Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa
File: W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa (raw, json)
Hash identifier: YvWvtJ9d+roXNfi60DzUNUYY7G9jfkQp1ZTCPAwbx+g=
Subject key identifier: 5B:DE:55:0A:27:85:AD:80:3E:51:6B:D0:6C:D4:8B:EC:DD:D8:D8:28
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0194221FBD5CF86839997DAB0BEEFBE8C158
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59584
IP address blocks: 193.26.122.0/24 maxlen: 24
193.178.215.0/24 maxlen: 24
2a0e:e6c0:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:bd:5c:f8:68:39:99:7d:ab:0b:ee:fb:e8:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bde550a2785ad803e516bd06cd48becddd8d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:b5:b4:f8:50:4e:cc:76:02:73:6e:68:0e:
72:0d:a4:f1:32:fe:16:9c:53:ea:d5:b1:c0:bf:c7:
31:c3:e1:f5:3d:91:0e:65:37:92:82:54:d6:09:b5:
e4:9b:b3:47:33:4d:63:a9:5c:9d:95:fa:df:67:88:
41:ed:65:aa:dd:53:b5:44:80:b8:f9:a0:5a:7c:00:
f5:b4:c8:dd:db:6c:f0:42:21:5e:40:a2:54:a4:2d:
5c:05:e6:8b:68:c8:3a:a8:ff:59:8b:4d:7c:1d:16:
30:ed:c8:72:da:bb:40:d3:57:51:e1:90:3d:f1:6e:
b5:56:fe:ad:47:2f:9a:b9:79:59:80:1b:7b:96:f3:
72:91:c1:f9:6c:40:f5:c2:06:37:b5:b3:f4:42:67:
b3:41:85:bd:e6:21:c8:58:05:cd:aa:c5:f7:5b:e7:
25:9f:20:5e:7c:55:f7:d3:c6:6a:bd:6e:fc:eb:d7:
d8:28:20:44:30:a5:70:f7:9a:35:e3:ff:37:08:e0:
b4:7f:fc:76:99:34:9a:f0:3a:1b:d8:3c:65:15:73:
cc:b8:67:37:22:82:e2:30:ed:bf:15:d9:33:c7:c0:
f5:be:4f:f0:b9:c1:5d:37:28:82:df:92:67:8a:e3:
23:30:82:d8:8b:05:d1:38:78:21:bd:9b:7b:72:53:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DE:55:0A:27:85:AD:80:3E:51:6B:D0:6C:D4:8B:EC:DD:D8:D8:28
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/W95VCieFrYA-UWvQbNSL7N3Y2Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.122.0/24
193.178.215.0/24
IPv6:
2a0e:e6c0:4000::/36
Signature Algorithm: sha256WithRSAEncryption
02:36:ba:b1:56:a7:58:5b:5f:e0:13:a4:ab:18:23:1f:2e:cc:
0c:b1:7d:ab:91:2a:cc:23:f5:9d:cc:4b:47:b7:bd:1f:ff:e9:
b5:b6:6b:19:8c:67:41:d1:e9:d5:89:a5:66:b1:9f:c2:0b:dd:
26:f1:3b:aa:07:69:c1:a7:ca:96:31:8f:df:d5:0b:80:27:0a:
95:47:10:6f:32:f6:74:f0:5e:2c:60:5d:42:b3:03:39:43:48:
5c:5a:fb:d0:18:34:93:56:22:32:d1:86:67:9e:09:3b:b1:f1:
38:16:71:08:7e:3c:fc:4f:ce:9d:87:21:7f:9e:05:bd:bf:59:
30:8b:1a:db:c0:91:eb:ec:76:89:c3:47:3e:ca:04:d9:73:3a:
80:f3:09:76:9b:69:ce:d3:d2:b1:87:7d:81:72:f7:dc:47:87:
3e:e3:ba:1f:30:43:62:27:2e:b8:6d:d0:09:0a:13:6a:c7:d9:
ae:96:1d:4e:ac:c3:ff:9a:5f:b0:05:1f:82:19:3c:f7:46:42:
2b:f8:a6:19:35:83:6f:b6:ff:88:46:5e:1f:c3:04:4d:5b:4c:
49:c7:a1:1f:52:fc:58:26:99:28:b3:a1:79:ab:89:7d:39:59:
a5:1b:07:dd:45:2b:4d:6a:63:32:ba:1a:3d:2f:99:f0:50:f9:
f4:80:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:52 2025 by rpki-client