Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa
File: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (raw, json)
Hash identifier: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=
Subject key identifier: 58:6A:AC:B8:6D:AB:D5:C3:DB:36:4F:D2:95:9E:FB:5C:7D:82:46:E7
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019427B69891D39E1E742C65659120E2FF19
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa
Signing time: Thu 02 Jan 2025 15:51:05 +0000
ROA not before: Thu 02 Jan 2025 15:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.8.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:98:91:d3:9e:1e:74:2c:65:65:91:20:e2:ff:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Jan 2 15:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=586aacb86dabd5c3db364fd2959efb5c7d8246e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:54:e0:b3:64:74:86:48:04:5d:a1:8c:2b:
a5:6f:ec:64:46:03:ba:67:fe:96:43:96:bf:cf:db:
b3:5f:f7:1e:eb:27:c1:ee:e7:9f:ca:b5:f6:df:1c:
03:08:ba:db:87:61:e6:b0:94:59:ad:1b:44:6d:9e:
b1:e6:90:b7:a6:c7:20:7d:33:38:ae:2c:0e:b2:4a:
76:ee:c5:b5:fa:f8:be:c6:d3:bd:17:26:d0:4c:77:
38:da:69:d7:9a:42:a3:f7:a7:e7:13:38:ef:59:10:
fc:e7:c7:12:6b:90:bf:fb:81:4c:f2:c9:df:2e:21:
1c:0d:c2:9c:1e:4c:13:10:ef:2a:d1:3c:22:9d:bd:
11:74:e8:2f:4a:71:a8:27:cc:09:08:ff:6c:21:54:
c0:1f:77:38:71:6e:2f:8d:10:c7:c4:fc:5d:86:14:
e3:49:5e:1b:70:6d:fd:0d:bf:c0:6c:2c:82:c8:c4:
b6:f3:79:35:8f:87:a8:c3:03:05:e7:7b:42:6d:8f:
5a:09:04:94:e4:76:88:8a:6e:19:18:03:26:b8:1f:
db:31:b5:5c:31:a4:bf:1d:64:23:1f:08:ac:e3:62:
25:16:f5:60:6f:fc:6e:4e:6a:bf:2c:45:ba:89:7d:
3e:81:a4:42:b0:3f:6f:d8:1d:b0:65:fe:5c:f7:2d:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6A:AC:B8:6D:AB:D5:C3:DB:36:4F:D2:95:9E:FB:5C:7D:82:46:E7
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.140.0/23
Signature Algorithm: sha256WithRSAEncryption
16:34:b4:33:84:b2:a7:ae:59:bd:23:e9:fe:4d:e3:d6:26:5e:
6a:bd:a9:23:13:27:0d:c8:c0:57:69:81:71:49:a2:28:24:f8:
d4:dc:51:b4:33:a3:8f:65:d0:a1:74:52:ff:83:a2:6a:e4:79:
d9:49:48:3b:2b:a2:b7:72:2a:4d:a2:30:9c:e7:18:23:b1:30:
9b:01:55:b2:dc:fd:ee:b6:72:7d:77:3b:5b:92:12:2d:fc:c7:
a6:11:39:aa:ed:cf:a4:e1:4e:50:e5:de:6c:4c:6f:af:3e:40:
17:0e:67:09:05:df:7a:5d:8b:48:21:0e:6e:b8:3d:96:50:3f:
75:ed:41:cb:c0:93:98:a6:25:50:c5:c6:f4:47:4c:b5:7a:2c:
22:cc:24:40:8d:79:7d:3b:1a:f5:88:b3:e3:a9:7e:62:62:5a:
ca:27:fd:34:c2:41:d2:2f:5e:23:01:ce:06:3f:c1:a0:cc:6a:
c4:2a:cb:31:71:0e:54:10:92:4d:f6:cd:d4:2b:c4:3e:3e:63:
65:ce:52:d1:38:56:dc:ed:42:2e:13:39:c2:c4:7e:af:0d:1e:
c6:b3:86:8d:11:e3:b7:5a:73:1d:7e:9f:96:e5:6d:fa:01:5a:
01:f5:56:91:08:2a:d7:08:e0:1c:89:fa:20:b3:53:f6:df:e2:
a8:92:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:27:59 2025 by rpki-client