Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WSh4WlDKBbGMyb7nRqG4Mxx97R0.roa
File: WSh4WlDKBbGMyb7nRqG4Mxx97R0.roa (raw, json)
Hash identifier: PyohQrEbBmUFGkizOCRWLarzuzBDIMXrn/I9XNTnDqs=
Subject key identifier: 59:28:78:5A:50:CA:05:B1:8C:C9:BE:E7:46:A1:B8:33:1C:7D:ED:1D
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 019424B40932102CC4B65F26C7D14619854C
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WSh4WlDKBbGMyb7nRqG4Mxx97R0.roa
Signing time: Thu 02 Jan 2025 01:49:26 +0000
ROA not before: Thu 02 Jan 2025 01:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396426
IP address blocks: 176.111.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b4:09:32:10:2c:c4:b6:5f:26:c7:d1:46:19:85:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 2 01:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5928785a50ca05b18cc9bee746a1b8331c7ded1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:ca:af:a2:ab:a3:1e:df:e0:bb:33:83:f2:
46:83:6d:68:51:64:82:e5:aa:e1:8c:b4:92:d5:ce:
70:ac:11:7b:54:c9:86:48:7c:60:c4:11:2f:f4:3a:
96:60:a9:47:cf:af:16:ea:b3:98:48:17:c1:cd:72:
8e:9a:d9:91:cb:c4:e4:f5:ea:c5:a7:e8:41:4c:1d:
d5:76:56:62:96:94:6d:1e:a9:f3:ee:0c:65:b8:11:
c4:cc:d0:02:81:15:54:94:54:ef:71:25:64:8c:af:
a4:4e:e0:3c:ac:15:63:50:3e:92:9a:8d:ba:65:27:
61:64:22:2b:5e:04:aa:5e:7b:bf:2f:15:04:af:87:
6c:9b:18:c7:aa:86:7c:12:b4:b5:4a:c6:9a:9d:50:
74:a9:71:55:17:da:d2:ad:22:39:c6:5f:c1:88:97:
ff:9e:f9:b9:c5:24:05:10:13:88:d8:88:6c:7f:ed:
67:21:59:90:a6:ec:51:3f:9f:64:41:e4:e4:5c:17:
c1:57:2a:53:3f:d9:25:78:f1:57:03:85:f1:bc:37:
74:07:a8:a6:11:3f:0b:25:26:c6:fa:42:34:2e:40:
ab:98:65:a2:2b:e5:fe:87:9b:66:5c:5e:61:7d:cd:
21:82:2d:f6:60:9c:f9:4f:90:65:b0:dc:2e:b9:07:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:28:78:5A:50:CA:05:B1:8C:C9:BE:E7:46:A1:B8:33:1C:7D:ED:1D
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/WSh4WlDKBbGMyb7nRqG4Mxx97R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:45:bf:c4:df:eb:c8:71:d5:fd:78:1f:82:10:f7:ec:92:62:
f5:39:ec:de:85:32:e2:2e:60:6d:6d:ae:7f:e3:2e:65:bc:af:
43:ee:98:f0:dd:d7:b2:3b:8b:66:63:f4:2d:55:5c:d5:36:7a:
97:d0:64:c9:d3:c4:84:45:a7:9d:2c:fe:09:a1:f9:30:f4:55:
60:49:8f:24:30:d0:f8:7e:c0:de:29:90:b3:87:da:70:7c:f0:
4d:9b:68:5e:db:8e:ce:e9:2a:f5:06:58:39:f7:7b:0a:7f:75:
a2:07:07:c8:79:46:71:f5:55:1b:6c:06:04:0f:dc:f1:5a:8f:
1e:e9:1b:13:86:ae:cd:bb:e6:62:2e:be:09:8a:6b:c5:1e:8d:
97:6e:48:e0:60:45:48:12:98:d3:14:0f:4a:4d:99:0a:4e:66:
e9:a2:31:6e:46:3b:24:7a:1b:23:ab:f9:8a:69:90:d4:12:91:
c0:5e:b2:4c:ff:fc:7d:6b:c3:09:97:46:0a:01:50:dd:7e:3a:
33:af:a1:ab:53:e8:7f:80:74:2d:e6:d2:98:7c:d7:08:f1:6c:
32:be:44:60:6c:33:0e:2e:40:e1:74:5e:96:d1:b1:06:ba:70:
98:cb:f5:98:a5:6c:4c:bc:4f:73:b3:68:bb:8f:b3:8b:f3:13:
6d:f0:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:08:24 2025 by rpki-client