Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/wYj2XX93l48Ok6W1DgazAx4cOqs.roa
File: wYj2XX93l48Ok6W1DgazAx4cOqs.roa (raw, json)
Hash identifier: h91MsK6joT6C6e1hB/GdrWn534afG+LSY8h0F/FyZ+4=
Subject key identifier: C1:88:F6:5D:7F:77:97:8F:0E:93:A5:B5:0E:06:B3:03:1E:1C:3A:AB
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019420D61614EF67A4960CDECA787806C009
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/wYj2XX93l48Ok6W1DgazAx4cOqs.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41151
IP address blocks: 89.43.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:16:14:ef:67:a4:96:0c:de:ca:78:78:06:c0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c188f65d7f77978f0e93a5b50e06b3031e1c3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c4:2f:b6:f0:ac:53:1b:08:35:84:11:da:46:
37:a0:76:da:8c:20:56:af:f9:bb:c9:dd:13:1d:a9:
91:31:d9:b7:00:25:1f:02:57:34:e1:03:4b:e3:41:
9b:7b:b5:07:f5:e4:dc:92:ee:f2:77:4d:d3:dc:f1:
9b:4d:68:46:1e:03:6d:5f:c4:cc:7b:d1:7d:f4:40:
cb:8a:c1:46:cb:e8:72:d5:f1:d8:12:ad:3e:0a:c1:
f0:fc:e3:fb:5c:59:77:29:6c:86:be:7b:2a:f4:7e:
6a:46:05:aa:e3:4d:72:f3:09:1d:83:5a:80:09:60:
ef:84:b1:ef:9a:5f:b7:18:9a:b9:6b:fe:88:f8:cc:
9a:76:a2:a9:e1:91:79:52:29:d5:f7:34:ef:90:ae:
92:e8:11:c7:8c:07:ee:a0:5a:46:f9:a0:15:c3:b2:
40:97:31:4c:e7:16:ef:d3:f6:72:37:e6:b7:c1:31:
73:de:0e:f0:38:27:84:69:1c:34:1a:6a:51:91:c9:
70:7d:17:cf:2b:b9:cf:21:33:da:67:f8:69:7b:18:
07:96:df:db:15:a3:45:09:f0:a8:ea:d3:e8:c1:c1:
7b:ae:a1:e6:b2:26:7e:42:f3:8b:9a:f5:47:5c:1c:
95:a3:16:b5:d6:a6:b7:7e:f0:e9:bc:a4:c1:c0:dc:
31:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:F6:5D:7F:77:97:8F:0E:93:A5:B5:0E:06:B3:03:1E:1C:3A:AB
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/wYj2XX93l48Ok6W1DgazAx4cOqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.43.16.0/22
Signature Algorithm: sha256WithRSAEncryption
40:4d:b0:62:0f:3b:ab:f6:c8:d8:ed:8e:d8:64:e4:ee:a6:f3:
bd:b5:ec:ef:a7:44:9d:f0:1b:d6:74:b3:8a:dc:d5:8f:bf:a2:
8b:ae:da:60:d4:d4:7e:8a:30:1a:ee:01:02:de:a5:61:36:ab:
c5:08:f7:6b:25:a0:7b:91:47:3b:9f:b8:19:70:2b:06:5b:26:
4a:10:59:86:77:62:4d:54:47:ba:86:8e:93:c0:27:cd:69:b4:
dd:bd:7a:27:66:0a:a3:99:6c:e2:bd:b0:6f:f6:ca:2a:f8:1a:
a0:66:33:e6:41:43:a1:42:5c:7c:92:bd:ba:00:92:76:a5:52:
59:b1:99:da:04:e0:c7:b5:79:ad:ca:ff:48:14:37:fc:39:c4:
2b:72:76:db:4b:59:87:c2:ec:ba:df:66:a8:7c:a7:c2:8b:ea:
18:e1:96:a7:b9:7e:00:af:27:f9:6d:65:b8:d1:5f:23:e0:8a:
42:2e:1e:08:49:43:b7:8c:7d:57:39:ba:09:98:f3:6f:75:b3:
ad:8d:77:68:96:0f:b7:53:5b:6e:eb:c1:c4:22:35:ac:f2:b4:
02:75:8b:45:24:ce:ea:a5:66:00:3d:45:96:5b:86:39:92:29:
9f:ec:e7:67:26:9a:e6:75:9a:6a:fc:a5:cf:cb:98:6c:f6:6f:
c0:03:dc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:12:37 2025 by rpki-client