Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/W1GVGEMQmJZkj465u10DUFmM0KI.roa
File: W1GVGEMQmJZkj465u10DUFmM0KI.roa (raw, json)
Hash identifier: SvcIJss6manfJOWH/uw6Tbf8OZqbPtgZ1EqIPOzfeqk=
Subject key identifier: 5B:51:95:18:43:10:98:96:64:8F:8E:B9:BB:5D:03:50:59:8C:D0:A2
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019424B397E5BAB6E26380E7CAB2EF59C77D
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/W1GVGEMQmJZkj465u10DUFmM0KI.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210756
IP address blocks: 91.202.245.0/24 maxlen: 24
91.202.246.0/23 maxlen: 23
185.109.28.0/24 maxlen: 24
185.109.29.0/24 maxlen: 24
185.109.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:97:e5:ba:b6:e2:63:80:e7:ca:b2:ef:59:c7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b51951843109896648f8eb9bb5d0350598cd0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:2a:dc:65:ad:51:3a:ec:72:1a:d3:67:ed:
5c:e2:2b:f2:79:b2:32:b3:2d:5a:40:7b:91:90:1e:
6b:dd:c9:dd:29:dc:6e:c7:bf:69:7c:ee:55:fa:1a:
ef:56:60:91:49:16:30:4d:5d:52:2c:23:39:d6:a9:
33:1e:67:79:ee:4c:d6:75:f2:19:bc:ca:35:2b:bc:
86:9d:53:c3:46:91:26:37:b3:0e:26:81:30:07:c5:
4b:04:12:82:ab:49:17:a5:d2:8f:05:68:3b:a4:be:
1c:d6:6c:e5:90:c6:9f:5f:72:dd:eb:df:a1:1a:69:
bd:1f:78:5d:09:c7:e9:37:21:76:47:e4:9e:35:56:
eb:40:65:b2:c7:17:b4:95:9d:ab:47:bd:ff:50:27:
da:97:1f:b0:93:c4:6c:b7:46:2c:72:b5:2f:bb:b9:
55:2d:36:86:74:1e:ad:de:11:06:49:f1:2f:9c:7a:
c9:94:46:a8:b0:f0:2b:16:89:26:59:4b:43:bd:40:
61:fd:7b:1b:e6:ad:3c:34:75:d2:e1:92:a5:54:dc:
cf:e4:06:cf:a8:b9:f1:64:a9:4e:a9:77:07:f0:c5:
4b:ef:89:af:82:73:54:d4:78:5f:2b:00:23:a5:e1:
4e:1d:ea:52:f6:d8:24:17:dd:65:2d:bf:19:c8:63:
53:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:95:18:43:10:98:96:64:8F:8E:B9:BB:5D:03:50:59:8C:D0:A2
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/W1GVGEMQmJZkj465u10DUFmM0KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.245.0-91.202.247.255
185.109.28.0-185.109.30.255
Signature Algorithm: sha256WithRSAEncryption
55:44:31:b9:9b:dc:b0:76:aa:a0:b0:6c:73:d8:77:68:a4:7f:
0f:72:0e:4c:b6:4c:d1:57:9b:6b:6e:c4:f9:c1:8c:e9:8f:f3:
2b:19:2e:15:7c:04:3a:8f:21:e1:55:13:a8:ac:c2:1a:ab:8e:
d7:1e:ea:94:39:0b:ad:71:17:7f:69:1d:82:fc:c3:61:6d:70:
26:75:87:f3:11:d4:04:79:6d:c3:4c:2d:45:c7:62:3a:92:35:
b0:f9:cc:a3:3c:89:0e:73:ce:99:02:b9:94:1b:d3:eb:13:98:
90:c7:87:99:f8:7a:3f:d3:dd:97:8c:b6:a9:e0:99:d3:af:23:
1a:4e:9c:ce:2a:bb:65:ae:53:68:16:6c:73:0d:d8:e7:be:75:
9f:a6:6a:0f:8b:1a:f1:16:6d:ff:72:7d:cd:6d:c5:99:d7:52:
68:6b:82:ea:08:4d:e6:98:a1:c1:b7:4b:18:ed:a1:a9:cb:d4:
ff:20:07:05:c2:01:9a:97:3e:0a:f0:1f:40:ca:9a:7f:5a:04:
5d:7b:da:2d:18:4f:bd:27:64:a0:28:23:a7:89:0f:52:0f:e6:
f8:50:5d:13:b9:41:23:86:6d:be:da:b1:41:ba:f6:6e:e9:74:
5d:93:72:fa:ed:3a:3f:a6:0a:52:f0:6d:fb:20:a3:d4:c2:9a:
69:42:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:33 2025 by rpki-client