Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/wypxlBc1J8Bpx8wsCukzLkT7CzM.roa
File: wypxlBc1J8Bpx8wsCukzLkT7CzM.roa (raw, json)
Hash identifier: VSR04yRc8P3tg6W5nBtOO4BrNXPIDW2s4T0F9VJBzcY=
Subject key identifier: C3:2A:71:94:17:35:27:C0:69:C7:CC:2C:0A:E9:33:2E:44:FB:0B:33
Certificate issuer: /CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Certificate serial: 0194228DC21A18B175EA83A8F77815F4319B
Authority key identifier: 85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/wypxlBc1J8Bpx8wsCukzLkT7CzM.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50320
IP address blocks: 193.104.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c2:1a:18:b1:75:ea:83:a8:f7:78:15:f4:31:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=857f4c122e4f8c601f21c5c868716d46089d85e1
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c32a7194173527c069c7cc2c0ae9332e44fb0b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2e:86:0d:61:7f:aa:b5:89:78:58:25:fe:c0:
54:f1:0f:49:c8:ab:8a:b2:fe:92:9c:82:47:3f:eb:
9d:dd:d5:f6:6c:52:47:8f:99:49:b1:e2:34:81:65:
c9:b9:b8:e1:85:ef:62:53:7d:8c:05:b1:86:de:96:
f5:27:27:50:52:71:93:6c:bb:e2:0d:80:de:2f:9f:
c5:12:e8:b7:40:6a:f3:f8:5f:9c:fe:45:83:48:2e:
de:42:70:04:9c:e0:e1:a2:13:f3:fd:8f:b4:4d:f3:
b3:cc:ff:11:1a:d7:9b:b5:aa:f6:27:d2:64:77:82:
b4:10:53:31:5a:78:30:25:60:53:e5:15:39:ab:25:
e8:29:41:9f:e9:b7:dd:50:a5:53:0d:98:57:99:e2:
be:c9:5a:29:2b:31:47:ab:99:26:b7:a3:c1:f7:09:
a5:6b:2d:c5:14:9f:c6:63:7b:5d:45:4f:c7:67:30:
35:5e:bd:18:6e:e4:b5:d6:5a:56:28:01:24:23:02:
3b:ee:3a:56:80:03:b7:7e:8b:e3:ed:58:99:ee:0b:
01:b8:eb:27:e7:1b:a7:a4:39:cb:ef:4f:e7:f8:61:
2e:6d:b4:de:91:8d:b2:ff:04:18:fa:25:57:b1:c5:
a7:6f:37:20:d5:de:b4:c7:b2:17:14:67:d3:e5:0d:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:71:94:17:35:27:C0:69:C7:CC:2C:0A:E9:33:2E:44:FB:0B:33
X509v3 Authority Key Identifier:
keyid:85:7F:4C:12:2E:4F:8C:60:1F:21:C5:C8:68:71:6D:46:08:9D:85:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hX9MEi5PjGAfIcXIaHFtRgidheE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/wypxlBc1J8Bpx8wsCukzLkT7CzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/961939-ac8e-4d12-b12f-da5cb0fb19e7/1/hX9MEi5PjGAfIcXIaHFtRgidheE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.206.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fa:15:3e:0c:a0:3a:5a:9a:d0:43:a8:67:c1:35:f3:fe:cd:
b1:ae:38:4a:33:14:db:aa:ae:68:b1:cd:6d:ea:ad:4b:e7:da:
4f:76:d1:ae:eb:96:8a:6f:cc:a4:cc:ee:ac:20:bd:a0:56:1e:
d7:f3:cd:9d:ca:59:8a:28:7a:c6:b2:81:ef:fa:21:a4:53:96:
73:bb:94:54:42:20:ef:c2:dd:d9:5a:f9:19:ca:00:e8:79:50:
00:95:b4:35:69:4e:52:79:dd:36:38:e4:ab:5d:92:91:9c:62:
87:ee:da:9f:d2:e0:9f:81:53:cb:a1:4b:56:59:94:d3:ee:23:
cf:8d:cb:ef:40:50:42:62:34:ab:bc:06:93:0e:31:06:9a:1a:
49:64:e5:9c:e1:23:70:d1:5f:d4:24:c1:d0:6f:47:5f:96:80:
3f:38:06:24:0e:ca:3b:9b:e8:38:98:92:f7:d8:84:e0:66:4b:
b4:5b:96:11:5d:35:ac:97:8e:92:dd:7b:07:99:5f:af:de:31:
13:cf:b3:e0:df:18:eb:1c:ca:1a:6e:c2:1e:93:45:a9:89:26:
4e:1c:af:a7:cc:17:30:b8:f4:20:62:ed:23:74:81:14:67:67:
99:49:29:72:3d:08:48:77:19:5c:20:9e:e0:15:d0:ff:51:0f:
64:2d:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:55 2025 by rpki-client