Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/wGzcUkf9TrX4X1TKP2pudnSOrpY.roa
File: wGzcUkf9TrX4X1TKP2pudnSOrpY.roa (raw, json)
Hash identifier: 213aWrKEIvcLJfIVltuh4GjeKhwAlQ7vRwl6MLXTT98=
Subject key identifier: C0:6C:DC:52:47:FD:4E:B5:F8:5F:54:CA:3F:6A:6E:76:74:8E:AE:96
Certificate issuer: /CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Certificate serial: 0194228DF434A0AF599871A292F2E09A1B8C
Authority key identifier: D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/wGzcUkf9TrX4X1TKP2pudnSOrpY.roa
Signing time: Wed 01 Jan 2025 15:48:35 +0000
ROA not before: Wed 01 Jan 2025 15:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209014
IP address blocks: 91.196.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:f4:34:a0:af:59:98:71:a2:92:f2:e0:9a:1b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5ee40f4589d6a11b24f7bbcc29ab9f9ae689719
Validity
Not Before: Jan 1 15:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c06cdc5247fd4eb5f85f54ca3f6a6e76748eae96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:9c:70:1c:00:4b:f5:54:49:9e:55:f3:b7:
0b:a8:41:f4:fc:2f:8c:f0:d3:c7:37:cd:6d:ac:08:
59:80:b9:4c:e7:2a:76:51:e7:b0:44:16:b5:92:0b:
57:40:33:af:ea:ed:20:22:2a:e2:e9:48:c3:74:d8:
3c:e8:4e:12:55:af:22:55:6e:8d:43:f4:55:90:4a:
da:89:20:48:5b:65:8e:fd:88:3f:a9:b8:c7:dd:b1:
ea:71:43:bc:87:be:2f:b2:81:34:b7:36:8c:b6:4d:
f5:ff:b9:24:cb:9b:0f:73:c2:05:2b:0a:73:ec:dc:
55:99:05:5e:e7:43:fe:77:4d:f7:c1:36:76:20:a5:
fd:1c:21:7b:9d:e6:54:ca:85:81:42:f7:ba:d2:33:
25:78:3b:92:cd:b4:86:d0:12:a0:6f:1c:0a:28:71:
d5:20:f0:a0:6b:77:d9:16:bf:39:ca:f1:d1:4e:b6:
d3:65:06:2b:4c:67:f1:2c:89:01:cb:29:38:b4:f3:
2d:bb:4c:3a:4a:4b:15:9f:cc:ba:a8:a1:e1:01:52:
f4:eb:65:dd:8c:4a:76:83:0e:f6:2b:95:a3:df:24:
bf:a8:8f:a0:e6:15:05:a9:97:a5:2e:46:5f:cb:53:
1f:5b:df:42:76:2a:31:a0:0a:42:c6:cd:91:a7:30:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:6C:DC:52:47:FD:4E:B5:F8:5F:54:CA:3F:6A:6E:76:74:8E:AE:96
X509v3 Authority Key Identifier:
keyid:D5:EE:40:F4:58:9D:6A:11:B2:4F:7B:BC:C2:9A:B9:F9:AE:68:97:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e5A9FidahGyT3u8wpq5-a5olxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/wGzcUkf9TrX4X1TKP2pudnSOrpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8c1306-7805-417d-be63-9ea2a6fb6a81/1/1e5A9FidahGyT3u8wpq5-a5olxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.155.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f9:32:9c:a1:04:ae:23:c1:29:51:32:2c:91:bf:e2:39:29:
09:fe:24:fc:e6:99:e1:54:6e:5f:ca:48:b7:3a:d3:55:cc:c1:
ff:ee:ad:b0:44:4b:e8:67:c5:e6:50:2b:18:72:e6:06:19:3c:
c5:72:cb:97:11:bb:c3:fc:8e:8c:d0:c2:a7:8d:b5:6d:af:b2:
5a:de:41:e7:bf:6a:7f:70:51:63:a7:c4:3d:0c:99:0c:37:04:
05:23:41:1b:e7:86:88:be:ae:13:4f:26:00:5d:4c:cc:cf:bb:
e2:d2:d7:ea:15:56:4c:26:70:dd:af:6a:0e:02:32:07:67:e5:
d0:65:4e:ba:78:49:40:80:79:e9:fb:6e:10:83:87:d6:51:83:
2c:72:7c:76:6f:fc:63:36:d9:2e:a5:15:c4:27:88:47:3c:79:
d1:02:13:0a:a9:2c:94:87:57:be:5d:49:af:11:0c:d8:22:7e:
85:be:32:4a:7e:a2:4c:bb:35:82:1b:ef:cc:87:6e:4d:c7:08:
13:95:8a:6a:ca:30:11:48:e8:48:8e:70:b0:a6:02:4b:02:0d:
fe:62:38:91:0c:5b:9f:c6:0a:60:a5:b7:3e:16:7c:92:16:26:
2f:3c:e4:3d:9c:a4:7d:77:9b:c6:5b:67:b2:2a:5c:47:89:b2:
e0:d4:05:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:08:28 2025 by rpki-client