Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/wnX8Ya1rxnPViUevxG2zASimD4s.roa
File: wnX8Ya1rxnPViUevxG2zASimD4s.roa (raw, json)
Hash identifier: 5yf/GiJRJl+zzQb5QiL4xkgJStGYufgJG3+rwqnEksA=
Subject key identifier: C2:75:FC:61:AD:6B:C6:73:D5:89:47:AF:C4:6D:B3:01:28:A6:0F:8B
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 01942067D3F740B83A87768C3AE2430E30F5
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/wnX8Ya1rxnPViUevxG2zASimD4s.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42307
IP address blocks: 91.192.28.0/22 maxlen: 22
194.55.248.0/22 maxlen: 22
2001:67c:274::/48 maxlen: 48
2a0c:ccc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d3:f7:40:b8:3a:87:76:8c:3a:e2:43:0e:30:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c275fc61ad6bc673d58947afc46db30128a60f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:63:2e:d2:d6:9f:1f:df:0e:0d:e2:af:c7:9e:
bf:44:73:da:c6:ab:af:6b:97:ae:f8:63:e3:14:63:
6c:25:ce:25:ef:a4:a9:40:18:9f:38:ce:9f:7f:9d:
4a:3f:38:92:7c:35:92:43:06:c9:5a:ea:28:4f:08:
f0:13:63:df:db:70:9d:d5:18:14:98:85:05:4f:61:
99:a5:1f:d2:39:68:62:4b:7d:82:d0:80:1e:60:89:
13:0f:e4:fa:ec:ad:5d:ca:53:d7:45:ca:41:0e:b0:
f1:29:2d:c9:8f:87:8b:a2:26:69:66:55:2a:72:d1:
d7:24:36:7a:ab:26:0c:91:e9:8c:ed:c5:6e:58:97:
69:91:58:53:a3:c2:b8:97:f7:c2:b1:af:ea:c0:77:
44:9d:0b:8a:26:c4:9f:7d:2b:fd:21:f7:78:dd:0c:
e9:ed:c9:58:d1:6a:9d:e4:92:d5:0a:cb:7f:8f:03:
be:77:60:65:2b:a3:4d:9c:12:8f:c6:56:02:f3:92:
c3:a0:9a:92:99:24:26:ad:e5:bf:bd:8c:86:59:aa:
1e:58:02:35:d0:a6:49:a6:8a:c5:29:72:00:45:af:
54:40:78:df:c1:81:22:f9:a7:ba:1f:e3:26:7a:64:
0b:21:dc:a1:f2:e7:f1:8c:2d:76:61:b4:65:dd:bc:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:FC:61:AD:6B:C6:73:D5:89:47:AF:C4:6D:B3:01:28:A6:0F:8B
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/wnX8Ya1rxnPViUevxG2zASimD4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.28.0/22
194.55.248.0/22
IPv6:
2001:67c:274::/48
2a0c:ccc0::/29
Signature Algorithm: sha256WithRSAEncryption
ce:3f:1d:d2:7e:88:3a:96:be:fa:3b:b1:1d:ac:dc:fd:40:ae:
ea:68:88:27:e8:70:f0:8d:04:cf:5f:32:37:4d:9f:6d:d8:bd:
e1:4c:d1:07:34:29:7e:c6:1c:01:64:b7:27:09:79:e0:88:ec:
aa:79:0e:9e:13:04:49:a2:a4:06:f7:1f:58:0a:44:b2:d9:d8:
14:b6:05:79:b0:90:87:41:d4:cc:76:3a:74:d9:c6:50:dc:0e:
46:af:ed:7f:88:00:24:96:68:d8:79:2d:7f:49:41:84:1e:da:
e0:e8:a8:c5:e4:2a:6b:c4:00:cd:df:67:fa:29:d4:d9:89:83:
42:fb:7e:4b:f1:4b:1a:96:6c:69:0e:dc:7d:93:8c:c0:71:7f:
51:77:89:0e:63:4d:da:de:6a:b2:5d:84:58:fe:8f:49:db:13:
ef:f5:96:dd:09:64:9d:02:17:86:ba:e4:4f:e4:69:ca:22:32:
7c:39:93:f9:4f:5b:21:71:af:f3:57:30:0a:03:27:42:8f:95:
fa:82:43:01:8f:cf:85:6a:3e:68:70:a2:3c:d0:f5:a3:d4:ab:
ca:2f:35:1e:3b:f0:d0:c1:72:4d:a3:20:32:45:d6:7d:25:56:
6e:8d:7a:9f:51:2e:85:a4:b8:12:b5:cb:43:ea:5f:92:ef:cf:
f9:5c:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:45 2025 by rpki-client