Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/W_w_aPZvJbU42Kz9V0NRmPtHDis.roa
File: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (raw, json)
Hash identifier: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=
Subject key identifier: 5B:FC:3F:68:F6:6F:25:B5:38:D8:AC:FD:57:43:51:98:FB:47:0E:2B
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 0194228DF68DE11043AF1EDC6B6E6422ADC2
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/W_w_aPZvJbU42Kz9V0NRmPtHDis.roa
Signing time: Wed 01 Jan 2025 15:48:36 +0000
ROA not before: Wed 01 Jan 2025 15:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50912
IP address blocks: 91.216.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f6:8d:e1:10:43:af:1e:dc:6b:6e:64:22:ad:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Jan 1 15:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bfc3f68f66f25b538d8acfd57435198fb470e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:fa:36:8e:5b:ca:12:83:9f:f3:9c:d7:98:
d7:3f:1e:83:3a:05:e5:f0:25:04:91:3b:73:4c:5d:
46:22:7f:22:0c:1b:8e:ee:6b:46:d5:ef:e8:09:f5:
d3:d6:89:ce:9d:a4:6d:55:21:87:15:34:4d:a5:89:
f2:3b:3f:9d:50:7a:ff:f1:f3:2c:17:30:cb:f8:d2:
73:d6:1a:58:ac:90:9e:50:89:d2:93:80:35:21:89:
d6:5b:0a:cc:1f:db:be:dd:76:e6:56:88:db:59:4b:
35:6b:ce:04:0d:67:fb:89:21:8a:ca:dc:a3:43:c5:
e7:13:98:24:3c:a2:77:5d:2f:0d:ea:e9:93:09:44:
91:b8:e5:ac:cf:82:21:99:3d:81:fb:25:65:84:9b:
88:94:60:39:30:83:9a:66:5f:e9:23:35:6c:5d:3e:
81:0f:a6:78:d8:6e:81:f1:e4:8a:19:f9:49:44:5a:
ce:3b:1f:8d:49:a5:0e:3c:c4:eb:55:04:b2:93:1b:
4f:dd:da:87:a4:3b:ee:2d:74:56:de:7b:85:f0:4a:
bc:0e:6b:8d:0d:34:d4:64:80:3b:8b:54:a6:4b:be:
25:80:0b:eb:15:69:db:02:03:70:cc:3d:8b:0a:46:
ba:c1:53:ee:7c:e6:af:e6:fb:86:2b:7e:70:c4:8d:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FC:3F:68:F6:6F:25:B5:38:D8:AC:FD:57:43:51:98:FB:47:0E:2B
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/W_w_aPZvJbU42Kz9V0NRmPtHDis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.27.0/24
Signature Algorithm: sha256WithRSAEncryption
14:dd:d0:b9:52:80:48:08:0d:23:29:d2:1a:d3:bc:3a:fe:71:
85:80:84:89:6b:7f:c8:c6:7b:6e:9b:54:2f:9e:04:94:0a:ef:
a9:42:db:58:67:24:ac:05:7e:c4:15:95:a1:42:4e:5e:64:ab:
c7:e7:9c:14:ef:90:41:59:2f:e0:45:99:da:c3:63:cb:db:43:
6b:17:51:a7:97:db:1c:df:23:f3:04:c4:28:4a:cf:ac:f4:5d:
1a:4a:87:02:1e:d3:65:c4:0a:5d:9f:9f:8e:8d:c0:cb:4c:d8:
91:c1:3c:be:7c:b2:c3:ef:18:36:79:5f:b4:c2:63:00:be:4b:
7d:5c:45:7e:6c:bb:b0:df:f4:61:6a:ce:0d:3a:49:41:89:94:
a3:2a:03:72:66:f5:92:5c:49:be:f2:97:0e:f2:f0:ed:36:da:
56:a0:82:cc:06:ec:b2:16:a1:18:0d:e9:57:2b:82:ca:90:f8:
f2:14:fd:de:59:b4:ea:48:70:db:b5:52:18:39:5f:a9:71:ae:
78:b7:01:35:58:81:02:50:b3:64:53:6c:51:6f:66:83:4b:56:
55:d6:73:19:e4:dc:4e:5e:fc:45:62:63:ac:dd:5c:e1:b8:bb:
6c:9e:6d:97:28:8b:d0:0d:4b:43:7e:6e:58:95:91:48:7c:1d:
b3:aa:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:20:59 2025 by rpki-client