Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/w4Gkkf9ZS21h0eriMrc7iqckrew.roa
File: w4Gkkf9ZS21h0eriMrc7iqckrew.roa (raw, json)
Hash identifier: 67HcmHAWHdZ07g6eRzB4FRQ1OkW0qe8J+cLuMKS0WBA=
Subject key identifier: C3:81:A4:91:FF:59:4B:6D:61:D1:EA:E2:32:B7:3B:8A:A7:24:AD:EC
Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial: 019426D9792A95E0941AB854111FCBB2E798
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/w4Gkkf9ZS21h0eriMrc7iqckrew.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201150
IP address blocks: 194.33.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:79:2a:95:e0:94:1a:b8:54:11:1f:cb:b2:e7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c381a491ff594b6d61d1eae232b73b8aa724adec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4f:c1:96:9a:fb:e7:2c:d5:e7:32:8b:c1:75:
6d:55:c0:88:52:e1:d5:09:8a:0b:5f:26:0e:b8:b4:
22:a0:a4:17:d0:32:3e:37:01:47:b8:05:09:76:8d:
42:ad:49:b1:5c:99:1e:41:4f:e5:3f:9d:ea:c7:bf:
29:3a:4f:1e:de:4b:77:0c:18:ef:ab:44:6b:8a:dd:
8b:04:f0:a3:6f:b0:60:41:af:3f:45:91:0a:25:70:
a6:e5:58:d9:63:54:ad:3e:33:fd:2c:b6:03:1c:57:
de:ba:6d:87:a1:12:2f:94:05:31:0e:60:af:27:ca:
46:e3:be:71:f7:04:df:5e:0a:48:91:f6:9a:c6:aa:
a7:5d:62:ef:6d:93:64:28:85:3f:45:6b:8b:17:be:
f3:ec:cc:03:50:c8:35:f1:3e:35:b2:e2:ee:06:f0:
e1:d0:c6:bf:c6:a9:57:ef:af:0c:21:89:d0:19:a9:
74:f0:05:f7:6c:71:d2:6c:29:d0:a8:96:27:eb:e9:
ef:41:e5:c8:b1:a0:a8:f3:12:76:88:2c:f6:9a:90:
d9:d1:b9:95:5c:6e:2e:ca:6b:35:da:c1:fd:e3:3e:
10:98:f5:8f:32:0c:de:12:62:a9:ca:75:97:0f:ae:
f6:0d:eb:e8:1f:26:d5:a2:03:2e:97:2c:f0:f8:f8:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:A4:91:FF:59:4B:6D:61:D1:EA:E2:32:B7:3B:8A:A7:24:AD:EC
X509v3 Authority Key Identifier:
keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/w4Gkkf9ZS21h0eriMrc7iqckrew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.28.0/24
Signature Algorithm: sha256WithRSAEncryption
82:85:0d:bc:77:1a:ef:ae:02:9c:04:5e:6c:7c:c5:64:a8:24:
f4:03:45:bf:31:e1:3d:5b:fa:14:9c:61:b9:b5:7e:71:6d:21:
c7:ca:c0:14:1c:03:28:bd:c4:af:e8:60:40:57:b3:3c:7b:7e:
a3:fb:3e:c9:9e:57:b0:e3:2b:b4:48:07:23:1f:ba:40:90:a6:
5c:9b:15:43:74:b1:29:da:29:54:e6:83:98:b8:22:c0:ed:62:
87:c0:72:15:95:6b:19:b3:4d:6c:94:97:29:b4:c4:62:31:74:
61:c6:e6:e3:02:a5:69:a8:c2:fc:a5:d9:0b:6b:4f:88:21:5f:
f5:cf:70:9f:25:f6:a6:a7:fd:1b:5f:ef:d9:20:1d:35:25:d7:
7c:33:fe:0c:17:27:ee:13:9c:25:aa:81:b9:a9:c7:8c:65:31:
9a:62:c3:64:07:bb:1d:69:41:28:9f:bc:46:b5:a4:e4:ba:d7:
1d:5b:2d:de:4b:5b:7f:e0:cd:55:42:d1:99:b6:e5:80:69:09:
bd:f6:92:7e:64:99:f2:73:6e:58:72:21:71:5d:1a:5c:cd:d6:
63:0f:6e:1f:db:2b:e7:cc:75:53:39:40:2f:f5:40:c0:ea:85:
73:f9:2d:f0:9b:8f:e8:f4:56:67:72:e9:59:7c:8b:40:a9:a7:
01:52:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:59 2025 by rpki-client on console.sobornost.net