Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/WJYzgmcrcmILpqEG0aOvuAZFJSY.roa
File: WJYzgmcrcmILpqEG0aOvuAZFJSY.roa (raw, json)
Hash identifier: 6cn2iTDXSQqMon3jkehha+lFwjisWUfx0Tw++dlztuk=
Subject key identifier: 58:96:33:82:67:2B:72:62:0B:A6:A1:06:D1:A3:AF:B8:06:45:25:26
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 019538361263EC665752EBF22DBA90820999
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/WJYzgmcrcmILpqEG0aOvuAZFJSY.roa
Signing time: Mon 24 Feb 2025 13:47:02 +0000
ROA not before: Mon 24 Feb 2025 13:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:36:12:63:ec:66:57:52:eb:f2:2d:ba:90:82:09:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Feb 24 13:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58963382672b72620ba6a106d1a3afb806452526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:fe:ff:fe:57:07:21:e6:28:96:b7:10:66:
1c:f6:ab:d0:eb:d0:c4:c4:7d:a3:08:0f:16:78:11:
c7:0a:d3:89:b1:30:27:f7:d7:e5:b4:f3:64:6d:84:
08:65:4d:e4:b3:89:be:30:69:6f:17:ae:3c:1d:85:
95:85:6b:f4:a4:12:10:80:56:c7:fa:fe:e7:05:55:
dc:37:a4:90:f5:15:87:96:7a:ff:06:b1:88:92:09:
e4:84:6c:16:48:95:fc:ed:38:b3:32:a3:11:b7:19:
d2:48:89:26:34:54:c2:f3:38:63:cd:21:d6:82:ed:
9f:be:4f:c0:3b:93:bd:2a:c0:57:f9:25:2b:2e:6a:
8e:ee:b6:ac:1d:ed:07:4c:fb:ea:5c:e9:21:05:61:
c4:4a:20:9c:b1:a8:c3:ab:12:6d:22:80:50:ff:cd:
2e:57:fa:28:6e:b6:7f:89:38:b5:1a:05:23:98:b0:
21:34:0d:ee:51:44:70:34:2a:52:db:4c:26:e1:ee:
78:2c:79:e4:01:79:21:e4:e7:c7:6a:b2:2b:18:95:
ab:51:21:32:2d:60:c5:50:a1:9e:39:d1:8b:9b:91:
d9:c0:26:8a:08:af:d0:a4:32:17:46:f6:eb:29:ec:
73:33:77:34:7f:74:9d:0c:09:c2:7b:5b:24:45:30:
28:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:33:82:67:2B:72:62:0B:A6:A1:06:D1:A3:AF:B8:06:45:25:26
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/WJYzgmcrcmILpqEG0aOvuAZFJSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
04:f1:34:2e:3f:14:62:d0:fe:cb:f6:f1:28:71:db:6b:43:1f:
6f:b7:a5:08:a7:8a:37:5a:19:54:7e:d7:4d:6c:3f:1b:2f:cb:
fe:2a:5e:6b:7d:5f:9c:38:d9:84:cf:2d:f0:0b:a2:a6:6d:dc:
b7:da:df:61:f8:85:87:e1:2b:84:94:02:33:af:49:66:0b:cb:
06:b1:d5:4e:1c:85:f6:e8:3a:0e:d0:59:e5:cf:a2:09:6f:ef:
46:7e:d0:32:b5:38:76:7d:4c:66:26:78:bd:2e:f2:83:62:a0:
e8:ae:51:5f:1d:b7:1a:42:3d:93:43:37:60:89:67:4b:7a:e3:
a8:ab:48:dc:88:43:4d:68:07:be:cd:cc:98:58:b9:cf:bd:eb:
29:b2:12:82:21:ff:7f:16:83:fa:9e:28:b3:42:01:11:99:26:
dd:56:29:ed:ec:c2:66:e7:5e:db:da:fb:65:a7:b1:1e:e7:44:
0c:a5:a8:a7:28:b1:5d:9d:f4:8a:32:2a:22:13:f1:c6:51:22:
7e:f8:02:d5:9d:6b:56:cf:d8:41:81:5c:1b:19:dc:d0:81:83:
41:63:37:4b:0e:82:24:b1:50:45:8c:66:ac:e0:c2:58:b2:17:
a3:7c:62:e6:db:2f:47:07:54:f2:37:44:7e:11:62:b2:2d:80:
91:ef:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:23 2025 by rpki-client