Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/wIL-REFz4DYY-rRWvHtgF8VAa9w.roa
File: wIL-REFz4DYY-rRWvHtgF8VAa9w.roa (raw, json)
Hash identifier: 0FFPo6/uMpZSHo3dFvbnUBqikS2pyiKoisgVQpgN98I=
Subject key identifier: C0:82:FE:44:41:73:E0:36:18:FA:B4:56:BC:7B:60:17:C5:40:6B:DC
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 01942143B4268C020F248BD60B3DA1090842
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/wIL-REFz4DYY-rRWvHtgF8VAa9w.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47168
IP address blocks: 46.31.67.0/24 maxlen: 24
92.255.73.0/24 maxlen: 24
92.255.74.0/23 maxlen: 23
92.255.74.0/24 maxlen: 24
92.255.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b4:26:8c:02:0f:24:8b:d6:0b:3d:a1:09:08:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c082fe444173e03618fab456bc7b6017c5406bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:8a:f8:62:9f:ac:4d:ad:e6:71:c5:51:ba:
d5:81:20:9c:48:ff:e5:3d:77:29:d3:13:7f:6d:d2:
3c:fd:ea:a2:b4:34:09:1a:20:ea:e6:10:2e:55:fb:
3d:fc:1d:b1:2a:e2:be:54:b9:b2:a9:52:50:5f:41:
e1:fc:90:e2:65:9e:a0:f7:b4:12:37:a1:d4:52:b4:
ac:42:f6:84:4e:f8:1a:97:1a:f9:1a:cd:4c:52:ac:
d7:b6:ed:8e:da:b2:ee:3d:49:f5:cb:58:ef:56:4c:
99:8d:56:dd:ab:4f:0e:a3:00:18:bf:cf:4d:d4:27:
aa:cf:a6:d8:f2:53:8e:c9:71:9a:b3:e3:88:3d:50:
88:1c:79:9f:99:91:0a:a9:c6:58:e7:91:b7:1c:36:
69:2c:ce:dc:ff:f2:8d:02:1a:fe:0e:64:26:24:f5:
d1:04:07:0d:68:be:6b:9e:7d:60:54:f8:17:14:7e:
f0:5d:ca:20:68:91:1d:1c:3a:11:f7:e5:11:49:de:
a0:6a:75:2e:0d:f4:bb:50:88:0b:b5:e0:9d:fa:fb:
a2:ee:4d:3b:fb:62:8d:4c:c8:6b:e4:23:22:0f:99:
9d:2c:11:70:f6:8d:c4:36:a6:11:26:77:e3:fc:4f:
c9:5b:ae:24:85:87:65:b0:9a:63:d6:b8:40:f5:dc:
cd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:82:FE:44:41:73:E0:36:18:FA:B4:56:BC:7B:60:17:C5:40:6B:DC
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/wIL-REFz4DYY-rRWvHtgF8VAa9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.67.0/24
92.255.73.0-92.255.75.255
Signature Algorithm: sha256WithRSAEncryption
3a:32:fb:4e:0e:e6:18:b7:2c:2d:dc:a9:6b:65:e0:ea:b6:4c:
5e:d0:f2:f3:5b:da:c9:eb:51:b6:08:a1:28:8d:a6:f6:cf:2b:
3a:4b:5b:b4:57:06:b2:4c:5c:52:e6:c5:68:49:f9:90:82:55:
27:07:76:78:1e:8b:89:f5:09:13:c4:eb:61:3c:70:8c:ef:e5:
5d:4f:e4:0b:da:4c:c6:7b:41:ae:19:13:17:1d:bf:03:55:8f:
6e:ab:04:ba:0b:9a:b0:39:f2:a1:94:86:b4:bd:51:91:62:0d:
e1:d7:81:94:47:93:eb:b1:f7:a3:de:ea:6f:c6:ae:3f:80:ca:
ae:0f:ff:f1:b1:e3:58:be:cc:ed:35:6c:cf:b9:b8:54:6d:d8:
e4:36:c6:a5:bb:87:e5:a0:26:24:3d:c7:0b:11:f4:b9:45:c8:
04:8c:90:9e:56:02:8a:87:99:54:d2:f2:f2:81:46:01:a6:eb:
75:e8:dc:2f:6f:e8:e6:33:20:55:36:8a:dc:32:da:80:dd:67:
50:e6:0e:be:74:43:7d:bf:3a:3e:df:44:fb:a6:59:e6:74:4d:
ad:9f:da:d2:0e:a6:cd:d8:3f:ee:44:6b:e3:27:b9:cc:c0:43:
1e:99:44:51:2a:8d:31:34:a1:5b:84:c2:30:b0:38:d7:4f:bd:
f3:83:be:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:33 2025 by rpki-client