Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/WlXI-iwoMwDNSzHCK_zDY3koVSA.roa
File: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (raw, json)
Hash identifier: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=
Subject key identifier: 5A:55:C8:FA:2C:28:33:00:CD:4B:31:C2:2B:FC:C3:63:79:28:55:20
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 01941FFA248201AEBB2C3AEF835E0EBB2961
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/WlXI-iwoMwDNSzHCK_zDY3koVSA.roa
Signing time: Wed 01 Jan 2025 03:47:54 +0000
ROA not before: Wed 01 Jan 2025 03:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3334
IP address blocks: 194.148.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:24:82:01:ae:bb:2c:3a:ef:83:5e:0e:bb:29:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a55c8fa2c283300cd4b31c22bfcc36379285520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:11:40:4d:2b:42:85:c1:42:7c:0f:9a:82:
e0:f2:21:06:ef:66:c8:76:02:2b:4d:13:7f:9f:71:
41:55:5d:8a:67:4f:70:8d:64:76:ac:8d:e2:33:10:
70:2c:4c:44:51:ec:c9:49:3d:5b:88:9b:6e:9d:4b:
de:5c:47:6c:6c:14:fa:b7:dc:78:e1:cd:c4:61:63:
01:76:6f:8d:6f:55:f2:54:d5:6f:c8:4f:97:d9:c6:
b1:d1:e1:24:8d:f7:55:94:75:a6:cd:f5:b5:68:85:
ce:6d:b3:68:19:67:6f:52:2a:2a:66:f9:cc:72:29:
d0:ec:fd:4a:6a:58:6a:ee:63:7c:ba:a7:39:34:73:
82:f3:bc:30:fe:fe:ee:03:36:75:e1:9c:a3:1c:8c:
41:78:c1:a7:b2:25:39:b0:38:22:39:1c:1d:96:ea:
74:91:bd:25:29:df:3a:78:99:72:6f:b0:1f:35:31:
2b:ef:86:82:35:e6:93:62:1b:1e:7b:06:e1:f0:64:
3e:fa:91:04:cf:5d:5d:d6:95:70:95:dc:01:24:46:
d2:33:95:bb:f2:c6:7c:e5:3c:b9:40:7c:83:16:86:
4f:f4:10:4d:a5:ee:11:e5:fe:6f:27:aa:7b:ba:97:
03:33:43:a4:62:4c:bb:00:63:65:82:51:e6:5a:aa:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:55:C8:FA:2C:28:33:00:CD:4B:31:C2:2B:FC:C3:63:79:28:55:20
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/WlXI-iwoMwDNSzHCK_zDY3koVSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.148.40.0/23
Signature Algorithm: sha256WithRSAEncryption
32:63:14:07:24:8a:c4:2d:2d:d1:f4:fd:cc:51:3c:c7:96:69:
bf:91:90:be:2a:40:a5:b1:ba:10:d3:0b:e0:00:60:01:af:99:
3a:53:5e:93:56:56:72:44:3f:f7:0a:80:ac:88:d8:a9:d3:84:
d6:0f:80:34:e8:9c:62:e2:b7:d6:a7:d7:20:5f:cb:f5:a3:57:
2d:f7:55:7b:e8:ff:6b:cf:4e:74:98:73:29:b2:7d:40:11:de:
5f:8f:97:eb:72:3f:52:53:a4:13:35:7e:5f:a4:30:73:37:4b:
1c:95:16:b8:be:0f:4e:02:b9:6b:62:11:a5:b6:0e:51:b4:e1:
61:93:bb:3d:b4:92:13:e8:41:16:9b:1d:42:4a:17:7d:44:68:
72:45:ac:4b:8d:25:65:27:66:86:b7:e8:19:60:81:4f:3a:b2:
68:7f:c0:0a:29:c8:fe:9f:e8:73:85:e1:f2:08:e4:13:6f:4e:
52:58:ee:95:99:6e:20:19:8f:5f:6b:73:8d:37:72:d8:de:3e:
92:10:05:69:28:3c:33:03:3a:51:ed:58:dc:4c:57:d6:1d:74:
5d:0d:d8:2b:47:b6:c7:d8:b0:ee:d1:4a:02:be:b2:7f:6a:78:
2d:03:7b:9c:35:d1:65:00:65:42:ba:d2:bd:93:bd:df:46:a0:
c1:f1:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:38 2025 by rpki-client