Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/WJYo92ZVpAUd1BuZPEnAl356iuU.roa
File: WJYo92ZVpAUd1BuZPEnAl356iuU.roa (raw, json)
Hash identifier: zcoBYroeH3hhjkU4dDCY2xfjvG2eq71PoTaXan33w2g=
Subject key identifier: 58:96:28:F7:66:55:A4:05:1D:D4:1B:99:3C:49:C0:97:7E:7A:8A:E5
Certificate issuer: /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial: 0194221FBA2A80CC35258A00C743A281B408
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/WJYo92ZVpAUd1BuZPEnAl356iuU.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50141
IP address blocks: 213.5.80.0/21 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ba:2a:80:cc:35:25:8a:00:c7:43:a2:81:b4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=589628f76655a4051dd41b993c49c0977e7a8ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2d:46:64:96:af:b9:2b:ac:59:96:29:51:3a:
90:6f:e7:51:e5:6f:40:6e:ed:71:7e:71:2c:d3:a3:
1d:43:df:9b:4d:0b:ad:5e:dd:8e:e9:e0:84:0f:e7:
f9:75:3a:46:59:9f:ea:ae:ca:7a:e4:d3:cf:78:22:
76:af:e1:66:c0:51:8e:07:f2:49:0c:78:7b:28:4e:
dc:3a:31:a2:46:ec:62:bc:ef:85:36:dd:ed:17:9f:
d4:f1:85:29:90:e5:52:65:f5:74:3b:ba:1b:53:05:
6f:95:fa:d8:dc:39:a2:be:ce:b3:bc:e5:c7:77:bf:
ec:b6:69:f0:03:81:97:8d:e2:cc:5b:bd:c1:57:a8:
26:b2:ba:cc:d5:4a:1b:31:1a:aa:56:db:8e:52:c6:
2d:e9:3f:e5:5b:fc:92:55:23:1b:00:ec:62:44:12:
de:04:a5:aa:eb:6c:1d:73:62:8d:28:4e:e2:56:15:
04:3a:17:ba:79:a8:01:e8:cf:9d:d7:a9:56:41:e1:
66:45:0b:b2:e3:53:0b:2f:b3:7c:b4:40:8e:ac:70:
bb:23:f2:ef:4f:93:7c:09:cf:43:08:40:6e:b0:b1:
20:50:30:03:1a:cb:c5:7b:79:88:ca:25:6a:0c:a4:
1b:d1:1e:b2:69:ed:17:c7:68:87:6b:4d:d7:7f:ee:
82:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:96:28:F7:66:55:A4:05:1D:D4:1B:99:3C:49:C0:97:7E:7A:8A:E5
X509v3 Authority Key Identifier:
keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/WJYo92ZVpAUd1BuZPEnAl356iuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.80.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:6a:75:51:c8:2f:e3:73:39:3a:db:c0:90:26:21:4b:2d:7c:
13:86:37:a7:61:51:69:14:b2:85:99:b2:8d:89:35:80:6d:ae:
4a:1e:c5:a1:c6:fd:05:1c:7a:7b:f4:7d:3a:ba:d0:ec:0a:35:
7e:cd:eb:e0:10:1c:b2:ad:80:cb:52:28:fa:c2:93:86:7f:c8:
e3:50:6d:ed:48:c2:b4:f6:87:9f:77:fc:02:7c:b1:f8:45:03:
0e:ec:f2:6a:22:d4:63:54:15:b5:35:24:25:9a:55:d7:2b:ad:
dd:13:b4:fe:23:02:f5:21:ac:7b:4d:ef:89:f8:90:e3:12:c1:
ee:d8:fa:24:49:2c:bc:ca:47:d5:0e:3b:92:5f:24:25:e0:2d:
0a:ff:cf:1f:f4:b7:3f:e9:f2:fc:ad:55:6f:d2:85:ea:67:ef:
48:38:5b:cc:55:1b:a8:e9:b8:5a:5a:62:cc:17:78:60:25:c9:
0c:af:f3:16:63:b5:04:85:a4:65:fd:14:92:66:6b:6c:50:e6:
0f:69:84:9f:fe:df:65:e4:f7:b1:ee:70:c6:74:a2:6d:2c:7b:
23:5d:8d:67:30:1b:8f:96:c8:da:96:a5:fd:25:1f:31:53:5d:
35:b4:56:63:43:1c:0e:1f:eb:54:17:fe:07:c3:6a:07:93:c9:
af:b1:31:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:28:10 2025 by rpki-client