Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/Wjj1kpiXhjG0hx-0COqhWnTNOPE.roa
File: Wjj1kpiXhjG0hx-0COqhWnTNOPE.roa (raw, json)
Hash identifier: ey3L2YyJuty8vhFHZZL+WJhzpetLmiA7gejbhsfcpR8=
Subject key identifier: 5A:38:F5:92:98:97:86:31:B4:87:1F:B4:08:EA:A1:5A:74:CD:38:F1
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019426D9DD65063401928CF5223484352588
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/Wjj1kpiXhjG0hx-0COqhWnTNOPE.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212616
IP address blocks: 91.230.48.0/24 maxlen: 24
93.175.32.0/19 maxlen: 24
176.97.214.0/24 maxlen: 24
2a0e:5b00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:dd:65:06:34:01:92:8c:f5:22:34:84:35:25:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a38f59298978631b4871fb408eaa15a74cd38f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:46:a9:3f:81:fd:95:ef:76:83:60:5a:51:
09:d1:58:3e:be:c0:4a:6d:b4:1b:b4:ec:ff:8e:a8:
63:3d:be:14:d5:49:c8:b8:9a:e6:4c:2a:99:ea:85:
89:b8:8d:eb:47:bf:45:20:52:c8:02:4d:62:34:0c:
7e:b0:42:b0:4e:a5:74:8f:bb:ea:87:3a:79:c9:f0:
5a:c3:85:35:85:1d:da:c5:12:39:a0:a7:7b:2a:1c:
17:33:f0:f4:df:1d:ae:71:d0:55:44:1c:d9:71:23:
74:57:e2:67:18:03:d9:9a:f0:c5:ff:d0:fc:51:a0:
8a:6e:ce:68:b3:63:f6:85:22:01:73:36:6a:c7:c2:
d4:6f:49:a3:d7:36:ba:d0:5c:f8:1b:87:c3:8d:2c:
be:ec:16:f0:4d:19:9c:f4:f5:cf:90:9e:29:2f:64:
8a:b9:2c:c8:b8:e1:d9:6d:cd:63:02:76:5b:7d:be:
bc:23:bc:50:5c:43:19:4d:0b:b1:b0:62:d9:4b:27:
4d:1f:a0:73:64:3b:9b:de:f8:cc:37:8f:45:f9:08:
96:12:1d:63:05:ec:3d:4e:17:35:52:1f:90:3d:c4:
92:8e:c4:ff:86:ba:55:a5:ae:dc:83:93:ec:d4:4f:
c9:da:c8:e2:d7:f4:ec:27:de:53:ef:b4:30:67:e9:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:38:F5:92:98:97:86:31:B4:87:1F:B4:08:EA:A1:5A:74:CD:38:F1
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/Wjj1kpiXhjG0hx-0COqhWnTNOPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.48.0/24
93.175.32.0/19
176.97.214.0/24
IPv6:
2a0e:5b00::/29
Signature Algorithm: sha256WithRSAEncryption
1e:69:1d:b7:fb:c3:bf:b6:1e:81:8f:b7:05:1a:c7:93:37:1a:
11:4a:bc:71:66:f3:ab:5a:4f:d1:33:93:3f:18:0b:62:77:0e:
9a:d1:6b:2b:9e:f5:48:0b:43:d8:ef:1a:10:4e:14:6e:19:19:
ad:d4:88:68:93:1d:13:9a:d1:f8:ee:c0:b0:d2:c5:85:83:20:
02:38:48:a7:23:88:b9:5a:34:b8:d8:af:2e:a1:49:e0:c6:5b:
2b:54:f9:b3:cc:7d:e1:d4:a4:9f:55:da:a8:7c:1b:0b:cd:ff:
42:1b:cd:17:9e:2b:fe:14:f8:b7:76:66:05:db:13:ab:64:e8:
d2:a4:77:16:3d:9d:84:ca:30:a0:a2:55:f9:fa:58:fd:71:cf:
c8:51:97:f0:ee:04:ec:2c:99:a0:64:17:0a:5e:f5:3d:fb:ac:
2f:be:2b:98:a7:c7:df:60:8a:9f:92:4c:5f:79:d6:71:91:e2:
26:b8:2a:83:ba:84:52:46:b3:c6:b4:26:ae:91:09:60:dc:f6:
48:db:94:26:47:71:6f:be:c1:a4:9f:67:fc:40:39:37:b3:f6:
62:9d:00:ae:a2:01:51:75:45:9e:d5:c4:a5:d2:fc:76:95:9f:
d2:6c:13:e2:81:ad:ce:e3:e1:ec:02:04:bb:2a:e9:6e:00:39:
da:e8:7b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:01:40 2025 by rpki-client