fe:4f:dc:f5:fa:90:8f:57:a2:01:68:9a:
d3:f8:be:85:53:99:70:76:16:86:7a:a5:32:14:52:
96:18:5c:a8:0d:fb:7d:33:ac:36:53:e3:f8:db:1e:
e7:29:c9:84:e6:ba:cd:c2:57:ce:0c:41:d9:a9:b9:
7e:fb:ee:52:a1:b7:fa:20:47:c1:a0:59:ad:f0:54:
90:79:af:7b:e8:73:8a:78:93:b6:68:d9:64:e6:ae:
73:a4:fe:1c:1d:de:33:4f:eb:1c:8f:d6:79:d5:b5:
8b:a6:24:97:58:59:b5:de:2e:d5:f7:c3:40:ce:48:
9d:03:28:f3:13:d2:b7:e5:97:57:bf:13:9c:5f:f4:
25:11:6f:20:b1:32:7b:fb:cd:7b:28:e1:c3:1f:c3:
16:c6:df:21:ff:5b:18:4f:43:60:ff:36:69:d9:61:
ed:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:09:9C:13:BC:06:97:BA:72:23:52:44:65:4A:DC:32:A7:3C:C9:D1
X509v3 Authority Key Identifier:
keyid:DE:12:F9:65:A9:EC:33:E2:C2:E8:7B:61:61:BE:EF:B8:BE:28:6C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hL5ZansM-LC6HthYb7vuL4obKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/WwmcE7wGl7pyI1JEZUrcMqc8ydE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0f0373-db6d-4797-820d-b6d12ac66831/1/3hL5ZansM-LC6HthYb7vuL4obKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.73.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0e:07:b0:1b:15:b7:da:78:fe:f5:8e:b6:8b:f9:d3:a3:a4:
9e:77:70:18:8b:02:f4:06:50:a4:69:08:62:24:f0:f6:13:cf:
ad:74:bf:15:47:9e:87:97:09:26:9b:5d:da:48:5b:ca:cc:ce:
2f:69:9e:d3:17:7d:07:4a:55:70:85:88:5e:05:8e:53:34:2b:
c7:24:69:4a:bd:ff:a6:7e:6e:05:f7:7b:a1:8a:9e:d5:f6:dd:
76:b9:df:28:cd:f2:d9:c3:9d:71:c1:87:85:66:dc:7c:63:25:
ea:2b:4f:fe:6e:9a:cc:f9:5b:dd:b7:09:a6:01:c6:97:3f:45:
76:96:67:9b:69:3b:b3:16:d4:4a:74:74:8f:99:e9:c8:11:f7:
af:e6:ff:37:f7:5f:9a:a8:54:b7:23:b7:ba:72:df:f7:75:5e:
a5:dd:8a:91:28:17:89:ad:19:ab:1d:33:71:f2:b3:2e:16:94:
bc:6d:8d:b7:76:45:c5:c9:49:01:e7:13:ac:4c:46:ab:8d:a8:
44:6f:14:3f:54:5e:fc:66:cd:5d:2a:02:e8:dc:15:93:5e:80:
95:1c:26:b6:70:b3:0a:49:32:07:cc:8f:f8:b7:08:18:27:42:
00:7e:85:53:7d:e4:bb:23:ae:c7:ac:fb:6b:4e:fb:1b:c6:d6:
f8:b3:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:20 2025 by rpki-client