Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/WNeWcYI--FrvgqVvkbFu12LIaYA.roa
File: WNeWcYI--FrvgqVvkbFu12LIaYA.roa (raw, json)
Hash identifier: k8USa1JcWCZakgNPmvbG30Z+DpfHdvNnOH9UZ98bnDg=
Subject key identifier: 58:D7:96:71:82:3E:F8:5A:EF:82:A5:6F:91:B1:6E:D7:62:C8:69:80
Certificate issuer: /CN=512e27be891b19eca9bceb53e4dc237c5a355697
Certificate serial: 019426D8CFB97C0429842D4CDF822F346777
Authority key identifier: 51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/WNeWcYI--FrvgqVvkbFu12LIaYA.roa
Signing time: Thu 02 Jan 2025 11:48:50 +0000
ROA not before: Thu 02 Jan 2025 11:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48772
IP address blocks: 91.223.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:cf:b9:7c:04:29:84:2d:4c:df:82:2f:34:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=512e27be891b19eca9bceb53e4dc237c5a355697
Validity
Not Before: Jan 2 11:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58d79671823ef85aef82a56f91b16ed762c86980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f6:34:6c:0d:73:2b:97:68:32:36:9d:5a:db:
ff:17:0b:fb:97:e5:c8:b6:53:31:ce:3b:b3:b7:40:
0c:3f:be:0e:d8:66:46:4b:27:51:e5:b7:37:33:04:
a6:e1:aa:2d:a1:5e:39:ea:e2:7d:3a:6c:29:e1:2f:
cb:02:3f:8c:08:e9:cf:20:cd:ef:79:46:b5:ff:eb:
2b:51:60:02:83:8c:b6:15:f7:c8:9e:6d:f1:53:3c:
50:7f:30:86:5a:8c:68:ae:be:f3:71:e9:fc:8d:9e:
60:c5:df:00:a6:70:bc:cf:bd:08:a6:51:fd:74:53:
39:f8:2d:bf:08:c4:df:06:95:65:72:d5:00:9b:2f:
8e:ed:64:e0:90:2c:af:6c:74:e1:1e:2a:9a:01:98:
64:b3:e2:6e:8a:81:51:c5:91:04:f7:8d:39:ec:d2:
64:70:9a:5e:dd:e6:90:b5:1c:77:7f:60:3c:cd:b0:
d2:ff:1a:ec:32:a3:28:d7:70:93:b4:fa:ea:5d:0a:
ef:9b:21:27:19:2b:56:20:00:73:fd:c5:63:2d:d5:
32:44:50:ce:aa:67:b2:91:28:82:2b:c2:af:c9:9d:
88:99:a9:fb:5e:9f:2f:24:31:d8:d6:e4:bf:8b:fd:
e8:e0:b1:16:00:3e:e8:61:a9:33:92:37:2c:04:77:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:96:71:82:3E:F8:5A:EF:82:A5:6F:91:B1:6E:D7:62:C8:69:80
X509v3 Authority Key Identifier:
keyid:51:2E:27:BE:89:1B:19:EC:A9:BC:EB:53:E4:DC:23:7C:5A:35:56:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/US4nvokbGeypvOtT5NwjfFo1Vpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/WNeWcYI--FrvgqVvkbFu12LIaYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0f1b8f-1d47-42f0-a050-5a114ef9b2aa/1/US4nvokbGeypvOtT5NwjfFo1Vpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1e:98:01:aa:b6:02:3f:5c:7f:84:6d:f3:a2:f5:0d:08:ed:
9f:46:8f:44:50:02:ed:dd:00:54:1e:56:06:aa:10:b7:49:57:
fa:de:c5:cb:64:24:0d:fb:0a:4d:57:e7:c8:79:9f:12:a1:d5:
79:aa:1e:49:bb:24:6d:b8:9d:b1:07:10:7e:70:6f:da:c9:76:
65:10:29:88:bd:b3:7f:01:a2:86:7b:b2:5e:32:4b:b2:09:fc:
d9:20:22:eb:86:0b:2f:f4:b9:a5:96:4c:a5:03:d8:8c:ad:e0:
85:49:1e:be:41:f5:5e:00:fe:c2:6d:26:11:e3:9c:93:a7:67:
df:c0:e5:2b:5b:28:73:c1:3f:d5:28:2b:c4:79:56:f8:eb:81:
77:f0:33:d9:c5:1e:01:8e:56:0f:26:57:77:4a:28:b9:c2:a7:
de:77:e8:5c:2e:96:c4:4c:07:b0:d5:7c:30:d5:0d:4e:d5:c5:
f2:67:18:76:bd:d5:fb:4d:c9:a8:0f:90:38:a8:69:5b:19:7f:
35:a2:df:1b:00:f8:f7:1b:02:fd:e5:75:75:43:99:7b:2f:70:
e9:e1:73:c2:8a:f3:5e:75:93:c3:2f:da:99:1f:ab:36:ac:07:
33:ed:75:a9:e2:f0:17:41:98:0e:c4:c5:74:b3:f2:e4:62:ad:
fa:e2:16:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:24:40 2025 by rpki-client