Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/wILLHD-thZnbY2_hVwSd8tKmVuU.roa
File: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (raw, json)
Hash identifier: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=
Subject key identifier: C0:82:CB:1C:3F:AD:85:99:DB:63:6F:E1:57:04:9D:F2:D2:A6:56:E5
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019428239FD78338EC1F946B10025B350E38
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/wILLHD-thZnbY2_hVwSd8tKmVuU.roa
Signing time: Thu 02 Jan 2025 17:50:10 +0000
ROA not before: Thu 02 Jan 2025 17:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12302
IP address blocks: 194.102.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9f:d7:83:38:ec:1f:94:6b:10:02:5b:35:0e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jan 2 17:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c082cb1c3fad8599db636fe157049df2d2a656e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:83:90:aa:00:3d:cb:71:00:1f:ae:2c:5e:a1:
7a:7b:b9:72:32:8c:63:1a:47:43:67:b6:18:fe:40:
71:a1:21:fa:9d:14:ab:82:ac:12:e5:cc:97:5b:69:
77:30:cf:31:83:31:08:b2:29:fb:82:7c:4f:aa:2a:
17:da:e0:f5:bc:78:0e:44:2e:b6:f6:b2:bf:d9:b6:
de:4c:df:27:0a:8a:0e:79:9c:ef:9d:e2:91:68:7b:
76:46:e1:69:d0:ee:10:51:f8:36:ce:74:8e:45:9e:
a5:97:41:30:89:c6:16:16:0f:20:93:1f:69:17:76:
b0:9d:71:46:05:05:f6:2a:01:1c:ba:ac:85:8b:44:
c2:33:45:0f:0b:48:b6:e4:b0:cf:9c:e0:85:a8:e5:
de:0d:92:16:ec:a7:af:cb:0d:15:ea:fe:a5:0b:ab:
7d:1a:2a:02:2f:6e:5c:72:16:50:f1:1d:09:68:ab:
00:cd:5d:f8:02:13:2d:30:50:db:74:08:63:f7:2c:
d7:4e:95:c5:53:55:64:61:23:8b:aa:72:5b:bf:7f:
ee:aa:eb:f8:e5:b4:73:cd:9a:1d:74:e1:ff:08:ab:
73:dd:61:ca:b3:31:d1:47:c3:00:57:f2:0e:40:80:
c3:54:80:ec:3f:85:d0:c3:e3:c0:89:09:1a:e2:7d:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:82:CB:1C:3F:AD:85:99:DB:63:6F:E1:57:04:9D:F2:D2:A6:56:E5
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/wILLHD-thZnbY2_hVwSd8tKmVuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a8:21:85:a7:b7:6c:ec:05:89:f9:46:71:d2:b1:e8:53:00:
4d:c5:71:75:a2:d4:3a:d1:1d:85:35:a9:df:03:db:31:62:af:
be:97:01:b2:d3:1b:b5:14:f8:df:15:65:b9:87:7c:08:8b:6d:
6f:b8:3c:4d:01:4d:dc:a9:e6:75:a0:ec:6e:08:09:d7:6b:04:
64:b5:b5:2e:ac:93:36:23:36:e4:fe:93:a3:56:68:a0:16:57:
a2:d0:53:7b:85:7c:1d:09:32:2c:58:3b:e1:fd:6e:0f:17:4a:
d1:17:77:c8:1a:ab:81:9c:2a:3a:57:2e:6f:cb:52:6e:df:04:
f5:5e:ef:50:e1:79:d5:2f:e9:66:49:07:3e:89:71:de:a6:16:
14:57:c1:f6:65:69:ca:11:79:2f:ae:d8:26:9a:2b:1b:1c:84:
f0:62:3c:5d:f6:77:79:b8:d6:ef:6f:e6:32:a8:dd:94:8d:4c:
62:0c:2f:63:33:97:aa:31:d6:ed:10:9f:49:22:29:99:08:26:
73:02:28:3a:43:eb:b9:6f:83:8d:a7:a9:a0:96:7e:9b:27:05:
6b:8c:f4:08:df:84:d7:0a:ce:3b:5a:25:49:af:e8:a6:aa:90:
76:55:30:1c:29:41:cb:f6:1d:d1:c6:a3:ec:74:91:a8:aa:8b:
bb:9e:58:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:41:44 2025 by rpki-client