Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa
File: wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa (raw, json)
Hash identifier: +wp6lxNgAtxILpMTUkDSjuiOZSAbCznuueE15At+rMg=
Subject key identifier: C2:EC:BF:BB:8C:0C:29:10:B9:08:0D:98:F8:DA:F2:D4:01:40:86:3F
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 0194236997E6BE9691429D29ADF6938420B8
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12403
IP address blocks: 176.114.32.0/20 maxlen: 20
176.114.32.0/22 maxlen: 22
176.114.36.0/22 maxlen: 22
176.114.40.0/22 maxlen: 22
176.114.44.0/22 maxlen: 22
193.200.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:97:e6:be:96:91:42:9d:29:ad:f6:93:84:20:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2ecbfbb8c0c2910b9080d98f8daf2d40140863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:1f:85:5c:60:e7:01:dd:c5:e4:1d:da:b7:
74:86:f6:8c:7a:7b:8a:b5:ab:f8:b6:77:53:e5:96:
5b:09:17:8a:a8:48:15:08:2a:8a:0b:17:09:c2:d6:
82:e9:e2:0b:9a:9b:74:79:20:cc:c5:91:c7:34:ca:
a3:72:a2:76:93:91:f9:79:3c:37:f4:96:37:b9:e8:
00:5e:5f:04:49:57:cd:81:13:e9:bd:c1:1e:e6:e7:
cd:3b:1b:ec:44:ab:7f:97:39:a6:c7:d2:bb:ad:cb:
a5:f6:2d:7e:71:af:95:07:e3:11:d4:61:84:9e:7b:
f1:70:70:92:63:22:31:f7:8f:e4:d7:d9:2f:07:30:
53:8f:f9:96:91:ae:b7:b0:41:79:e0:5a:5e:de:ce:
de:6a:0e:91:da:92:35:f3:2d:ad:5d:37:b4:78:a8:
f0:eb:aa:ec:de:61:df:66:56:ad:18:cc:c9:f7:98:
1c:69:6d:2c:ef:51:58:29:c6:eb:db:38:f1:1b:96:
19:11:03:37:34:af:cf:25:b5:50:3d:da:5a:75:ee:
94:13:21:53:c7:95:53:e6:59:64:6a:68:3d:07:54:
3a:7b:66:d7:84:fc:c4:bd:70:29:56:a5:66:5a:de:
32:f4:0b:92:6f:ad:a6:3c:ff:a0:c2:d6:ab:ac:5f:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EC:BF:BB:8C:0C:29:10:B9:08:0D:98:F8:DA:F2:D4:01:40:86:3F
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/wuy_u4wMKRC5CA2Y-Nry1AFAhj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.32.0/20
193.200.183.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:26:9d:f6:de:98:fb:dc:69:1a:8d:16:0c:6a:73:f1:66:e8:
33:0b:f1:db:56:bc:00:f6:82:9e:4e:3d:d4:9d:be:d8:20:88:
59:8a:69:bd:fe:3b:d5:0a:bc:c3:61:d8:0d:a3:82:eb:f3:c2:
76:d2:9b:53:7b:2e:04:3a:a3:63:be:71:d7:cc:af:a8:cb:24:
7a:ab:66:f1:c7:dc:6a:e0:53:b9:05:19:e3:cf:d2:d5:c3:fb:
18:e0:04:7a:e4:2b:bb:3f:5e:93:6c:04:54:33:4a:76:6d:b6:
d5:42:23:42:b3:3f:d4:09:95:df:51:69:dc:85:dd:dd:a5:6d:
97:de:8a:09:fc:52:ef:b7:f3:e9:5c:f6:bd:85:34:f0:eb:d1:
1b:9d:b2:cd:a2:d7:5a:eb:5f:5b:8b:a4:f3:4e:e4:74:b8:2b:
8c:0d:f3:2c:4d:fd:25:2e:04:64:ea:5d:f0:d7:fd:e4:05:9a:
48:c9:36:43:f3:f2:97:05:f9:f9:a9:e0:d7:f4:df:8d:92:4a:
9a:f9:2e:9e:47:ed:0b:d8:1f:06:72:69:b6:a4:88:cf:8a:47:
c0:ce:a3:18:2a:fb:05:20:a3:b0:14:67:cf:42:3a:08:e1:4d:
d1:cb:4a:fc:1c:08:19:5a:69:bf:98:1a:53:41:66:5e:b2:1f:
a0:44:dc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:03:17 2025 by rpki-client