Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa
File: weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa (raw, json)
Hash identifier: SYYKrJWHItEf708CTIE6RnrGdiSwFYKJxi86yfIO4Oo=
Subject key identifier: C1:E5:86:2E:F7:71:BB:E9:42:93:40:21:5C:1C:7C:03:A4:F8:0A:C4
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0194274733DF48B14DD61CC1EC0441F5177F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa
Signing time: Thu 02 Jan 2025 13:49:25 +0000
ROA not before: Thu 02 Jan 2025 13:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211863
IP address blocks: 93.190.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:33:df:48:b1:4d:d6:1c:c1:ec:04:41:f5:17:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1e5862ef771bbe9429340215c1c7c03a4f80ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:ea:25:9b:2c:49:05:2b:0f:27:eb:3b:24:
22:a8:c1:08:1e:f0:6a:0e:31:cc:50:e2:a0:87:2c:
36:51:fc:0d:6f:d0:9a:9e:f4:dc:27:57:5d:ec:d1:
56:03:07:07:f1:a6:68:58:c0:9b:56:00:b7:ac:59:
59:c4:1c:88:ea:88:b4:b2:38:fc:c8:f8:02:ad:22:
51:d9:b2:9b:f5:c5:e6:4d:a4:71:67:4e:bd:81:6c:
2b:8f:81:0f:38:18:d4:64:d3:df:16:fd:98:6d:38:
7e:3a:1f:07:06:39:ae:48:bb:31:22:a8:53:8f:b9:
f8:51:3a:85:59:10:c3:02:84:a9:35:82:77:58:eb:
ac:76:f6:7c:6a:9a:47:38:97:05:6a:3c:6b:63:43:
b3:db:1e:7e:de:88:2f:05:6f:73:35:35:12:e0:80:
f9:07:23:e3:d9:2d:1a:a0:0b:fc:62:f7:9b:80:48:
d6:f9:b9:2b:8c:e1:0e:c3:8b:38:d9:7e:9f:c2:8f:
76:1c:fe:b2:10:56:18:19:a2:fd:6e:1d:69:db:0d:
ea:27:52:d2:7e:78:17:dd:a1:2a:65:2b:ed:1a:57:
64:9f:81:6a:59:e5:80:c6:f7:42:2d:1d:66:4d:b2:
e6:15:ee:4e:f1:a6:1d:4d:92:69:09:82:aa:ae:5e:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E5:86:2E:F7:71:BB:E9:42:93:40:21:5C:1C:7C:03:A4:F8:0A:C4
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/weWGLvdxu-lCk0AhXBx8A6T4CsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:32:9d:dc:9b:6b:aa:95:43:c8:42:de:d4:67:6b:cf:f5:4a:
f3:fa:ee:7c:fc:fd:ce:d7:9a:b6:98:dc:41:8b:46:b4:8d:27:
c5:31:7d:e0:91:94:90:b3:ce:cb:0c:44:da:51:0d:80:81:3f:
a6:82:e7:28:1a:98:76:23:54:d5:b7:53:e2:6f:b4:5f:68:d3:
4a:68:80:b1:c1:fa:5f:a8:81:72:e1:57:21:f6:a4:03:d0:26:
c2:98:f9:fd:3e:83:32:20:ba:8a:79:7a:ad:f7:ed:d2:73:f8:
35:6e:1f:8a:f0:18:a2:ea:64:c1:12:ba:7d:c0:5d:51:01:1c:
c0:56:36:47:7d:ef:db:c8:d4:bb:d3:87:9c:a3:89:41:d1:55:
ad:12:4d:31:89:c2:0a:c1:ac:97:85:af:c0:ad:01:1f:df:39:
51:d9:a8:66:97:81:81:cd:ce:6b:dd:7b:eb:da:e1:bd:3a:f0:
a4:30:ed:70:a4:8e:48:a2:94:ba:43:e6:d1:04:0e:76:f8:38:
b6:36:da:0d:6c:f2:73:33:9f:41:43:e2:fe:74:c2:40:4a:a3:
f1:df:25:5c:d6:c2:6b:ba:4a:a9:10:1e:c8:a2:16:db:fe:9f:
aa:48:ed:0c:67:10:9c:a9:f4:9b:c6:13:40:1e:3e:8d:d7:22:
12:c4:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:08 2025 by rpki-client