Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa
File: WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa (raw, json)
Hash identifier: GG3W3sv/8g51OizpERxg8YmbMm76mWXeFGoFM/wpQ9M=
Subject key identifier: 59:3E:75:5F:1A:7A:C1:2A:67:30:F8:F2:10:0C:B2:52:1C:4E:5C:F9
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 01942369E2C7941BFB6CBBF0F70CA07D9A3C
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39526
IP address blocks: 193.111.29.0/24 maxlen: 32
2001:67c:2124::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e2:c7:94:1b:fb:6c:bb:f0:f7:0c:a0:7d:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=593e755f1a7ac12a6730f8f2100cb2521c4e5cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:0a:3c:b5:d6:e5:91:d2:10:3c:13:e6:15:
bf:54:d6:b7:69:c5:20:b3:88:87:82:ce:ec:6d:ec:
1b:54:35:07:2a:88:64:b5:fe:a7:3c:d6:bd:a6:0a:
75:38:32:44:ad:e6:64:77:0d:56:f3:6c:e1:4b:92:
a4:68:b0:46:d4:f1:b1:3a:50:d0:d1:4d:11:d7:4c:
17:bd:63:2e:c9:8d:be:63:f9:21:e1:45:31:2d:64:
c7:56:53:ac:f6:d2:6b:93:53:31:46:30:10:89:fc:
98:1f:d1:06:fa:68:2d:5d:bb:9a:e7:0c:f3:b6:df:
21:20:32:fa:1f:bd:f8:9e:6e:40:22:5e:53:89:39:
54:3c:7a:f7:12:b3:03:a4:5d:14:c8:1e:59:7f:c6:
d3:8d:59:12:a9:06:6f:ab:32:cd:76:47:c4:26:81:
4d:93:ec:35:fb:7f:8f:65:ce:d1:16:6a:f4:6d:31:
8f:98:a3:c3:c7:17:d0:4b:08:9c:f5:8d:52:96:7b:
b5:33:7f:20:e3:4b:49:8d:af:dc:e1:79:1f:ef:06:
fd:98:27:0f:65:a8:59:0a:98:77:b2:92:b7:e1:a4:
33:63:c9:c5:a3:a6:9c:9e:83:06:b1:65:d9:db:8d:
ef:9d:e1:78:1b:88:ab:b9:25:f4:01:b8:11:27:4d:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3E:75:5F:1A:7A:C1:2A:67:30:F8:F2:10:0C:B2:52:1C:4E:5C:F9
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.29.0/24
IPv6:
2001:67c:2124::/48
Signature Algorithm: sha256WithRSAEncryption
5e:bd:29:74:9d:d2:63:86:1e:e2:49:b8:ed:ab:dd:e9:a9:6b:
fc:2a:b1:81:4a:70:13:8a:35:d9:df:ea:cf:9c:36:a0:b9:2b:
27:94:e7:3b:f7:17:04:67:69:05:6e:df:40:a0:66:35:9c:2d:
e8:b3:39:b4:7d:31:c6:08:3e:e6:1f:21:8e:80:79:90:25:c0:
37:d3:ca:cc:06:b9:fa:86:fd:74:9c:bf:ee:c8:4c:8b:ed:fb:
8f:ac:0d:31:c5:7a:45:4c:95:4e:82:64:a5:6e:68:d6:9c:62:
22:bd:12:83:24:66:ae:d9:82:ac:d6:d9:03:8b:69:46:e2:b0:
94:7c:82:c8:df:ee:17:5d:aa:59:75:c0:fc:b5:0b:4f:7c:b7:
7b:4c:4c:1e:10:4c:74:93:64:0f:0e:79:d2:80:80:9f:e0:6a:
61:7b:d1:8e:f7:21:d5:75:67:91:83:63:56:e2:29:8c:63:bb:
11:de:c8:bd:4e:f6:5c:88:72:1f:3a:5d:04:c3:81:68:7b:aa:
a1:99:ff:3b:39:45:7a:e1:6f:98:3f:5a:bc:b6:6f:df:e2:e4:
85:76:24:65:15:f1:95:da:76:8e:2e:07:47:cf:13:89:8d:e0:
b1:59:ce:5f:55:41:5a:ca:e7:36:2e:a8:a9:09:fc:f8:bb:9a:
2c:1a:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:44:11 2025 by rpki-client