Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/wsmN0GUZsWjC_T-MselV4vkxQWc.roa
File: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (raw, json)
Hash identifier: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=
Subject key identifier: C2:C9:8D:D0:65:19:B1:68:C2:FD:3F:8C:B1:E9:55:E2:F9:31:41:67
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 019422FBBCE0FDFC9BE05BE0E0333B1A3429
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/wsmN0GUZsWjC_T-MselV4vkxQWc.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43674
IP address blocks: 91.239.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bc:e0:fd:fc:9b:e0:5b:e0:e0:33:3b:1a:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c98dd06519b168c2fd3f8cb1e955e2f9314167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:8f:ae:3e:4e:ac:1b:5f:6c:26:ae:ee:b3:
8e:6a:02:09:0c:34:28:56:79:af:60:72:43:f1:25:
ce:bb:72:ce:58:06:71:60:b9:7f:7f:c8:4d:72:62:
96:21:2e:84:7c:2c:8e:2f:c8:4e:64:cf:a6:6c:e2:
0a:d7:6c:4d:c0:dd:1f:10:26:5f:e8:f3:e5:e0:fb:
b2:f4:ef:ea:bc:e9:44:37:90:65:d0:93:bc:ce:d5:
4b:b4:c5:72:e3:68:2d:9f:3a:d4:6b:41:69:c1:01:
63:1f:2e:33:91:a4:72:ac:09:09:74:c8:63:92:5d:
e0:e7:5e:b6:e3:b2:56:44:e1:53:6a:4d:ad:96:57:
3c:b7:41:4b:fd:ed:51:5c:c2:33:f7:6e:da:ec:af:
aa:77:1a:b8:c9:4c:b3:66:3a:02:d8:f5:ce:64:a7:
0b:f9:37:f6:b1:61:ef:df:2d:9d:d2:5a:e1:1e:8a:
6f:fd:c6:a5:ea:d8:07:9b:00:9d:f3:c5:5f:f4:cb:
eb:77:fc:c0:7c:a5:f3:94:2b:ea:3e:2a:ad:f1:d3:
7a:84:6e:de:87:6f:69:8b:4c:94:fb:31:23:b2:23:
e1:4e:6f:cd:46:83:a4:2b:a6:d8:ad:cc:88:ac:43:
66:25:28:bc:07:00:5f:6a:c0:4a:64:ce:07:58:6f:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C9:8D:D0:65:19:B1:68:C2:FD:3F:8C:B1:E9:55:E2:F9:31:41:67
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/wsmN0GUZsWjC_T-MselV4vkxQWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c7:9a:d4:6e:bb:3e:e9:8f:8f:3d:bb:7d:c4:a6:85:d2:e6:
5d:7d:62:2f:ff:81:83:30:96:7d:75:43:53:a7:5e:95:f3:65:
d8:f8:d4:b4:bf:7f:54:7a:91:8f:d5:8d:a8:65:c5:49:1a:15:
0a:61:96:da:9d:1e:92:46:3a:27:96:90:7b:6b:3c:d2:54:e6:
30:60:fa:e6:7c:e8:8d:f2:c3:6a:a3:95:c0:ec:df:65:6a:7b:
4c:28:53:cb:92:fd:bd:09:a4:87:07:ed:f4:1e:01:0c:14:32:
55:2c:9f:9c:65:92:df:a8:6d:d8:59:a7:1e:a1:14:d6:dd:b9:
5d:ea:a7:45:69:6b:cc:2f:c7:19:6f:d8:67:89:76:69:e7:e5:
1f:f2:20:e9:1a:eb:b6:1a:5b:ea:2c:5e:3d:e8:b0:98:c1:77:
5d:d0:6c:7b:ed:57:35:5d:cb:13:f7:15:ea:03:2c:b9:6e:3d:
7c:7c:09:65:8e:84:f3:4f:ae:47:2b:6e:fb:5e:cf:43:59:81:
09:8f:91:97:b9:5d:3e:04:7c:b6:24:4e:e4:ce:91:70:d2:c2:
ba:3e:8c:a3:9a:42:ae:60:43:56:9c:3d:a5:b5:18:21:1c:2c:
c2:02:8a:8a:67:ba:20:e4:b7:eb:67:18:ab:49:05:40:45:5b:
c3:28:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:33:20 2025 by rpki-client