Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/WMhbwojz363aPcIT4pKLzOiKIQA.roa
File: WMhbwojz363aPcIT4pKLzOiKIQA.roa (raw, json)
Hash identifier: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=
Subject key identifier: 58:C8:5B:C2:88:F3:DF:AD:DA:3D:C2:13:E2:92:8B:CC:E8:8A:21:00
Certificate issuer: /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial: 0194244496CCE49849E767754EB5BE67D95A
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/WMhbwojz363aPcIT4pKLzOiKIQA.roa
Signing time: Wed 01 Jan 2025 23:47:42 +0000
ROA not before: Wed 01 Jan 2025 23:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57659
IP address blocks: 176.104.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:96:cc:e4:98:49:e7:67:75:4e:b5:be:67:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
Validity
Not Before: Jan 1 23:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58c85bc288f3dfadda3dc213e2928bcce88a2100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:83:89:df:9d:88:85:ea:26:66:32:50:17:18:
fc:22:69:b7:0c:a8:af:a5:42:e1:73:58:02:c0:a1:
34:02:b4:f6:b6:15:23:19:ca:2b:13:d3:c7:0b:8a:
f8:84:34:43:b1:ef:bd:23:74:b4:74:d8:f9:66:00:
d7:2a:3d:28:d8:66:00:6e:d8:49:bb:17:d6:89:dd:
5a:f2:3e:cd:14:dc:45:20:cf:b5:22:f7:ef:b3:95:
bb:1e:df:38:29:a0:80:9a:a3:2f:d8:11:47:98:fe:
cb:c7:f6:89:f8:e0:58:2a:3d:4f:07:d4:a6:41:fc:
dc:38:72:a4:01:bb:7a:df:e5:f5:b4:0f:c5:5d:04:
ee:fa:97:55:8d:35:22:c1:42:c3:ed:0a:3f:c0:24:
b2:b7:46:3c:8e:69:44:a4:be:bc:ac:e6:ba:ae:52:
dc:3f:0f:14:21:23:e7:3e:d8:1c:13:e2:c3:28:83:
90:f2:ce:88:97:2f:45:0f:ad:30:09:b4:53:61:3c:
70:2e:eb:73:32:f3:81:25:21:88:26:8a:50:5c:67:
5b:02:73:31:df:a8:2b:35:7f:f0:05:18:6c:92:a1:
43:1a:8a:3f:87:35:b1:c5:ea:b5:7b:22:6d:8f:56:
87:3a:0e:78:dd:bb:7d:94:f7:06:f2:94:4f:b5:15:
ba:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C8:5B:C2:88:F3:DF:AD:DA:3D:C2:13:E2:92:8B:CC:E8:8A:21:00
X509v3 Authority Key Identifier:
keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/WMhbwojz363aPcIT4pKLzOiKIQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.104.168.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:5b:75:6f:b5:8b:0f:78:c8:c6:9b:62:65:ba:77:ab:e7:34:
3b:4c:3f:2d:38:ba:fc:66:b0:4d:63:f4:6b:3d:30:98:29:86:
b0:c3:5c:05:6e:33:72:7f:d0:f5:06:ea:84:c0:f0:c6:87:21:
3f:69:98:15:5e:f1:8e:9d:98:0b:34:c7:2b:60:c7:a9:c3:ed:
bc:98:42:dc:23:77:f3:89:e2:4a:6c:80:f9:cd:89:96:4b:8b:
50:d8:a7:bb:79:c6:7e:0d:2f:53:db:7c:ea:5b:d3:22:43:d2:
d3:49:6c:12:27:64:16:08:e4:fd:07:c5:54:29:d6:e7:4c:22:
a4:9b:ee:35:63:81:b3:05:91:3c:92:af:b0:10:58:c9:ed:30:
b1:ab:c0:e4:af:ce:6d:79:fb:30:5a:ac:74:95:95:e1:fd:e4:
cf:7e:cf:59:c0:b1:a1:bb:f1:a4:12:10:fd:0e:f6:e4:cb:50:
21:0c:0e:7a:42:0c:74:6c:71:f0:5b:95:72:0e:a0:58:59:6d:
05:23:2f:b2:3a:5c:80:25:e1:11:4a:db:f1:e2:3a:36:16:9f:
f0:96:75:55:a8:e1:25:4e:11:6c:15:bb:87:2b:7c:fd:7a:bf:
b6:15:7a:3e:77:90:55:df:17:89:39:50:11:ef:44:2f:c5:ee:
b9:31:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:01:41 2025 by rpki-client