Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa
File: WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa (raw, json)
Hash identifier: PgvSeWtg+mLsxBE/P2tTl00AaGi2pSNp8OAj3D57rx0=
Subject key identifier: 58:C7:71:78:20:DD:0C:DC:1C:EB:29:80:0F:0F:12:75:0E:52:5E:A1
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 0195B51D9611BE4AC6DCE1CF76B4B7E509A9
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa
Signing time: Thu 20 Mar 2025 19:52:49 +0000
ROA not before: Thu 20 Mar 2025 19:52:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 5.56.27.0/24 maxlen: 24
31.42.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b5:1d:96:11:be:4a:c6:dc:e1:cf:76:b4:b7:e5:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Mar 20 19:52:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58c7717820dd0cdc1ceb29800f0f12750e525ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:59:f8:56:b9:a3:1b:a3:4c:ab:56:70:e9:
67:15:d6:7c:aa:ff:e1:90:fa:17:6d:e9:1a:fb:46:
12:bf:38:9c:81:91:e8:55:86:83:2c:c6:1c:e8:bb:
a6:0b:84:f1:fe:76:4d:ef:c9:b1:0b:13:45:67:87:
82:a9:8c:ba:59:c8:9c:2a:9d:55:99:46:44:e2:f4:
e7:af:c7:a0:c3:98:0a:d6:17:0a:17:b8:63:d9:da:
a2:8f:7b:77:cf:a0:d9:7f:2b:da:f3:57:1e:7c:30:
03:35:82:da:2e:9d:64:02:35:4e:a1:fc:79:03:ec:
6a:df:3b:0f:94:41:05:c0:73:8b:cf:27:da:80:c1:
9a:f0:0f:42:5a:4a:5a:6d:87:de:20:86:9a:27:db:
ef:46:11:07:5d:33:2f:a0:42:89:79:ed:a6:61:ff:
c0:24:20:ab:a5:9d:4d:8b:48:29:e4:de:62:a9:0d:
b6:c8:e6:da:3f:c0:03:67:83:07:ec:0b:69:93:49:
ff:32:35:6f:69:9c:38:f3:5a:61:4c:d3:dd:00:75:
36:cd:0f:60:a8:19:5d:bf:07:95:b5:85:78:3e:d1:
b0:c0:60:52:f1:cc:44:32:10:4d:c5:0d:92:c4:7e:
bc:76:0c:0d:26:94:91:f7:ad:0f:ef:80:c1:1a:20:
cd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:71:78:20:DD:0C:DC:1C:EB:29:80:0F:0F:12:75:0E:52:5E:A1
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/WMdxeCDdDNwc6ymADw8SdQ5SXqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.27.0/24
31.42.123.0/24
Signature Algorithm: sha256WithRSAEncryption
76:38:71:21:59:18:84:b1:98:05:20:9a:33:89:7c:fc:43:d5:
b3:ff:a2:b4:02:1b:f0:46:90:62:bc:d1:54:86:de:97:f1:7b:
6c:43:29:7c:a3:d3:5e:22:47:cb:cd:6e:3e:e4:5f:f8:47:1f:
52:4a:ea:5c:fa:6c:de:74:ee:b7:23:78:de:3f:d8:c4:86:f6:
bf:fe:94:29:13:88:f0:cf:5f:2c:89:14:fb:29:73:af:12:4b:
41:e4:65:f0:98:03:b7:fe:99:8e:db:bf:ea:b8:b0:26:6c:4c:
85:88:ad:69:20:db:d5:59:70:26:04:b3:68:1e:70:be:ab:3e:
85:82:52:9c:a5:f1:3f:76:82:ce:18:1a:27:e7:45:3c:3c:97:
2a:cc:8c:65:03:c5:32:e4:bb:18:7d:16:51:77:bc:50:5c:4d:
42:5c:82:92:81:d7:c5:26:68:28:84:52:7a:f1:de:ca:15:ec:
7f:27:a5:9d:6f:43:79:47:02:5b:9a:28:ff:df:44:57:4d:be:
0c:cd:f9:46:17:8c:b5:7c:a4:80:a6:0b:ee:00:91:6a:3c:5c:
ce:0d:d4:ce:9a:65:5d:aa:31:b2:5d:90:63:75:6e:a9:57:61:
7b:65:e8:af:cb:dd:f2:22:0a:56:41:18:d0:3b:7a:a1:ad:fa:
f7:d7:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:04:44 2025 by rpki-client