Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/caf622-ee11-458d-b81d-15ed1ea93e25/1/WNEC8XdosatR6QJ3HBWwtMPKx2g.roa
File: WNEC8XdosatR6QJ3HBWwtMPKx2g.roa (raw, json)
Hash identifier: jtPm/wo+xGv0pot8Mwq1cXuLMxqu43OYDpRERhhfHK8=
Subject key identifier: 58:D1:02:F1:77:68:B1:AB:51:E9:02:77:1C:15:B0:B4:C3:CA:C7:68
Certificate issuer: /CN=ceae1021ef5d6d72ca68f8ca5c159f4a08a74366
Certificate serial: 021F428F
Authority key identifier: CE:AE:10:21:EF:5D:6D:72:CA:68:F8:CA:5C:15:9F:4A:08:A7:43:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zq4QIe9dbXLKaPjKXBWfSginQ2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/caf622-ee11-458d-b81d-15ed1ea93e25/1/WNEC8XdosatR6QJ3HBWwtMPKx2g.roa
Signing time: Sat 01 Jan 2022 07:56:59 +0000
ROA not before: Sat 01 Jan 2022 07:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.32.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35603087 (0x21f428f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceae1021ef5d6d72ca68f8ca5c159f4a08a74366
Validity
Not Before: Jan 1 07:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58d102f17768b1ab51e902771c15b0b4c3cac768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:c7:7d:d2:22:61:e6:ee:93:a2:f6:56:55:
01:31:57:97:61:73:32:43:1d:df:2a:7d:ac:ef:a3:
a6:91:e4:2e:b9:b8:e8:36:d2:d6:be:0a:f2:42:46:
14:02:a5:24:2e:28:fc:89:c3:17:61:a8:76:18:8c:
2e:d1:db:b2:4f:3e:2a:5f:d4:4c:1f:61:9d:04:0c:
03:1a:6b:1d:6e:1e:c7:5c:fa:9d:86:40:06:e6:f0:
58:b1:15:4c:03:99:44:fb:74:b9:7a:ce:c3:c9:9a:
d8:f0:1a:39:e2:5d:56:2f:55:38:b8:c3:bc:8d:c4:
91:9a:c3:c2:fc:f9:5e:95:bf:80:23:df:77:a9:65:
47:d1:63:8f:bb:8a:05:35:77:e2:f2:d8:35:a8:1c:
63:28:e8:3e:18:c9:e2:57:67:fd:10:c6:4a:72:80:
b6:53:9e:2d:54:6e:34:13:54:d8:a8:5f:3e:82:9c:
a9:36:68:80:14:7e:22:52:64:40:7d:ea:ea:c6:84:
51:12:94:f2:d9:45:fd:ff:bc:b5:d6:00:64:d1:00:
fc:a4:5b:13:4d:d3:79:d7:6b:b0:0f:c1:fa:19:13:
d0:a9:96:0c:12:52:f8:c5:ba:28:b4:ea:ef:6d:3b:
59:8c:b9:3f:33:6e:7e:ac:b7:ac:ea:78:e9:b0:f1:
45:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:02:F1:77:68:B1:AB:51:E9:02:77:1C:15:B0:B4:C3:CA:C7:68
X509v3 Authority Key Identifier:
keyid:CE:AE:10:21:EF:5D:6D:72:CA:68:F8:CA:5C:15:9F:4A:08:A7:43:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zq4QIe9dbXLKaPjKXBWfSginQ2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/caf622-ee11-458d-b81d-15ed1ea93e25/1/WNEC8XdosatR6QJ3HBWwtMPKx2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/caf622-ee11-458d-b81d-15ed1ea93e25/1/zq4QIe9dbXLKaPjKXBWfSginQ2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.204.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b7:65:21:b4:ac:40:8f:90:82:88:7d:66:f0:4a:fe:21:62:
98:6a:7f:14:de:3e:60:f4:7a:fc:d4:82:9e:3b:19:28:f9:6c:
21:74:cc:ac:65:e6:3b:07:68:fe:7d:b6:2f:6e:5c:62:7b:75:
0f:e6:10:dd:2a:b0:66:d1:e6:10:ca:b7:cd:8a:7e:3d:a2:8b:
e2:a7:44:f5:b4:2b:31:64:a0:a2:bd:e9:9f:90:47:6c:03:ae:
26:2a:75:5c:9b:e0:fe:61:11:99:c5:63:18:79:bf:2b:f6:0c:
d4:6f:8e:51:c4:45:37:53:49:c1:0e:13:85:ff:b3:e9:90:9d:
ee:e9:53:d9:ab:f8:ae:a9:86:bc:24:aa:34:c0:37:7c:4e:c0:
e9:b7:29:56:1c:43:c0:b7:5d:2e:07:c4:cf:aa:10:10:b6:e0:
05:8d:07:6a:0e:2b:8d:cc:65:0d:db:89:9a:44:6a:ca:2f:35:
01:62:98:88:f8:11:0c:ae:58:a1:c9:a1:47:26:00:f8:ee:cb:
45:c7:5e:bb:27:eb:fa:e6:22:8f:d0:0e:72:6b:90:2e:2f:71:
14:de:7c:e0:5a:ea:02:2f:46:83:8b:56:3c:c8:d0:df:0a:81:
33:95:c6:e3:28:52:07:3b:11:08:d2:99:5a:50:49:0b:00:dd:
60:d8:db:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:02 2025 by rpki-client