Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/WPkCAe56qcayLw7OSJ39BmQs3dc.roa
File: WPkCAe56qcayLw7OSJ39BmQs3dc.roa (raw, json)
Hash identifier: aYDDBvFy7ps2t01cjyeWqbWteq/VAxNlg5mzuMH4OGk=
Subject key identifier: 58:F9:02:01:EE:7A:A9:C6:B2:2F:0E:CE:48:9D:FD:06:64:2C:DD:D7
Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89
Certificate serial: 01942444E20F99F2665E35132C4FC2219E5E
Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/WPkCAe56qcayLw7OSJ39BmQs3dc.roa
Signing time: Wed 01 Jan 2025 23:48:01 +0000
ROA not before: Wed 01 Jan 2025 23:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29286
IP address blocks: 86.107.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e2:0f:99:f2:66:5e:35:13:2c:4f:c2:21:9e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58f90201ee7aa9c6b22f0ece489dfd06642cddd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:3c:9e:b5:14:c9:7c:ef:57:de:80:10:3c:
b4:ed:6d:1b:33:f4:e1:62:b5:18:9b:d9:c8:85:d0:
72:5a:0f:4c:1c:0f:15:be:e0:cc:15:e7:c9:46:6a:
03:15:1e:08:c0:94:5a:2c:15:c1:f7:30:5c:88:ef:
15:2e:01:fb:09:a5:c7:33:ac:6f:71:4a:a7:86:8b:
a8:b9:18:ce:d6:2f:15:98:7c:11:35:66:bf:7c:bb:
09:1e:98:2d:29:d8:df:de:a6:6e:4f:2d:aa:ca:b0:
d3:5c:39:60:0c:59:15:60:f2:a5:7c:3a:36:38:ac:
68:d9:63:2d:86:cd:b2:5d:95:32:b9:ee:2b:f2:bf:
2d:fd:b6:48:35:4b:32:25:58:84:19:92:90:e6:e9:
41:5e:16:62:c4:1b:85:1a:c2:b8:ac:dd:3d:70:b9:
e9:58:88:5a:00:91:2f:8d:e4:84:99:61:5e:95:89:
80:51:9a:39:ce:a6:9d:b4:23:7d:e8:0c:5e:74:28:
4b:75:94:20:d5:db:95:65:f7:81:13:9d:ff:b6:8e:
d4:6c:4b:ed:30:a0:69:bd:ee:d8:30:c5:44:37:e0:
68:61:71:82:06:45:2b:71:8e:e4:01:06:39:7b:07:
b4:2f:23:08:e5:cc:9e:2a:18:70:ed:96:06:24:92:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F9:02:01:EE:7A:A9:C6:B2:2F:0E:CE:48:9D:FD:06:64:2C:DD:D7
X509v3 Authority Key Identifier:
keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/WPkCAe56qcayLw7OSJ39BmQs3dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.22.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d6:bd:74:ae:b2:eb:c1:20:24:ac:d6:b6:bd:51:3d:0f:84:
38:c2:d7:b2:f2:38:c0:a2:31:08:87:81:39:f8:ce:86:90:51:
09:52:df:00:a0:23:1a:87:1a:1e:b3:9f:7d:0f:12:0f:97:40:
2e:92:0c:48:01:92:79:72:bc:b4:0a:49:33:e2:ad:a1:cb:71:
1e:79:b5:64:c6:33:af:14:8e:54:f5:a2:34:47:62:24:dc:09:
95:28:7e:86:21:42:9c:f2:c5:ac:48:bc:f2:97:c8:c8:f1:c0:
c8:e1:78:99:6c:b9:b8:d2:2a:b1:27:10:19:55:ed:8b:dd:80:
ec:79:08:e2:56:03:01:20:f5:04:f3:de:c3:e5:7a:f0:e9:e2:
7a:3b:95:48:51:70:fa:ce:be:65:0d:42:c6:5f:5c:aa:6e:33:
cf:dc:d3:7a:e3:f6:9d:1c:fe:23:c0:62:60:7b:5c:e7:e2:ad:
d9:df:52:34:eb:0b:44:74:75:fb:40:80:ca:af:0c:69:ad:5d:
70:d8:37:8b:dd:3f:46:24:9b:19:86:04:53:33:08:15:95:68:
f3:e4:b8:5e:7c:65:f3:a8:11:55:a9:c5:21:ed:d4:75:c0:fd:
9f:92:9e:9b:e7:f7:9b:ec:d2:35:4c:49:1d:a5:07:cb:45:77:
2d:e6:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:02 2025 by rpki-client