Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wzBJi7QTAlLYnpDrkWrFRXs4E7c.roa
File: wzBJi7QTAlLYnpDrkWrFRXs4E7c.roa (raw, json)
Hash identifier: 7a88C4VsgWO4B3Y1og58B7KkV5zb4JnrpThPK7nq9kY=
Subject key identifier: C3:30:49:8B:B4:13:02:52:D8:9E:90:EB:91:6A:C5:45:7B:38:13:B7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019561F54A575F24C4657E22A9EE3011BC9C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wzBJi7QTAlLYnpDrkWrFRXs4E7c.roa
Signing time: Tue 04 Mar 2025 16:20:20 +0000
ROA not before: Tue 04 Mar 2025 16:20:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50920
IP address blocks: 194.103.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:61:f5:4a:57:5f:24:c4:65:7e:22:a9:ee:30:11:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 4 16:20:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c330498bb4130252d89e90eb916ac5457b3813b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:e2:c0:d0:f5:96:dc:1f:64:87:e4:e9:1c:
6d:c8:0f:b5:cc:01:ef:86:dd:82:76:8f:4f:29:0e:
ee:08:20:9d:fb:c7:9f:b8:d7:99:85:db:49:b8:58:
cb:bb:3d:25:30:14:ec:3e:ad:7d:21:68:52:1e:85:
21:cb:ab:28:f2:9e:a0:35:ee:30:04:04:2e:88:77:
2c:8c:4b:de:24:ea:7b:ac:68:b1:f1:c2:04:f4:08:
b4:0a:46:80:60:e0:be:39:a4:d7:01:db:66:45:2d:
a7:4b:47:a8:25:df:28:78:1c:86:61:b0:c9:7b:72:
48:b8:d7:84:10:dc:67:ef:02:db:38:31:88:13:27:
7f:08:35:7b:66:1a:4c:db:60:93:d5:eb:c3:f5:ea:
17:84:32:e0:07:6e:0b:55:c0:45:70:10:fa:6e:de:
c1:48:2c:dd:6e:ce:a9:37:0f:fc:d7:d1:b4:c7:f4:
75:1e:72:30:3d:28:2b:93:bc:58:ab:73:88:89:61:
ac:4f:1c:88:61:40:78:16:3d:59:ef:aa:12:0a:ff:
d7:83:b0:34:fd:91:c2:e6:ae:38:75:78:d3:2c:e2:
11:82:ba:9f:b5:ca:39:fe:79:1e:68:a0:1e:d7:5d:
89:75:61:e2:ae:5c:f1:19:e5:13:66:54:5b:82:2c:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:49:8B:B4:13:02:52:D8:9E:90:EB:91:6A:C5:45:7B:38:13:B7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wzBJi7QTAlLYnpDrkWrFRXs4E7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.103.64.0/20
Signature Algorithm: sha256WithRSAEncryption
50:53:8c:f8:42:ec:78:96:d5:74:ef:ca:68:09:ae:d9:2d:f6:
98:8a:09:8f:0c:aa:2c:7f:cc:a9:99:0e:bf:9b:37:0f:e6:77:
24:a8:9d:d9:cd:59:dd:1c:00:3a:0b:b0:e8:19:8d:19:d0:d0:
33:a3:9c:fe:43:0d:18:c0:8d:7e:73:99:47:39:f8:58:56:62:
7d:f4:3e:50:e2:12:7c:20:dd:41:4d:8c:48:f5:4d:e9:79:e8:
de:67:31:26:b0:14:11:d2:14:10:0b:93:6d:e2:af:63:1b:9a:
b4:5b:e2:fa:bb:bf:90:db:71:8b:c2:9d:9e:fc:dd:b2:f3:0a:
f3:a2:6b:c0:62:16:33:0b:52:ba:66:3f:4a:62:5d:ef:32:6e:
5b:1f:cf:e7:79:b1:03:fe:fe:89:06:14:8a:c5:cd:0c:f8:1a:
0d:92:8a:33:78:77:ce:47:dd:68:e9:b6:1a:d4:62:9f:3b:00:
88:e2:0f:ae:65:f9:e4:9a:22:b3:3f:86:69:94:d7:7d:4d:2f:
e7:4a:4b:41:03:54:f9:e8:df:40:3a:6a:f4:8e:81:69:4d:56:
86:e2:80:cd:ef:e4:77:5d:e2:bf:75:5e:d1:b5:0e:22:dd:a2:
f6:2e:9a:38:20:45:34:42:44:ac:0e:d4:91:a5:7f:c3:35:57:
5f:8b:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:18 2025 by rpki-client on console.sobornost.net