Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa
File: WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa (raw, json)
Hash identifier: WAiPSFNwflOwr12Zue1faOYw7xwtb69ioqP/IRmI9s0=
Subject key identifier: 58:71:C9:50:56:16:C8:A8:E1:0C:E6:24:EC:19:30:B5:DF:CA:11:A0
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143B12B9F325051956C7D455FEEAEC6
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1887
IP address blocks: 148.81.0.0/16 maxlen: 16
148.81.13.0/24 maxlen: 24
148.81.100.0/24 maxlen: 24
195.187.64.0/18 maxlen: 18
2a00:1488::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b1:2b:9f:32:50:51:95:6c:7d:45:5f:ee:ae:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5871c9505616c8a8e10ce624ec1930b5dfca11a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1d:c8:bb:8e:da:81:13:56:ea:3c:41:c4:05:
5b:0a:4f:9f:2d:1b:e1:bb:cc:b3:dc:57:a0:bf:f5:
49:87:e8:61:dc:82:76:1f:f4:75:cd:05:e5:f7:8e:
27:6d:b1:34:6a:1f:d3:bd:20:a2:f6:38:ae:07:0c:
7f:32:7a:ff:85:82:b2:ad:5b:c4:43:25:cd:b4:7f:
cc:38:05:d3:d1:74:0d:0f:23:63:e2:e2:86:07:8f:
aa:8e:58:b4:22:bc:9d:5c:19:cf:ab:78:9d:6e:7b:
ab:d0:04:bc:79:26:f0:73:89:d9:97:b4:73:a8:34:
fc:a1:d8:0b:2d:75:58:2b:c5:af:da:cb:0e:22:c7:
e6:0c:0b:37:6c:f5:78:6a:79:ed:54:11:b8:96:82:
a7:42:86:5a:e3:92:1e:96:2e:fb:61:a4:89:55:99:
a5:13:0b:02:52:f1:b4:74:d9:11:2a:41:3b:c7:81:
7e:f7:15:f9:7c:51:b9:e4:2e:7f:4d:1c:ed:6d:5a:
cf:00:76:65:60:cf:6b:c8:7a:69:6e:e4:d0:81:16:
a3:7a:24:3e:46:ab:ab:d1:78:b7:ca:48:15:14:e7:
40:43:36:97:fe:35:86:fc:34:99:82:ab:7c:5a:85:
d4:9e:bb:74:89:eb:c2:c5:b4:b2:74:e6:94:72:c8:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:C9:50:56:16:C8:A8:E1:0C:E6:24:EC:19:30:B5:DF:CA:11:A0
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/WHHJUFYWyKjhDOYk7Bkwtd_KEaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.0.0/16
195.187.64.0/18
IPv6:
2a00:1488::/32
Signature Algorithm: sha256WithRSAEncryption
0b:cc:4d:df:41:51:4c:b3:7e:cc:b1:69:74:8c:5c:26:a6:98:
f5:82:c5:65:8c:34:d1:96:86:9c:8f:77:70:2a:c0:c1:16:e2:
5a:61:76:01:af:d7:96:84:73:d4:d6:95:ef:a9:d7:c9:9a:fb:
57:1a:a2:f0:f8:5f:40:c4:b7:4b:20:e0:b7:b3:d9:49:87:b3:
19:9d:e3:ac:0e:f9:c8:76:b0:a2:31:b4:a2:21:60:9c:f8:44:
93:4a:24:fe:c9:ee:45:77:15:71:cf:a2:a8:47:b0:d9:94:69:
35:db:da:ce:15:23:da:25:8a:cf:4c:01:e9:24:c7:0e:94:a8:
d2:c4:ca:a4:74:55:bc:16:e0:ed:e3:78:e0:02:0d:48:5a:81:
7c:ea:f1:2d:26:0c:28:35:e7:fc:42:a2:d0:87:88:b1:90:d5:
09:05:98:7c:d2:d6:5d:fc:62:47:1c:67:03:76:0b:9d:f4:cc:
70:1c:11:2f:ab:a9:f8:50:d8:e1:3c:0c:23:8c:c3:96:d3:f4:
de:d8:e6:c0:05:b9:26:53:39:f7:99:bd:36:0c:37:74:0c:90:
e5:32:4b:8d:8e:ff:b6:d6:2c:08:16:aa:16:2a:07:3e:61:e9:
ea:ef:85:ac:a9:70:00:68:b2:18:90:12:a1:3f:b4:7c:a0:24:
8b:7a:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:01 2025 by rpki-client on console.sobornost.net