Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/wvcELSI8p3zOC9FNSdvAaOhzdZI.roa
File: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (raw, json)
Hash identifier: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=
Subject key identifier: C2:F7:04:2D:22:3C:A7:7C:CE:0B:D1:4D:49:DB:C0:68:E8:73:75:92
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01946A3245F1FF749A2128B8B7EDEA1FED96
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/wvcELSI8p3zOC9FNSdvAaOhzdZI.roa
Signing time: Wed 15 Jan 2025 13:41:07 +0000
ROA not before: Wed 15 Jan 2025 13:41:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197976
IP address blocks: 91.230.246.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:32:45:f1:ff:74:9a:21:28:b8:b7:ed:ea:1f:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jan 15 13:41:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2f7042d223ca77cce0bd14d49dbc068e8737592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:94:00:0b:50:c0:bf:a0:bd:a7:c7:a0:2d:
e0:e4:34:a6:a5:cb:ea:65:45:58:83:c4:1d:b3:88:
aa:7c:ea:d8:2b:a6:b0:dc:63:4d:ee:24:91:13:03:
98:f6:53:fd:3b:f0:05:13:1c:41:a2:e4:3a:ec:8e:
e8:ec:40:db:e1:09:43:8c:ae:6d:88:19:2e:6b:1c:
66:5c:7b:bd:1e:c3:05:d3:83:22:16:ac:51:0a:7c:
41:08:2a:3f:cd:47:4d:38:56:49:68:0d:78:0b:c1:
04:72:8a:ad:6e:18:85:39:32:4f:c1:8f:af:b8:e2:
60:8e:4d:48:31:52:df:5a:6b:f7:08:ed:35:19:dc:
23:c9:78:97:48:4d:61:da:8d:cb:db:1e:c0:dc:9b:
60:c5:96:25:f6:90:c8:12:67:00:2d:ea:fe:63:26:
cc:4d:89:d4:16:d2:7e:26:b8:15:02:ed:0d:67:8e:
94:9a:e8:83:a9:52:8b:70:3e:46:e7:2e:fb:a1:ac:
be:18:78:77:d2:8d:f6:15:c9:31:c4:a7:83:1e:59:
be:7f:e4:71:57:b8:a9:c8:d4:f9:9e:39:67:ad:03:
7c:5f:03:b7:36:fe:c2:cc:3b:84:f9:3b:8a:a9:03:
42:5a:86:84:17:a7:99:29:f6:6c:d2:b7:c1:87:4d:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F7:04:2D:22:3C:A7:7C:CE:0B:D1:4D:49:DB:C0:68:E8:73:75:92
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/wvcELSI8p3zOC9FNSdvAaOhzdZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.246.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a0:09:16:1e:8e:8e:b4:1c:85:b0:2f:6b:e0:94:9f:59:e1:
35:1e:59:be:86:cf:26:1f:ad:a4:24:b4:20:af:54:4a:54:33:
69:ef:50:f1:5c:5d:7d:e8:03:45:e5:ed:f7:f6:ab:ae:a1:ca:
f2:30:b8:50:5b:fd:b3:ac:71:09:65:38:f5:b2:08:0b:35:52:
82:2f:a0:ad:9e:99:71:55:f8:ec:2a:2b:06:24:88:70:60:31:
9a:b2:83:d0:b6:0c:70:7e:07:b2:e9:2a:c8:18:ae:9e:23:10:
a0:39:45:4a:1f:5a:73:4f:99:f0:13:70:6c:63:e0:f3:fd:ea:
07:f0:df:64:a4:88:c7:40:98:ce:c2:93:84:63:2d:ff:8a:3e:
80:42:f1:76:b7:1c:34:07:c3:ba:ce:77:11:e1:d8:95:60:7a:
49:b3:c8:86:84:d5:2f:de:fd:11:59:a4:3a:a0:5c:43:af:f1:
5b:46:41:24:68:fd:1f:f0:63:e7:d3:24:d7:13:ae:c6:89:22:
ae:4e:25:40:c4:78:0e:62:38:5d:7f:1d:12:14:0e:9d:13:5f:
de:f6:16:4b:6f:04:f7:af:26:b2:fd:14:49:c2:ed:2e:1d:ed:
36:fa:28:6a:a1:62:d8:dd:29:cd:77:06:29:89:bf:ef:d1:7b:
8a:73:e8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:58:40 2025 by rpki-client