Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/WONo79qaUTPJ1-vNQ-TW-onTR94.roa
File: WONo79qaUTPJ1-vNQ-TW-onTR94.roa (raw, json)
Hash identifier: OEjX9jZ71cUUyEhZ9LHThZCQUaZ9b/ysyZMGJbBH8Nw=
Subject key identifier: 58:E3:68:EF:DA:9A:51:33:C9:D7:EB:CD:43:E4:D6:FA:89:D3:47:DE
Certificate issuer: /CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Certificate serial: 073B57B6
Authority key identifier: 2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/WONo79qaUTPJ1-vNQ-TW-onTR94.roa
Signing time: Wed 26 Jan 2022 11:18:10 +0000
ROA not before: Wed 26 Jan 2022 11:18:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210030
IP address blocks: 193.26.14.0/24 maxlen: 24
193.26.22.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
2a0f:8140::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121329590 (0x73b57b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa694f440fb760212b92056e0eb5b31d5150ffb
Validity
Not Before: Jan 26 11:18:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58e368efda9a5133c9d7ebcd43e4d6fa89d347de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:cd:ce:eb:0f:86:61:81:fa:16:48:3f:12:
b7:3d:b7:fd:a6:87:a0:60:f3:58:ca:b0:4d:56:8a:
66:50:23:64:a5:46:5b:95:8d:d9:b5:42:b4:e2:f1:
79:b6:b1:b1:30:d6:0a:7a:5b:df:76:28:9f:06:ab:
8b:ad:da:34:cd:63:c9:ab:4e:e9:ce:31:dd:61:fa:
fd:9b:26:e9:78:79:76:0a:cc:99:92:27:22:7f:3e:
16:da:c8:08:99:ce:e0:c2:5e:a4:23:75:b9:c2:85:
d2:9b:38:bc:67:cd:5c:d5:da:b6:b7:7d:1b:44:ed:
c8:4c:89:8a:d8:7a:2c:33:ce:b6:e0:5c:07:25:c3:
ca:31:29:60:51:ff:33:82:79:c4:7b:46:42:f4:e3:
46:04:86:59:79:1e:fe:a2:22:04:d4:8a:4d:0f:f7:
ca:a7:65:ea:8a:6f:a2:a4:2c:de:df:bf:93:b9:57:
12:a0:fa:01:4e:0d:38:33:3c:38:44:e2:3e:cd:39:
4a:fc:5a:54:68:f3:55:3f:73:89:a6:02:61:ac:1f:
58:84:d0:aa:d4:5d:8e:04:d8:2b:3d:0e:11:f2:52:
09:f8:8e:84:ee:31:1c:0a:02:ab:7f:47:2f:a0:d3:
44:d2:d3:57:4d:56:b8:76:34:20:76:8d:34:81:99:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E3:68:EF:DA:9A:51:33:C9:D7:EB:CD:43:E4:D6:FA:89:D3:47:DE
X509v3 Authority Key Identifier:
keyid:2A:A6:94:F4:40:FB:76:02:12:B9:20:56:E0:EB:5B:31:D5:15:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqaU9ED7dgISuSBW4OtbMdUVD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/WONo79qaUTPJ1-vNQ-TW-onTR94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/2dd397-00c1-46bb-907f-4fb27902e33d/1/KqaU9ED7dgISuSBW4OtbMdUVD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.14.0/24
193.26.21.0-193.26.22.255
IPv6:
2a0f:8140::/29
Signature Algorithm: sha256WithRSAEncryption
96:b5:66:98:97:6c:09:16:db:ca:dd:7b:cb:c5:e7:f4:4e:fa:
ce:8f:59:5b:57:8f:19:99:51:b0:dd:d6:75:d8:2d:ac:23:67:
e2:24:fb:b6:dd:ca:f2:ae:14:86:42:84:4b:37:22:80:89:9a:
1a:b7:32:c5:ec:de:7a:d0:9a:0d:84:79:14:ed:e0:da:b7:cf:
55:2e:90:bd:98:25:f2:f8:75:a8:e1:06:6d:f7:3a:3b:61:1b:
78:0a:16:7a:34:8e:b9:f0:3b:0a:84:d5:99:74:05:35:56:5a:
81:b1:ba:6d:e5:0e:ec:48:45:ff:80:9a:de:f0:69:89:ea:ca:
44:00:9d:82:28:a7:4e:a1:d0:e5:26:32:37:90:c6:14:d5:4c:
6f:c2:04:9b:31:4d:b4:73:c2:89:8f:e8:ec:f5:a8:ab:8e:d6:
8b:82:dc:59:e1:e8:14:e8:e1:a9:9c:6f:79:e1:93:59:70:b9:
6c:5f:5b:b3:6a:b2:95:20:cb:6a:04:fd:32:81:8e:b9:c7:c4:
ce:58:69:be:e3:2d:74:0c:1c:e1:ec:8e:11:1b:03:db:7a:2b:
9f:c0:3a:db:d5:ca:cd:4a:1d:3f:21:7f:59:02:8e:44:01:c6:
5b:b7:4e:85:65:5c:24:47:79:75:c9:b8:f8:00:11:ad:51:c2:
24:73:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:14 2025 by rpki-client