
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/WAHmtntvzdHjgB4fSfqnUYzpdvI.roa
File: WAHmtntvzdHjgB4fSfqnUYzpdvI.roa (raw, json)
Hash identifier: U+wZxiGucBeSIQp5dluO2jjiRib/LJmPqqIUXsDnFrE=
Subject key identifier: 58:01:E6:B6:7B:6F:CD:D1:E3:80:1E:1F:49:FA:A7:51:8C:E9:76:F2
Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial: 0194228DEF9E7D29CAA2ECEEAD5539C7379C
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/WAHmtntvzdHjgB4fSfqnUYzpdvI.roa
Signing time: Wed 01 Jan 2025 15:48:34 +0000
ROA not before: Wed 01 Jan 2025 15:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199292
IP address blocks: 212.225.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ef:9e:7d:29:ca:a2:ec:ee:ad:55:39:c7:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
Validity
Not Before: Jan 1 15:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5801e6b67b6fcdd1e3801e1f49faa7518ce976f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:5e:45:33:f4:71:cb:09:c3:a2:8f:16:c9:
a1:1d:cb:6b:0c:4a:97:dc:c3:b1:cb:b3:5f:d6:a0:
bf:91:0a:7b:52:26:88:1f:e5:43:11:3d:d1:15:30:
55:1a:ec:a9:a3:17:41:15:b1:32:ed:2d:26:96:41:
cd:dd:d9:7c:de:25:f6:c1:3a:2d:5f:23:de:60:24:
fa:b5:2e:80:f8:de:d0:81:25:9b:b1:01:ba:ed:70:
49:f0:52:5a:0e:0a:17:45:93:11:58:2b:ca:c6:b5:
ae:ed:28:78:71:44:01:0e:5b:5b:34:57:64:a0:3a:
11:e8:7f:18:6b:7e:22:d2:79:3b:5c:ac:c3:e5:01:
3d:0c:59:45:bf:fb:b3:a8:a2:3f:67:e4:72:34:b6:
bd:d4:47:72:94:94:7b:c1:1f:0d:e3:7f:83:04:94:
00:7e:58:96:84:6b:9b:bf:57:5f:8f:82:fd:d1:08:
eb:02:52:f4:13:d2:5a:49:35:10:46:f4:3f:5c:19:
d2:2b:f8:82:7b:01:52:97:71:d0:99:b0:04:a6:5d:
25:24:c9:f5:d4:36:1f:cc:ff:65:43:a7:c7:99:e8:
88:91:77:cf:5a:c0:d4:bb:ef:a6:a2:6e:67:2e:a6:
6b:0a:6c:36:b4:b3:c3:ac:ec:65:2e:73:b6:e1:10:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:01:E6:B6:7B:6F:CD:D1:E3:80:1E:1F:49:FA:A7:51:8C:E9:76:F2
X509v3 Authority Key Identifier:
keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/WAHmtntvzdHjgB4fSfqnUYzpdvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.225.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:af:55:77:2f:30:54:b5:99:fa:fc:7c:e4:b7:3b:06:78:79:
a3:8b:c6:4d:7a:77:11:8a:25:d4:c4:df:be:d0:33:1c:3e:b4:
47:ff:e2:03:eb:75:b4:0b:18:d0:ba:a2:78:a7:3d:c9:29:ab:
37:f3:2b:43:77:9f:95:45:3d:35:9e:76:53:2c:c2:3f:50:cb:
91:7b:7d:ab:db:89:e0:92:86:8e:4d:6d:88:45:06:a1:1d:03:
1a:37:b2:1c:0e:85:7e:94:5c:fd:24:1b:db:0e:b8:fe:62:e9:
6b:8e:7c:18:20:20:9f:a7:f9:dc:7d:d4:16:0f:1e:30:7d:df:
d9:07:c4:35:a7:f1:f4:46:ac:4c:06:f0:55:4d:14:13:e7:f2:
31:40:b2:13:1a:eb:eb:4c:61:b6:ca:0e:be:2c:8d:ec:39:68:
a2:7c:d5:5e:af:d1:90:67:8a:7b:06:9d:1d:98:a0:7b:4f:9b:
5b:69:76:ac:e6:27:4a:cf:f5:37:07:c0:be:74:66:d1:88:21:
5c:4c:1e:99:24:8a:e1:9d:cc:e1:a4:33:aa:e4:74:eb:65:30:
f5:a5:b6:24:8a:db:fe:f6:93:ac:99:0d:66:96:1a:64:c3:ac:
73:7e:bc:92:24:58:5b:ce:6a:07:c6:40:1a:c8:bb:86:e9:b4:
51:2e:f5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:11 2025 by rpki-client