Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/cad2dd-9136-4045-86a2-25c2a31d7b6c/1/wp45BEcqb3puDKBqlvuVZkEZpoI.roa
File: wp45BEcqb3puDKBqlvuVZkEZpoI.roa (raw, json)
Hash identifier: r3EQuLyOC1X24BKu3kIvVvrRbm1ARnBsWbZyclLPgaY=
Subject key identifier: C2:9E:39:04:47:2A:6F:7A:6E:0C:A0:6A:96:FB:95:66:41:19:A6:82
Certificate issuer: /CN=5a76d183993d141dd0662ce31d367b784d3d228f
Certificate serial: 018964C0554610D1B74A665C2701467FA66D
Authority key identifier: 5A:76:D1:83:99:3D:14:1D:D0:66:2C:E3:1D:36:7B:78:4D:3D:22:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnbRg5k9FB3QZizjHTZ7eE09Io8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/cad2dd-9136-4045-86a2-25c2a31d7b6c/1/wp45BEcqb3puDKBqlvuVZkEZpoI.roa
Signing time: Mon 17 Jul 2023 16:47:53 +0000
ROA not before: Mon 17 Jul 2023 16:47:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 195.96.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:55:46:10:d1:b7:4a:66:5c:27:01:46:7f:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a76d183993d141dd0662ce31d367b784d3d228f
Validity
Not Before: Jul 17 16:47:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c29e3904472a6f7a6e0ca06a96fb95664119a682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:0f:76:06:1e:c7:61:75:66:5f:de:06:9a:
4a:ad:b8:16:f9:b4:69:1c:1b:f1:06:9c:43:28:b7:
6d:e4:52:2e:31:78:fe:77:6a:1d:03:33:46:7f:70:
b4:63:29:0a:16:55:ac:af:e8:df:35:77:3c:6d:fd:
ff:0d:30:dc:e4:b9:ba:b6:e1:2c:ed:ce:2e:73:ca:
34:a4:e7:0a:d5:33:c9:c6:17:eb:83:69:26:06:36:
c3:8f:68:09:c8:1f:79:66:9f:ec:2c:f8:e0:8f:d5:
ea:cd:b9:3d:2a:a3:0b:ad:49:f3:b0:8c:0f:fb:d4:
c8:d9:c8:0b:5c:fd:02:16:92:eb:d0:d0:3d:eb:d3:
db:ff:15:d4:80:79:8d:df:9f:e6:23:86:4b:03:56:
af:9c:f6:79:38:59:74:90:48:5c:3a:fe:9c:6e:8c:
15:ab:e4:1e:e0:35:7c:c8:69:76:5e:27:de:33:4f:
44:60:77:3f:cd:db:0d:44:31:a8:7c:af:02:b6:e8:
c4:60:2b:83:35:18:72:a4:b1:55:c0:dd:c5:01:99:
bb:b7:9f:2a:4a:1d:96:4b:67:f3:2b:8d:14:88:ae:
5d:9c:6a:eb:b8:38:05:45:ba:1b:b1:70:a8:ea:65:
28:2d:aa:3b:d6:b8:95:1b:17:53:44:7c:69:2c:56:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:39:04:47:2A:6F:7A:6E:0C:A0:6A:96:FB:95:66:41:19:A6:82
X509v3 Authority Key Identifier:
keyid:5A:76:D1:83:99:3D:14:1D:D0:66:2C:E3:1D:36:7B:78:4D:3D:22:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnbRg5k9FB3QZizjHTZ7eE09Io8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/cad2dd-9136-4045-86a2-25c2a31d7b6c/1/wp45BEcqb3puDKBqlvuVZkEZpoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/cad2dd-9136-4045-86a2-25c2a31d7b6c/1/WnbRg5k9FB3QZizjHTZ7eE09Io8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.147.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4b:46:5f:44:60:8f:e7:b0:61:d9:af:52:8e:c9:27:a9:54:
ed:3b:c8:7a:71:ba:ce:f6:3e:2f:6d:11:d6:53:44:1e:18:23:
45:4d:b1:81:48:cb:f7:d7:a7:a4:a5:d8:64:41:25:5f:6a:05:
da:77:95:88:4e:be:5f:93:97:bf:44:ee:37:44:92:5d:33:24:
a1:69:c7:19:3b:0a:fc:de:98:be:d6:cd:98:e1:85:54:17:64:
ff:d0:1a:cd:65:48:f4:97:9b:0a:f1:80:cf:d0:b0:c7:1b:ff:
f5:36:5a:a0:db:fc:86:37:ad:4f:22:87:ec:1c:2f:e2:be:0a:
bb:77:32:0d:34:5f:50:f0:b5:0e:df:cc:09:5b:64:bc:70:14:
c5:a7:a8:cf:88:fd:f3:3e:71:1c:9f:6c:05:ff:22:1e:f5:1d:
e6:6e:08:ad:ee:88:04:13:7a:86:c1:67:8a:85:a4:fa:93:a3:
89:8b:6b:09:3f:67:b1:8e:c7:e0:18:dc:d5:ca:16:eb:03:d7:
b5:01:31:45:fc:59:f9:e8:b2:c1:5d:d3:5a:89:59:f3:20:2b:
c6:bf:61:78:29:01:d2:6f:30:3c:f7:4e:23:0e:b9:3d:26:49:
48:00:50:4d:85:58:69:c7:71:ac:dd:75:2a:18:6b:1f:99:d5:
1b:67:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:04 2025 by rpki-client