Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/WEJghusKIKSFibkCzqHCeJYzUzA.roa
File: WEJghusKIKSFibkCzqHCeJYzUzA.roa (raw, json)
Hash identifier: OzzJ4qVi0bEqkT53q5LfwPnutGydp+ntCXtobu4buTA=
Subject key identifier: 58:42:60:86:EB:0A:20:A4:85:89:B9:02:CE:A1:C2:78:96:33:53:30
Certificate issuer: /CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Certificate serial: 0194244536FAA3B2168EAACBF4E4D014A5C0
Authority key identifier: 61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/WEJghusKIKSFibkCzqHCeJYzUzA.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59790
IP address blocks: 45.141.252.0/22 maxlen: 22
185.104.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:36:fa:a3:b2:16:8e:aa:cb:f4:e4:d0:14:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b7202c9230c289450ed5a62b17369a0659bc6b
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58426086eb0a20a48589b902cea1c27896335330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:30:6f:c9:bb:83:6a:2e:74:f0:0a:f5:8b:
e4:69:2a:1f:52:b4:81:76:37:b9:22:d2:27:b9:df:
ad:f3:39:24:b8:3c:c6:70:a3:60:d2:d2:2c:70:26:
83:d3:47:fe:2a:4f:68:3a:fa:ac:6e:14:99:c1:e1:
bf:2c:ad:45:b1:00:2c:c0:83:a4:92:4b:15:7e:88:
19:a9:16:a3:4a:76:e6:2d:1e:89:99:75:85:b5:83:
55:77:39:d0:6f:88:9e:f1:58:f8:ea:8b:a9:f1:1d:
4c:2f:9b:a7:9e:50:44:a1:12:73:1a:7a:28:80:65:
1f:70:6b:87:4b:29:f8:8c:d0:8c:ff:b8:fa:d8:e8:
b1:fc:1a:4e:30:7c:fb:8d:64:49:0b:ba:f6:84:37:
2f:78:10:c6:aa:9d:e7:5a:c4:45:d5:7e:80:98:11:
c7:cd:b4:3e:6f:e6:21:b0:d3:46:f4:57:50:02:7c:
fc:a0:d7:c1:49:84:20:46:52:4f:71:63:44:d0:a5:
ea:fe:93:48:39:cd:21:68:07:de:f5:80:67:58:2b:
1a:bb:7b:69:ac:c6:34:9d:9f:4e:82:e0:b7:4e:a0:
ef:25:9b:44:f0:f9:d8:92:7f:7b:3d:0b:e7:65:99:
cd:3c:49:4d:91:14:a1:e7:32:10:a8:0c:71:7c:5f:
5a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:42:60:86:EB:0A:20:A4:85:89:B9:02:CE:A1:C2:78:96:33:53:30
X509v3 Authority Key Identifier:
keyid:61:B7:20:2C:92:30:C2:89:45:0E:D5:A6:2B:17:36:9A:06:59:BC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbcgLJIwwolFDtWmKxc2mgZZvGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/WEJghusKIKSFibkCzqHCeJYzUzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/61d42d-3b48-468e-9ad9-215fc390bfe4/1/YbcgLJIwwolFDtWmKxc2mgZZvGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.252.0/22
185.104.40.0/22
Signature Algorithm: sha256WithRSAEncryption
03:7d:d7:b9:f8:11:68:a8:50:b8:34:64:14:70:91:d9:86:09:
a5:de:f6:9f:71:a6:84:be:f5:86:f5:0b:c3:65:0d:c5:c2:f5:
35:18:4e:a6:85:92:f9:5b:1d:22:48:95:1c:b4:fd:f2:b5:75:
2d:f8:98:19:3c:2f:b5:d6:ee:ac:b0:6f:6c:83:0d:7c:59:52:
76:32:b7:67:19:ff:53:15:78:4b:e3:fa:21:bf:03:c8:65:3e:
60:83:07:1a:a7:13:f5:6c:5a:c2:a0:8f:a5:3c:fb:b9:fe:e6:
3b:e7:2f:84:6c:89:7b:bd:38:69:d8:89:08:18:89:65:d7:4a:
52:fc:9e:30:a4:26:33:b5:f9:67:f7:48:58:cf:fa:18:31:3c:
6d:64:04:62:c2:01:49:e9:b5:ae:47:ef:54:f1:ab:8f:af:05:
f5:51:d1:66:2c:49:91:53:fd:4f:57:27:d3:e0:86:cc:a4:ad:
22:ca:44:5a:45:21:ec:ce:8a:7a:7d:5a:67:18:4f:73:79:c2:
36:5b:7d:43:89:81:18:56:2d:5b:17:bd:51:47:a9:1e:88:6d:
bc:ab:c3:35:b1:2f:61:3d:c3:7f:70:66:a4:03:ab:c6:db:d3:
33:18:fe:56:69:5c:c3:cf:24:fa:e8:7a:a8:e2:93:41:21:eb:
80:8a:f5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:38 2025 by rpki-client