Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/Wjhlk_Dg4fwbVpIvTmMaplZHJP4.roa
File: Wjhlk_Dg4fwbVpIvTmMaplZHJP4.roa (raw, json)
Hash identifier: FbyMBr5QaaKqhAKZZXOeG6Z1gS3aCCNKInGbtvlqGWE=
Subject key identifier: 5A:38:65:93:F0:E0:E1:FC:1B:56:92:2F:4E:63:1A:A6:56:47:24:FE
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 0191A871994221A5A178560B3C34A4E5917E
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/Wjhlk_Dg4fwbVpIvTmMaplZHJP4.roa
Signing time: Sat 31 Aug 2024 12:38:22 +0000
ROA not before: Sat 31 Aug 2024 12:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.43.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a8:71:99:42:21:a5:a1:78:56:0b:3c:34:a4:e5:91:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Aug 31 12:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a386593f0e0e1fc1b56922f4e631aa6564724fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:02:5c:32:10:af:67:24:23:64:78:cf:f5:
8d:11:60:d4:68:63:f4:ec:0a:10:1c:eb:82:f0:e9:
2a:8f:7b:34:99:c5:25:c8:c7:72:04:c3:44:7e:e4:
f1:e0:e0:46:2b:98:8e:8a:ae:b4:34:54:40:0e:ae:
3e:4f:4d:c4:f9:20:5e:38:16:7a:04:1b:ff:52:fc:
65:60:c2:9a:04:a0:a2:9b:2b:a1:01:e9:16:e9:7f:
1a:cd:dc:44:fb:c4:eb:ee:27:a7:3f:75:0b:ce:dd:
10:25:a4:03:eb:34:a7:a8:ea:c2:a6:3b:79:45:a5:
fc:49:09:5e:a2:41:e6:d0:ff:8f:93:21:e9:08:17:
83:28:55:85:08:99:7c:a4:7c:53:77:8b:f9:6b:00:
92:00:bb:c1:73:0c:79:86:fa:a2:97:c3:aa:36:b8:
eb:24:ee:97:69:a2:29:ba:3a:5b:31:18:99:96:9b:
d4:cc:d5:3d:6c:5a:c7:38:04:b6:df:7b:50:cd:8d:
1a:6d:b0:2f:fc:7f:4d:e3:d3:35:ca:70:95:10:51:
0f:97:dd:3d:af:7f:20:b5:29:0b:53:52:a2:fe:4b:
98:20:83:f7:64:67:74:e8:c8:14:59:9a:f3:b2:18:
dd:cb:54:b9:24:e3:d5:d7:6f:d6:5e:7b:eb:66:f3:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:65:93:F0:E0:E1:FC:1B:56:92:2F:4E:63:1A:A6:56:47:24:FE
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/Wjhlk_Dg4fwbVpIvTmMaplZHJP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f6:3f:75:9e:1a:a5:b2:1f:b9:09:92:7e:29:44:61:d5:2e:
9b:c3:43:07:d8:5f:e4:2a:04:19:93:15:72:76:09:e0:42:12:
d1:93:94:fd:08:4a:ca:b5:8c:31:45:15:8c:6f:3b:2e:87:17:
58:90:29:ef:72:b4:11:4b:5c:d6:4e:13:01:a7:70:77:49:09:
4c:b5:a4:45:ce:05:ba:93:7f:84:07:d0:28:a2:01:05:32:71:
7c:8a:c9:03:d6:cc:06:4d:ca:7f:9e:e9:82:7e:ba:f7:84:8d:
7f:f7:f8:ae:10:36:bd:55:ae:50:d7:ba:55:4a:26:49:2f:48:
50:33:98:09:cf:fd:9a:67:ef:fc:a3:1d:6c:69:38:e6:00:e8:
a7:99:98:74:6c:fd:b7:72:c7:45:2b:6f:fc:fd:88:e3:73:55:
b9:99:25:4b:d9:1f:74:6a:84:20:20:95:dd:ff:f4:47:be:47:
a3:25:bb:10:23:26:27:eb:41:5f:79:45:37:b8:0d:21:b2:a0:
5c:d7:36:2a:9a:11:40:23:07:0f:2f:35:72:bb:e0:b3:84:9e:
b7:54:be:ea:08:7a:b3:da:c8:5b:25:42:26:8b:b3:19:11:75:
b0:a1:ab:31:c1:8f:71:d4:12:a7:44:7c:88:78:8c:a0:a6:f0:
3c:cc:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:03 2025 by rpki-client