Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/wIwLqinns0huK5c5I3YcfTxRkzU.roa
File: wIwLqinns0huK5c5I3YcfTxRkzU.roa (raw, json)
Hash identifier: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=
Subject key identifier: C0:8C:0B:AA:29:E7:B3:48:6E:2B:97:39:23:76:1C:7D:3C:51:93:35
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BCC046E56AF3A4DF048EA76F272E1
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/wIwLqinns0huK5c5I3YcfTxRkzU.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201759
IP address blocks: 213.33.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cc:04:6e:56:af:3a:4d:f0:48:ea:76:f2:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c08c0baa29e7b3486e2b973923761c7d3c519335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:16:06:a4:a8:ee:08:e4:48:e2:b1:21:d6:
68:92:2c:c9:20:7a:47:59:e6:e5:3f:8b:34:53:7a:
04:04:d1:3d:40:48:d0:45:cf:0d:bc:9c:0c:5d:18:
20:d8:3f:83:86:d9:0f:9f:56:fa:77:d8:df:8b:a9:
8b:98:0a:62:47:20:24:b8:72:95:7a:15:73:a6:07:
7b:cf:e3:2f:9a:26:b2:d1:5a:4d:b7:fc:4e:45:5a:
f1:ca:34:f6:52:ac:93:de:58:fa:c2:37:34:2f:5f:
81:d3:0f:89:90:97:d5:6b:88:67:27:d0:3d:aa:5e:
a6:13:9b:2c:7e:1e:c4:24:7d:2b:81:f8:d3:2a:ae:
50:2f:83:d3:4c:36:87:d1:48:30:6d:e7:99:ad:57:
06:64:43:4b:cf:ad:eb:8e:d3:6a:d2:5b:37:7f:64:
5f:0b:c2:f5:83:2d:b9:14:71:93:c3:40:10:69:47:
3a:de:64:1a:9f:8c:0a:81:4e:40:38:27:a3:69:e5:
49:20:69:d4:51:61:0e:0f:de:a3:c5:70:67:0c:de:
f7:64:32:bf:fd:f4:b0:f2:29:87:bf:bf:6c:57:ea:
4d:4b:d5:2e:60:0d:cd:31:6e:a9:98:55:58:6b:e0:
06:11:c4:23:f6:fe:72:d0:77:9a:22:f9:81:02:89:
dc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:0B:AA:29:E7:B3:48:6E:2B:97:39:23:76:1C:7D:3C:51:93:35
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/wIwLqinns0huK5c5I3YcfTxRkzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.33.100.0/24
Signature Algorithm: sha256WithRSAEncryption
42:74:fc:d3:7f:33:8c:5b:c0:29:e8:09:b2:48:f7:f1:c9:9c:
c1:4b:38:ea:2f:a0:d6:ae:10:5c:c3:92:a9:84:cf:5b:aa:41:
89:a8:db:12:92:f2:0e:2e:df:b4:6d:c0:c4:fb:bc:72:2e:b2:
8c:3a:cb:6b:11:7a:c7:35:4e:6e:59:76:a9:ed:16:8a:62:f8:
b6:fb:a5:57:61:45:68:cc:21:aa:b6:e9:6c:9f:90:c2:53:40:
f5:f7:43:da:14:d5:b5:09:16:cf:5b:89:7a:d3:bd:b0:f7:85:
e2:fa:e6:35:97:f8:59:44:a6:e7:cb:0f:52:ff:f6:a4:80:36:
1f:82:42:ba:71:2c:53:4a:27:89:d3:4b:55:06:04:93:b5:11:
d1:ae:41:be:0e:8b:23:9a:24:f3:78:7a:f4:cd:27:5c:7c:03:
98:86:0e:4d:d1:94:6e:6f:11:3a:04:31:05:49:53:d2:43:32:
29:ac:99:9b:d5:c7:21:5b:e2:eb:35:ae:03:32:0e:6f:8c:20:
40:66:9f:dd:b4:82:a5:fc:37:be:c3:14:04:15:55:6d:06:9e:
18:f7:b3:6a:e0:a6:c2:3f:41:39:62:96:21:1d:b3:ff:18:42:
18:cb:67:53:51:7a:61:df:29:96:ae:74:e1:1f:93:30:26:51:
30:21:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:46 2025 by rpki-client