Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/wn4QAHp5Rzb8lXeVuE7q6L111pE.roa
File: wn4QAHp5Rzb8lXeVuE7q6L111pE.roa (raw, json)
Hash identifier: 4bKaaL//q7uEAPyKRq4kflXDoCt6wQEv9YHzvR6r61o=
Subject key identifier: C2:7E:10:00:7A:79:47:36:FC:95:77:95:B8:4E:EA:E8:BD:75:D6:91
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 01941F8C092FF70186521E7E606F572FC5DA
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/wn4QAHp5Rzb8lXeVuE7q6L111pE.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51043
IP address blocks: 193.161.8.0/24 maxlen: 24
193.161.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:2f:f7:01:86:52:1e:7e:60:6f:57:2f:c5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c27e10007a794736fc957795b84eeae8bd75d691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:f8:00:6e:ee:7b:f9:6d:80:9c:f3:54:62:
a2:17:4b:b1:9a:e3:93:f4:d2:9c:8e:df:d7:e2:47:
e7:f5:e4:e1:0c:bd:ee:85:46:e5:3e:7d:1b:c6:46:
a8:b8:59:ba:84:6e:ba:85:c1:91:c7:68:d4:ef:0d:
bb:eb:af:ae:40:e6:0c:50:12:cd:9d:23:1f:a0:54:
a8:76:72:b5:9b:c7:76:7f:59:87:19:84:3e:44:09:
56:1c:f2:25:45:1c:7c:c7:77:03:59:e2:71:bc:b4:
3a:23:c0:b0:cd:72:fc:eb:c4:d5:71:64:23:40:1a:
f4:b0:f2:7d:9b:df:66:b9:cf:9b:b4:02:82:d5:a2:
5e:fc:6e:6c:32:48:33:f0:f7:41:67:7c:59:75:7f:
6a:49:6b:82:d9:8c:b8:20:5c:f6:5d:05:c8:c4:d5:
99:13:f4:8b:0e:8c:e4:bf:db:94:84:da:ad:77:1e:
da:d2:cc:d1:f6:a2:f2:71:d1:40:3f:30:65:ed:5c:
69:c5:a6:3b:ad:04:cc:dc:66:cb:30:4c:47:43:81:
44:29:33:c4:78:62:03:fe:3d:21:b3:78:89:4d:d6:
17:7a:fd:ef:96:9e:eb:be:28:e3:c7:74:5c:bf:46:
41:fd:95:ca:92:94:b5:e4:ea:dd:02:50:12:6b:24:
2a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7E:10:00:7A:79:47:36:FC:95:77:95:B8:4E:EA:E8:BD:75:D6:91
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/wn4QAHp5Rzb8lXeVuE7q6L111pE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.8.0/24
193.161.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6b:9c:cf:57:07:6a:17:d5:c8:7a:40:07:24:54:98:88:99:
f5:2e:89:80:6b:37:0c:1f:5d:35:29:eb:28:de:59:60:7d:18:
5e:56:e3:a5:e6:8e:23:af:0f:3a:87:6e:ed:f7:71:1b:04:47:
70:b2:73:ec:31:b0:4c:44:04:88:77:ea:21:7a:49:3f:1d:10:
bb:66:28:a5:90:b4:b9:1a:99:7c:c7:70:2f:5b:fb:8a:f1:6a:
fa:19:ec:01:ca:4f:e4:d5:3c:a9:d3:b3:ae:4f:91:28:ad:27:
f7:73:68:09:3b:55:f0:07:71:06:01:c4:01:e3:24:20:36:2d:
04:33:8d:b2:94:35:84:f3:c6:ee:c8:43:79:ba:ff:8a:3f:86:
3b:dc:69:fd:d3:c7:7e:d4:df:56:1b:eb:af:d0:34:c0:98:07:
6e:99:5e:0c:a3:77:db:a1:6d:65:41:f6:2e:d4:8e:cb:83:c4:
f0:3c:90:15:0a:2c:4c:73:91:e2:1a:b6:46:98:40:48:c7:bd:
71:cb:bb:49:26:c5:09:45:52:07:ca:c1:67:bd:20:18:f6:e9:
38:28:17:b1:6b:bd:f3:a3:ba:1b:de:2c:d5:f3:51:c3:df:75:
0a:dc:11:14:74:64:05:75:88:89:8f:59:4e:44:15:29:3c:3e:
69:9a:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:03:56 2025 by rpki-client