Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/WYmANIUajRNSztoX12Fx7TE-50k.roa
File: WYmANIUajRNSztoX12Fx7TE-50k.roa (raw, json)
Hash identifier: KsWRhdW2dlq2azsdy3WNp4x/oIHL6pJIzthGRvuUJMQ=
Subject key identifier: 59:89:80:34:85:1A:8D:13:52:CE:DA:17:D7:61:71:ED:31:3E:E7:49
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 3559E230
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/WYmANIUajRNSztoX12Fx7TE-50k.roa
Signing time: Tue 28 Jun 2022 10:24:02 +0000
ROA not before: Tue 28 Jun 2022 10:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 193.106.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895083056 (0x3559e230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jun 28 10:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59898034851a8d1352ceda17d76171ed313ee749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:21:1c:52:70:3b:1e:d7:9c:c3:14:13:da:98:
63:67:7f:1a:a7:f6:a4:9a:28:1f:24:1b:53:62:33:
43:6d:68:2d:8a:cf:1e:0a:63:4d:d4:fd:d8:c2:ae:
c8:21:18:5d:94:8e:45:9d:04:20:dd:d0:e7:9a:95:
47:3f:cc:23:74:77:91:79:6f:9c:c8:93:f8:42:e4:
3d:9b:c6:f3:14:b8:23:4d:0f:07:de:b6:02:9f:08:
0c:ee:ba:0d:f4:f9:8c:66:18:03:5c:69:c4:dd:83:
61:d4:06:7a:5b:4c:41:4a:5e:0e:96:04:5b:af:5e:
7f:d7:76:f8:5f:20:7a:ea:d2:51:9e:3b:93:d4:fe:
85:28:21:b4:47:4c:c9:be:b3:fb:d6:b9:a4:c2:c2:
c3:94:50:0e:8f:c8:db:56:91:2d:f8:ff:32:5a:77:
51:d3:19:0e:18:e7:0e:8f:bc:5d:53:37:60:18:9b:
0a:c8:a9:5b:b3:c2:02:3d:4b:3b:f2:ce:09:26:8b:
8c:cf:4f:ea:94:26:19:77:87:9f:86:9b:62:14:fb:
20:54:d2:61:a6:61:dd:ac:f5:91:0f:00:43:01:fa:
7c:aa:d4:2e:98:61:9c:ba:a6:38:f2:cd:6e:5a:c0:
56:1c:25:d2:53:38:72:2a:76:5b:de:fc:d0:60:d2:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:80:34:85:1A:8D:13:52:CE:DA:17:D7:61:71:ED:31:3E:E7:49
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/WYmANIUajRNSztoX12Fx7TE-50k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.198.0/24
Signature Algorithm: sha256WithRSAEncryption
13:55:d6:61:50:0a:cf:86:fe:1c:8e:d3:a4:57:01:e2:2d:5b:
53:a7:65:8c:9f:19:eb:6d:f2:9b:77:17:77:2d:0d:48:d8:7b:
98:c1:78:d5:2a:0e:33:89:d2:fe:39:fc:41:c6:cd:4d:a4:06:
e1:8e:ee:53:6d:d0:10:1b:51:3b:bc:3d:f7:4b:25:17:30:23:
cf:ca:9b:70:14:1b:d6:c5:88:a1:66:48:22:42:d4:4a:d3:67:
51:a7:a4:73:4c:30:67:4c:1a:48:11:f0:2d:eb:40:d2:00:8a:
f8:a9:00:27:57:8f:01:ba:1d:dd:e5:e4:00:cb:ca:0a:65:77:
99:a4:00:5f:36:49:59:31:45:10:74:7d:79:2c:1e:c1:97:a4:
0c:a1:33:33:fd:ff:10:f6:72:75:6a:15:c4:3d:17:8f:1c:4b:
01:55:70:92:8a:5f:43:c4:f8:63:53:64:2a:e2:f2:33:d5:d5:
1f:f7:8a:04:47:a7:41:0e:05:19:af:38:ff:ff:53:da:dc:da:
03:02:62:29:9e:18:48:f8:b7:97:5c:81:6f:e4:e5:7f:67:99:
3f:02:5c:31:1c:4c:65:45:34:aa:e0:01:fa:f3:d4:0b:bb:a4:
99:2f:82:1e:aa:bd:6e:36:5e:38:3b:5b:1f:2d:76:3e:59:53:
d7:cc:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:48:40 2025 by rpki-client