Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WkmV1C3n1xckvk24Dg23f_uuw-Y.roa
File: WkmV1C3n1xckvk24Dg23f_uuw-Y.roa (raw, json)
Hash identifier: 4b9CQ+UDGsSD1Yt4Z/0/FrLqdoM9ExyMXp455k6OTOo=
Subject key identifier: 5A:49:95:D4:2D:E7:D7:17:24:BE:4D:B8:0E:0D:B7:7F:FB:AE:C3:E6
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1CCE8C0074A9BC534DE04DB3B31D0
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WkmV1C3n1xckvk24Dg23f_uuw-Y.roa
Signing time: Wed 01 Jan 2025 11:48:07 +0000
ROA not before: Wed 01 Jan 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5513
IP address blocks: 212.51.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cc:e8:c0:07:4a:9b:c5:34:de:04:db:3b:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a4995d42de7d71724be4db80e0db77ffbaec3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:f8:8e:f2:7e:b4:d6:dd:fe:2a:e4:2b:2d:
bd:07:e7:cc:61:24:e2:91:63:ae:0d:8d:cf:89:e0:
86:55:41:92:f4:13:33:66:04:63:da:3f:2f:ed:a4:
d4:72:0a:b9:8e:d3:e0:0d:7a:4c:d0:f0:ad:1d:c5:
d9:3a:ec:81:ed:aa:cd:d6:3a:3d:32:c7:79:45:7b:
e1:e4:c6:65:7c:cf:1e:a1:92:ab:05:5d:52:05:f1:
2e:3c:0c:c4:7f:ef:07:41:79:87:90:6f:da:e7:6f:
4d:ed:ed:fd:c0:e0:6f:d7:49:68:16:91:81:58:80:
2d:b9:6e:68:e9:d7:ba:a2:7a:89:98:30:9a:94:87:
0d:80:c7:2a:29:65:be:f4:6e:a3:c1:fb:88:14:06:
82:ee:35:98:5b:b3:c8:49:1e:7c:35:57:40:80:2c:
5c:77:0c:60:eb:74:d2:5f:b9:39:61:55:78:0e:80:
66:9d:8d:b9:fa:d1:1a:3a:e7:58:f1:0d:6a:ae:ca:
08:15:86:2a:2d:89:ee:26:f4:94:d0:51:dd:86:fb:
da:b9:58:d0:d2:1e:88:2d:ec:92:9e:85:b7:3d:5c:
58:84:88:03:40:08:e7:be:97:fe:58:34:32:18:c7:
0b:3f:78:bc:4a:5b:65:bf:3e:38:80:7d:2c:30:aa:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:49:95:D4:2D:E7:D7:17:24:BE:4D:B8:0E:0D:B7:7F:FB:AE:C3:E6
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WkmV1C3n1xckvk24Dg23f_uuw-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.51.64.0/18
Signature Algorithm: sha256WithRSAEncryption
64:87:31:76:7b:20:26:28:03:ca:8d:ba:7a:ad:d9:8a:6c:b2:
c5:ea:19:8d:30:12:5e:16:78:71:3c:d2:78:89:c2:b2:80:32:
78:78:54:5e:82:7b:9a:fb:30:ff:84:ee:8e:e6:eb:6d:71:5b:
d3:e4:34:5b:59:33:a1:cf:b0:66:4e:d2:f4:20:9a:8b:72:b9:
66:ab:9e:6b:b9:15:d4:32:e6:c2:88:36:e1:cf:6d:58:d3:37:
4e:4b:c8:98:fd:36:e6:9f:06:b3:f1:88:fb:08:e6:04:3f:9c:
69:25:cc:fc:65:1c:dc:72:c1:88:d1:db:68:e4:c7:9d:bb:10:
f4:ae:84:f9:51:be:86:69:1e:22:95:9a:3c:87:f3:e7:6f:74:
6a:d3:d5:2e:e2:5e:1e:45:af:68:ad:11:e5:4d:70:7e:cf:a8:
eb:29:0b:66:7c:c8:1c:7f:b5:4d:c6:ff:e9:e6:db:04:47:09:
d0:f8:36:98:1f:cc:38:06:1e:d3:73:83:a2:3a:f2:7a:3e:fb:
ff:49:2a:ac:5c:ae:0a:4e:71:6b:4c:73:86:48:15:bb:9c:3d:
00:c2:9d:59:83:99:70:73:f7:37:78:17:fc:83:5d:ec:91:2f:
00:9e:ee:2e:c2:9b:69:18:5c:5c:93:eb:24:61:db:88:6d:cd:
2a:c0:37:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:24 2025 by rpki-client