Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/WfEws16cTi2Df979LQ6mRAE2axY.roa
File: WfEws16cTi2Df979LQ6mRAE2axY.roa (raw, json)
Hash identifier: dALElZ6XR2T3Ta1WDi4smMz8JqXiVTKehinoqdH3p2M=
Subject key identifier: 59:F1:30:B3:5E:9C:4E:2D:83:7F:DE:FD:2D:0E:A6:44:01:36:6B:16
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019425FDAA225ACF84B6B20310D5B7D897CD
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/WfEws16cTi2Df979LQ6mRAE2axY.roa
Signing time: Thu 02 Jan 2025 07:49:28 +0000
ROA not before: Thu 02 Jan 2025 07:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62041
IP address blocks: 91.108.4.0/22 maxlen: 22
91.108.8.0/22 maxlen: 22
91.108.56.0/22 maxlen: 22
95.161.64.0/20 maxlen: 20
149.154.160.0/22 maxlen: 22
149.154.160.0/23 maxlen: 23
149.154.160.0/24 maxlen: 24
149.154.162.0/23 maxlen: 23
149.154.164.0/22 maxlen: 22
149.154.164.0/23 maxlen: 23
149.154.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:aa:22:5a:cf:84:b6:b2:03:10:d5:b7:d8:97:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 2 07:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59f130b35e9c4e2d837fdefd2d0ea64401366b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:7e:22:12:5e:93:c4:24:a5:ea:2c:88:78:
d2:2f:de:f2:6c:ca:3a:8e:d9:b0:8f:dd:3e:5b:cc:
c1:56:43:24:ba:32:88:0d:eb:06:a4:7f:f2:2d:2b:
13:1a:27:31:21:fa:95:6f:b0:e4:7c:8e:55:53:b5:
d8:01:97:16:b4:48:0f:dd:1b:eb:b3:98:19:7c:70:
a9:69:ac:17:10:36:d9:0e:06:8d:09:fe:1b:c4:d8:
c5:fa:f0:2c:96:29:75:4b:69:fa:3c:8e:5b:6d:0c:
9a:1a:1d:53:5f:e9:f7:3c:31:cb:65:51:87:97:01:
20:07:e2:c5:85:fd:cb:00:cc:f0:7d:ae:34:80:32:
b8:7d:1e:6b:3c:75:3c:41:61:54:a2:e1:4b:0d:a3:
0b:60:96:41:ba:5e:e7:40:30:92:60:be:6c:ed:cc:
40:c5:85:c7:22:a4:e7:69:e1:30:08:e3:79:14:77:
af:b1:8c:50:49:ed:c2:ac:cf:02:da:e4:26:d8:d4:
2a:91:3a:67:bd:af:91:6c:8c:c1:8a:89:6b:0a:cb:
7a:71:41:e5:30:c5:e5:41:af:76:48:43:ef:cc:ae:
55:de:5b:bd:10:bd:77:91:45:36:ec:6e:e0:d4:7f:
88:db:3b:3b:9b:a9:ca:bd:28:f2:68:95:a5:35:4c:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F1:30:B3:5E:9C:4E:2D:83:7F:DE:FD:2D:0E:A6:44:01:36:6B:16
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/WfEws16cTi2Df979LQ6mRAE2axY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.4.0-91.108.11.255
91.108.56.0/22
95.161.64.0/20
149.154.160.0/21
Signature Algorithm: sha256WithRSAEncryption
02:f7:37:4a:7f:c8:83:11:61:92:51:78:76:1d:fe:ff:64:ea:
ce:0e:f7:c7:cd:99:79:0a:e6:4b:24:83:ec:b8:70:f4:75:c4:
21:b0:01:43:12:9d:1e:6f:87:2e:1d:81:21:31:d7:3d:2f:42:
6b:43:d3:cc:1e:d6:9b:c6:f3:1a:f9:89:08:bd:e0:79:ee:9d:
47:f1:45:70:a9:77:95:e1:e7:87:5f:19:b0:f9:a8:37:6c:68:
dc:b3:db:82:09:cc:a2:10:09:fc:e5:0f:ad:d7:2c:63:ac:7f:
db:b4:19:19:b7:80:85:ad:b2:d9:0d:d7:3c:dc:1d:2c:64:cc:
32:e2:0a:77:8e:b5:3e:fe:b1:d3:01:2e:22:73:c5:6e:f1:fe:
49:30:ca:52:3c:e8:03:6f:87:ae:98:ff:81:74:ed:6e:82:7e:
fa:8b:d9:d2:c6:84:31:f1:25:64:6a:3c:1b:3f:d5:ac:9f:0f:
d6:0a:69:f3:ad:40:12:02:cd:4d:84:d1:62:c4:f0:0a:1f:36:
e6:75:5f:b0:6f:e8:fb:c6:a8:ae:54:4f:14:ec:ae:09:20:92:
58:5f:03:ac:2a:96:1b:8b:c0:a4:6e:af:be:19:db:4d:78:ce:
91:83:d8:6f:a5:8c:c9:43:9b:d1:29:ef:a4:f5:44:a3:0f:80:
60:38:f7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:01:18 2025 by rpki-client