Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/WL9XprFljF0Y-kVJv0BvX-3yqRs.roa
File: WL9XprFljF0Y-kVJv0BvX-3yqRs.roa (raw, json)
Hash identifier: qWHdurW8wszpQbbs9zrfW48XRw7Nq5KllIvOiUVlSMc=
Subject key identifier: 58:BF:57:A6:B1:65:8C:5D:18:FA:45:49:BF:40:6F:5F:ED:F2:A9:1B
Certificate issuer: /CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
Certificate serial: 018CC500EB0218ACE3BCDF47795DA2CF6EF1
Authority key identifier: F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/WL9XprFljF0Y-kVJv0BvX-3yqRs.roa
Signing time: Mon 01 Jan 2024 12:30:20 +0000
ROA not before: Mon 01 Jan 2024 12:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61048
IP address blocks: 91.212.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:eb:02:18:ac:e3:bc:df:47:79:5d:a2:cf:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f75bb44e5c93c422e395511f6b691e3dd8644
Validity
Not Before: Jan 1 12:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58bf57a6b1658c5d18fa4549bf406f5fedf2a91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:dd:58:ce:5c:95:66:72:3b:f4:42:bd:0b:
c5:20:b0:4c:eb:e1:38:ab:b7:25:35:db:3f:5c:c8:
fc:f9:17:c1:72:73:e5:ac:e1:c0:28:73:f6:da:bd:
1d:8d:15:ff:07:8e:56:11:3c:5a:25:66:92:89:6d:
4d:15:69:06:f3:87:b8:3b:b6:de:80:c8:03:67:04:
ac:b4:9e:0a:13:b8:b3:67:fc:38:47:90:df:bb:05:
35:ca:00:72:77:18:6f:dd:6e:ef:9f:0c:13:a7:03:
55:27:d7:1c:6f:1c:36:fc:de:2b:76:15:0d:c1:8e:
1e:74:b0:60:39:21:38:76:90:93:ed:3a:c8:79:af:
c9:c5:8d:74:6d:12:08:46:6e:80:65:d3:f6:b0:7d:
a9:40:d7:3a:99:96:43:bd:52:d0:50:3d:f3:ea:e0:
4d:06:74:e8:e4:a6:45:6d:c1:db:86:3a:68:60:5a:
a3:c8:81:4c:e1:1c:20:d0:8f:9f:9f:16:3a:c0:09:
60:9d:b4:71:c3:62:65:b2:8a:bd:e9:45:99:37:fd:
5c:e1:e3:a3:9c:cf:fd:ae:69:93:95:7e:c9:43:c3:
b0:45:fb:8b:fa:57:b1:10:23:4e:1b:c0:76:9c:df:
82:70:78:cc:e5:93:48:0b:3e:53:21:69:eb:fb:b1:
60:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:57:A6:B1:65:8C:5D:18:FA:45:49:BF:40:6F:5F:ED:F2:A9:1B
X509v3 Authority Key Identifier:
keyid:F6:5F:75:BB:44:E5:C9:3C:42:2E:39:55:11:F6:B6:91:E3:DD:86:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l91u0TlyTxCLjlVEfa2kePdhkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/WL9XprFljF0Y-kVJv0BvX-3yqRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2484dd-8cd9-4f00-b8ea-33b6e405e5c3/1/9l91u0TlyTxCLjlVEfa2kePdhkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:55:66:33:e1:98:f1:a7:26:94:d6:10:7e:a8:eb:fd:70:00:
27:9c:cf:80:98:bf:aa:31:89:4a:49:3b:2a:fb:e3:fa:02:d5:
5c:77:0d:f5:12:f2:93:67:38:0b:88:40:74:8a:3e:ce:9c:f2:
98:c8:92:0e:3d:c0:f1:ad:ad:21:b7:bd:20:18:22:2b:0b:0a:
c3:32:0f:3d:9a:4f:8d:28:24:0b:e2:ff:33:99:33:5c:17:bb:
cb:ce:63:70:80:2c:02:7c:f0:46:ad:48:c0:e9:6d:2b:6a:a5:
02:5c:2a:cb:79:ec:5d:9a:f1:48:5b:df:e1:8b:8f:ca:76:41:
a9:f9:72:3e:e8:2e:72:d5:48:62:85:3f:c2:a7:af:fc:d8:6d:
53:9c:87:33:73:64:94:3e:25:e1:ed:58:5a:b9:24:df:ea:e5:
54:7a:58:02:72:a3:e6:c3:74:c5:23:e0:4d:4f:26:c2:f1:6f:
f7:f0:94:d9:1d:89:51:46:71:f9:11:a2:5f:7f:17:12:5e:74:
b0:ba:0d:32:11:76:05:36:bc:52:d6:69:61:1d:7b:39:08:02:
59:d8:bd:a7:a9:7a:bf:ae:68:f2:34:62:8c:82:89:32:41:74:
0a:94:d9:f1:fd:46:2f:ec:b2:1d:c7:f8:6e:86:bc:8e:da:75:
13:01:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:20:56 2025 by rpki-client