Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/wnP8ar0T5_26GaN9rjctkFtJ4NU.roa
File: wnP8ar0T5_26GaN9rjctkFtJ4NU.roa (raw, json)
Hash identifier: Fm6hC8dXLY3PAjqVe1IRbgZgcVOdbcXauVrZ8+GyrJ8=
Subject key identifier: C2:73:FC:6A:BD:13:E7:FD:BA:19:A3:7D:AE:37:2D:90:5B:49:E0:D5
Certificate issuer: /CN=208fa2b8733f5318267ad13bec0794346277cf25
Certificate serial: 0192E40ABB340C33F86F8020AA27F248E6AC
Authority key identifier: 20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/wnP8ar0T5_26GaN9rjctkFtJ4NU.roa
Signing time: Thu 31 Oct 2024 19:26:01 +0000
ROA not before: Thu 31 Oct 2024 19:26:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2159210
IP address blocks: 195.28.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e4:0a:bb:34:0c:33:f8:6f:80:20:aa:27:f2:48:e6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208fa2b8733f5318267ad13bec0794346277cf25
Validity
Not Before: Oct 31 19:26:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c273fc6abd13e7fdba19a37dae372d905b49e0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:4e:2c:32:26:8c:61:fc:34:6d:fb:ef:81:
89:0f:ff:93:de:62:a3:d6:ec:59:7c:2e:e3:1f:0a:
bf:40:12:45:0e:25:12:30:49:cb:8b:80:4e:b5:62:
22:9d:73:05:70:dc:ab:96:02:e8:e8:ae:cb:7d:f2:
4d:67:43:e6:a5:44:f2:82:01:06:6b:71:bc:c4:5c:
d6:2b:1f:b2:52:a3:86:1a:a9:23:41:1b:c3:53:70:
8c:63:f6:d0:85:4b:08:b4:52:ef:9b:44:04:30:7c:
d8:ab:37:af:9e:c7:7e:a8:41:6f:8c:51:7c:1a:16:
5d:55:64:60:21:93:94:c3:ed:fc:72:f8:5f:8e:7d:
4c:a8:51:3b:6a:05:54:65:e3:90:b2:3d:34:21:9b:
fb:e3:16:e0:75:00:36:b0:a2:1e:38:d5:bb:89:6f:
d4:3d:39:24:14:08:72:6b:e7:0f:ab:52:fd:10:31:
b1:8f:ce:b8:f7:2e:c2:96:6c:0b:38:37:41:c6:20:
8c:1f:7b:20:f9:df:a1:1e:1a:b5:aa:b5:0f:a1:1b:
94:a8:e3:4c:91:1a:02:f6:dd:44:7e:27:b7:17:24:
b2:bf:d7:22:56:a9:f6:d1:04:ca:a4:64:0c:3b:3b:
a9:63:dd:f5:85:ac:6c:6e:a5:8a:ae:81:de:31:63:
f0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:FC:6A:BD:13:E7:FD:BA:19:A3:7D:AE:37:2D:90:5B:49:E0:D5
X509v3 Authority Key Identifier:
keyid:20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/wnP8ar0T5_26GaN9rjctkFtJ4NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0a:f4:4b:da:3d:41:e4:e2:4c:07:1b:14:d0:da:55:5f:d0:
0c:e4:17:14:09:82:b2:ef:7d:7e:77:98:b4:e4:79:ee:d9:fb:
a3:90:ff:fd:4f:99:b2:b4:bd:a6:d1:5f:27:ce:8e:e7:87:74:
19:64:75:6c:d0:6b:ce:25:06:93:14:5b:1f:89:35:30:0a:75:
03:5c:84:d9:d2:d4:0a:14:82:1e:b9:1a:bf:d8:e5:4b:b8:20:
54:6f:e7:dc:0a:dd:71:1b:51:e8:10:bc:1d:04:d7:8d:ac:56:
9b:f1:e0:71:9c:d7:47:ca:67:3d:c9:f7:ea:41:3f:2e:2d:90:
1e:78:93:48:1f:ad:40:2f:0e:44:f4:ba:f7:e7:31:44:1c:e6:
97:9c:2f:53:bf:3c:ba:4a:17:16:fa:b6:d4:8f:15:41:4e:81:
7c:d6:0c:6f:e4:b5:36:a3:1c:42:e0:a1:ee:9a:d7:78:9b:fa:
03:79:1f:f5:ef:04:3b:8b:8a:fc:17:e2:ec:5b:06:a2:ef:a9:
9b:93:d5:c6:f1:94:77:14:6b:25:a5:ca:7b:7e:d8:ab:6c:40:
50:a4:8c:96:f1:bc:9e:77:a1:46:9d:26:d9:cf:93:aa:46:01:
10:ac:1b:0d:89:14:24:92:c4:88:35:ed:05:97:ba:de:df:ce:
e5:a4:82:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:37:07 2025 by rpki-client