Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/WsuMLx8hOYo9zbhOH79qMxC9w1o.roa
File: WsuMLx8hOYo9zbhOH79qMxC9w1o.roa (raw, json)
Hash identifier: cB8DG/oK3A/ZTuFz/7P7kYL4Kctl8w+rRh6Gw20a3lg=
Subject key identifier: 5A:CB:8C:2F:1F:21:39:8A:3D:CD:B8:4E:1F:BF:6A:33:10:BD:C3:5A
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 0194221FE2671157398EE95AC40F43BF8312
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/WsuMLx8hOYo9zbhOH79qMxC9w1o.roa
Signing time: Wed 01 Jan 2025 13:48:22 +0000
ROA not before: Wed 01 Jan 2025 13:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8787
IP address blocks: 212.9.128.0/19 maxlen: 19
2a03:1f60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e2:67:11:57:39:8e:e9:5a:c4:0f:43:bf:83:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5acb8c2f1f21398a3dcdb84e1fbf6a3310bdc35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:5a:1c:b7:89:bc:1a:a1:e0:ae:06:ee:f3:
e2:84:60:d1:70:89:59:f3:9f:fb:b8:d4:4d:ee:bb:
3b:e0:d9:c6:43:d9:91:f2:be:ae:94:48:00:a5:18:
2b:a6:26:6e:04:cd:ac:d4:6e:cf:2f:02:96:6f:42:
22:70:91:cb:f6:5c:8e:5d:8a:c7:6b:62:a7:20:60:
98:9a:a3:20:39:3e:f6:6b:31:e8:45:c2:c4:57:50:
53:86:fe:48:a9:06:f3:81:5a:b2:6c:76:9f:e6:0f:
40:80:41:d1:8f:d8:8a:2a:06:0b:b3:ed:a9:45:2e:
95:be:4b:3f:71:e0:21:3c:8b:7d:4e:57:b2:b2:9a:
72:57:49:d8:b1:35:dd:d2:6f:1b:5c:1b:84:52:73:
7f:0d:9b:d5:be:01:15:91:f7:b4:dc:1f:35:dd:4e:
44:1e:fc:b2:72:d1:c7:02:9b:18:e8:01:24:ec:51:
85:39:a2:b5:e6:c0:46:aa:87:a8:3f:bd:78:b2:13:
83:e2:35:c9:88:97:b7:38:79:8c:7e:7c:8f:9f:6d:
a1:66:62:6a:db:0b:72:21:06:c1:a5:61:00:54:8b:
06:82:f0:46:43:1a:40:44:78:d9:87:50:8b:2b:81:
a0:8c:ab:6e:d2:ed:47:d8:68:f8:fa:d2:4b:29:5e:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:8C:2F:1F:21:39:8A:3D:CD:B8:4E:1F:BF:6A:33:10:BD:C3:5A
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/WsuMLx8hOYo9zbhOH79qMxC9w1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.9.128.0/19
IPv6:
2a03:1f60::/32
Signature Algorithm: sha256WithRSAEncryption
b5:58:48:5c:6d:0d:7e:55:4d:30:ac:93:2c:e9:fd:58:63:9c:
56:55:80:7d:d2:00:af:52:74:5b:b4:73:8d:7b:b0:31:8b:93:
37:17:a2:3b:d4:61:9f:05:4c:c3:ae:e9:fe:3c:cb:10:3e:c2:
da:1f:4f:da:94:f8:c8:90:66:09:2d:0c:ea:5f:68:83:2f:58:
ed:dd:78:5e:a4:a6:bb:5b:eb:e9:5e:e1:e4:c8:e1:5a:1c:5f:
12:76:b6:0c:b5:66:46:88:1e:ed:a0:80:27:2e:6c:15:3e:c5:
a9:21:c0:7e:50:ed:9a:89:0b:19:67:33:c1:76:ae:40:a5:e6:
37:87:a9:07:f3:8a:ab:50:36:04:f2:4a:9b:00:59:60:fa:8f:
1d:a4:6c:a7:7d:1b:ab:fa:e5:64:fb:c6:00:17:cb:d6:67:83:
dd:79:e3:97:8b:7c:29:8b:a2:d6:61:55:3a:5e:54:a9:42:8b:
c6:23:37:e7:fb:5a:6d:23:2e:47:1d:ae:3c:38:1f:9a:b0:42:
1c:74:55:e4:c9:ba:aa:ff:9a:47:b6:12:48:b7:de:42:22:ea:
0d:51:6b:93:e0:f9:de:21:ab:b0:88:e9:fe:21:07:26:85:bb:
10:e5:e0:8d:15:7b:c0:c4:56:01:e0:d2:53:52:d0:10:4c:20:
1e:15:ec:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:14 2025 by rpki-client