Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/W1J_Ox-miQB5NYWodMfh4YuNlMI.roa
File: W1J_Ox-miQB5NYWodMfh4YuNlMI.roa (raw, json)
Hash identifier: 6mApgO3CMe8LzYnTdJByQ23j3L6ok6TBGQjOecjwQw8=
Subject key identifier: 5B:52:7F:3B:1F:A6:89:00:79:35:85:A8:74:C7:E1:E1:8B:8D:94:C2
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019447D8D0EA62793ED87A674D62BC366ED5
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/W1J_Ox-miQB5NYWodMfh4YuNlMI.roa
Signing time: Wed 08 Jan 2025 21:36:19 +0000
ROA not before: Wed 08 Jan 2025 21:36:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 193.43.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:47:d8:d0:ea:62:79:3e:d8:7a:67:4d:62:bc:36:6e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 8 21:36:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b527f3b1fa68900793585a874c7e1e18b8d94c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:93:a9:bf:73:69:01:c0:60:dc:da:79:0b:a3:
0d:86:fc:7a:4e:7a:65:84:20:d0:31:a5:93:93:d1:
22:36:9d:2e:bb:75:91:f2:17:3c:27:18:91:7b:00:
b3:b2:4a:bc:d6:d3:af:ca:a3:7c:6e:61:43:2a:35:
be:3c:a6:2f:c3:e1:6e:56:a6:b4:19:60:e6:6d:46:
86:f8:a1:01:1d:e0:76:00:0c:97:1d:34:94:b3:6b:
20:04:e3:c8:35:33:de:12:cb:74:84:67:ae:48:e0:
e4:d1:f5:1f:ae:d8:9e:22:73:c5:54:61:59:c5:39:
51:b7:ca:73:7b:10:e0:35:cf:22:82:0e:bd:09:25:
82:58:4f:69:6c:e1:36:f9:8d:d5:a2:ff:d5:dd:7c:
da:a3:9e:c9:9d:8e:45:57:07:92:ee:df:2e:5d:f8:
d3:c4:a8:8e:44:5e:7b:4d:67:41:17:23:d5:85:c3:
57:a2:93:88:8f:d3:59:b5:59:00:57:7f:a3:ce:e4:
bd:99:86:99:8f:7b:7a:d7:63:9c:ee:2c:71:97:10:
cd:95:69:67:80:de:15:71:0f:8a:c5:85:90:97:1f:
36:f9:74:41:00:4a:14:a4:63:5d:ad:eb:39:e9:ee:
bb:86:72:5f:0d:e7:18:e2:61:5b:66:8e:e9:75:ca:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:7F:3B:1F:A6:89:00:79:35:85:A8:74:C7:E1:E1:8B:8D:94:C2
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/W1J_Ox-miQB5NYWodMfh4YuNlMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:72:b3:30:06:6e:dd:1e:85:25:df:8b:fb:78:79:0b:83:80:
fb:c6:33:7e:b0:71:43:45:b1:57:59:59:cd:01:58:b6:71:48:
18:d6:3f:de:51:27:9d:9a:83:5a:de:b5:e4:4b:ca:f1:a9:29:
27:73:a8:bd:0e:eb:52:84:bb:10:cc:95:c6:6a:96:66:6a:fc:
35:be:cd:f9:cf:9f:5e:09:4c:36:ee:33:35:8c:7b:d1:fb:7a:
ec:89:d7:39:0b:74:11:d0:8a:88:49:e5:67:31:16:f0:c5:51:
ca:59:5d:0d:45:41:10:4a:2c:2c:3d:cc:00:eb:a6:96:a0:d5:
b6:1b:69:f7:cc:cc:e8:e8:eb:c2:f3:c5:cb:a2:88:dc:54:2b:
0d:94:b1:30:66:af:8d:92:60:f4:de:ce:80:dd:88:75:24:06:
4e:41:c6:c9:f9:91:d6:c9:b4:d5:39:e4:5d:7a:1d:78:2c:25:
28:b8:66:a7:be:be:03:38:ea:50:27:39:0d:96:35:07:9f:88:
bb:4e:4b:1a:30:c2:19:b0:8f:fe:cf:65:31:27:c7:08:c0:79:
33:98:6b:06:37:48:6a:16:9c:ee:4e:3c:b4:84:12:d4:ad:8d:
d4:9f:60:f8:a9:06:b6:8e:cb:02:7a:19:52:d9:89:d2:18:2c:
67:30:6e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:03 2025 by rpki-client