Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WSw7OqkpHEL2JgMhr8WLK8PG6d8.roa
File: WSw7OqkpHEL2JgMhr8WLK8PG6d8.roa (raw, json)
Hash identifier: z237CEdGXZ9DSSUEuHCFWQqwrBeOanzG66aq7m82y68=
Subject key identifier: 59:2C:3B:3A:A9:29:1C:42:F6:26:03:21:AF:C5:8B:2B:C3:C6:E9:DF
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A19BC3638345E501340DC2B95F96
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WSw7OqkpHEL2JgMhr8WLK8PG6d8.roa
Signing time: Thu 02 Jan 2025 13:48:47 +0000
ROA not before: Thu 02 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 188.132.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a1:9b:c3:63:83:45:e5:01:34:0d:c2:b9:5f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=592c3b3aa9291c42f6260321afc58b2bc3c6e9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:d9:12:b6:8b:8c:67:30:c2:1a:34:60:1c:
90:94:72:df:1e:14:81:19:9a:97:21:7c:ee:f1:66:
bc:e6:e1:40:f4:58:be:31:5a:68:a8:ea:6e:e6:84:
49:e8:83:4c:eb:32:93:5f:d8:c8:96:02:51:b0:d2:
58:b9:3b:d1:37:d3:64:fb:64:0b:d4:10:b9:b4:b2:
79:e0:93:76:a0:b6:33:e4:35:65:c7:89:2d:0f:0c:
91:e6:19:51:95:98:e1:0a:95:0f:cf:ff:52:dc:2e:
dc:15:1c:a8:de:c8:ab:4f:e5:0d:e2:15:09:46:4f:
96:4d:32:3e:dc:f1:b9:2a:35:d2:a3:6c:7d:51:3c:
37:82:5c:df:e6:40:cd:cb:4c:d4:14:86:0a:3e:9d:
aa:c3:47:2f:57:fc:aa:b2:d2:e5:e6:77:d8:23:fa:
19:52:cb:a9:e4:b3:fa:3b:38:ff:d2:07:aa:d7:65:
11:5b:da:ee:52:e4:c1:16:bc:bf:28:dd:ec:07:c1:
fd:b0:7f:bf:cc:03:60:e2:d7:4e:e2:ab:a8:2b:f8:
9e:4f:7e:5c:fa:14:d0:07:bf:66:fe:86:33:17:73:
17:c4:b0:c0:b8:3c:c4:b1:ab:b4:b6:fb:d1:29:4d:
a4:8e:cb:e7:55:3a:81:0a:f5:63:86:5b:1e:d7:84:
5a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:2C:3B:3A:A9:29:1C:42:F6:26:03:21:AF:C5:8B:2B:C3:C6:E9:DF
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WSw7OqkpHEL2JgMhr8WLK8PG6d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:63:cc:d1:85:0c:df:57:b1:66:cd:46:b3:56:47:58:01:1b:
50:be:93:1c:22:6c:63:2b:5b:7d:0c:ac:50:bd:47:29:81:90:
33:9c:5f:66:91:ae:fa:47:3c:8f:e8:d0:6b:3e:c9:98:12:75:
ab:36:52:ef:3f:8c:f8:6d:46:8c:81:cd:56:7a:1b:9d:c8:06:
80:06:32:bd:82:43:f9:bf:ed:65:f7:50:c9:d6:28:6c:ea:53:
e2:f9:41:16:39:c9:48:fa:88:36:48:ea:74:83:27:99:55:4d:
e4:34:a4:08:19:2a:61:ac:2a:19:5a:13:b0:bd:19:e6:88:e4:
54:6f:53:82:bd:37:96:4f:dc:22:75:76:60:78:7b:7a:d5:75:
b6:c7:ad:11:f8:6b:ef:23:cd:3e:fe:fd:10:9f:93:56:6d:c6:
9b:27:d7:47:e5:28:d6:4e:3a:b9:9e:22:57:3f:97:eb:b6:c0:
2e:fe:0c:ed:47:60:f6:58:6c:7d:0e:a8:5c:a2:c3:f2:fd:b8:
d1:97:d0:a8:3e:62:62:79:59:2e:c4:a2:87:5b:9f:aa:13:5f:
50:69:c8:6b:a5:71:eb:65:67:7f:a4:4a:7e:26:64:6c:58:81:
9e:ba:d7:eb:b7:f3:66:ec:44:dd:9c:4e:42:88:b4:26:c5:6c:
f0:81:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:15:07 2025 by rpki-client