Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/wngU1C7T49I07ft40vtG-ZZicZg.roa
File: wngU1C7T49I07ft40vtG-ZZicZg.roa (raw, json)
Hash identifier: guRZJPyhZXFPpQ2Hl147xoImeu0HTyDTF4DTO4vpDS0=
Subject key identifier: C2:78:14:D4:2E:D3:E3:D2:34:ED:FB:78:D2:FB:46:F9:96:62:71:98
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 018BB3DEFD23A6FAE99144CEE027E66AB9E0
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/wngU1C7T49I07ft40vtG-ZZicZg.roa
Signing time: Thu 09 Nov 2023 11:36:57 +0000
ROA not before: Thu 09 Nov 2023 11:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51809
IP address blocks: 109.74.28.0/22 maxlen: 24
45.66.252.0/22 maxlen: 24
91.217.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:de:fd:23:a6:fa:e9:91:44:ce:e0:27:e6:6a:b9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Nov 9 11:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c27814d42ed3e3d234edfb78d2fb46f996627198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:92:d4:72:71:d4:c0:20:c1:33:12:a4:e2:
35:51:77:5d:c9:6a:60:d7:96:87:c8:96:a1:81:90:
c8:32:2e:18:ed:85:d1:d2:37:e4:4f:e5:a8:2c:54:
30:bf:3f:fc:d9:4a:10:01:54:09:19:13:08:b9:c4:
3b:05:22:97:65:72:cb:37:e1:fe:73:52:c6:f4:d6:
ce:29:24:35:58:05:20:dc:6d:87:d0:3d:52:d1:0e:
98:b8:2e:f5:4d:3f:f4:3e:90:a3:4d:51:51:73:59:
62:c3:5b:b7:77:46:bf:81:52:3f:77:65:11:1e:52:
a9:54:1f:83:bc:00:76:cc:8b:cc:91:7b:75:52:43:
05:7e:e2:65:f6:4c:f8:92:7a:6c:dc:73:f1:1d:a9:
a0:66:95:29:91:cd:df:e7:e4:48:06:14:75:b5:eb:
7e:6f:e7:33:7f:9c:24:18:5d:c7:f7:2d:61:83:0f:
c0:eb:10:f5:8c:36:c0:80:98:36:6c:cb:4a:21:33:
3e:c3:f6:fc:cd:8b:6e:27:cf:7a:c9:4c:e1:c9:d4:
d5:07:d2:81:ea:3c:2f:68:24:af:fa:0f:0b:5e:11:
94:f3:68:9d:c1:9a:b7:66:20:14:49:15:33:65:cf:
68:ba:06:d6:05:a0:9d:1f:b3:94:6f:8b:2e:af:88:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:78:14:D4:2E:D3:E3:D2:34:ED:FB:78:D2:FB:46:F9:96:62:71:98
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/wngU1C7T49I07ft40vtG-ZZicZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.252.0/22
91.217.6.0/23
109.74.28.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3e:7f:92:23:e0:0b:34:09:9b:83:9b:24:3c:73:3e:29:19:
21:86:10:63:2a:19:a8:38:38:5d:f3:14:fb:91:52:2d:20:eb:
a1:c5:6a:c7:02:6e:41:e7:fe:fd:c8:bb:bd:1e:c0:a6:2c:71:
f0:69:cc:61:ca:73:12:7f:3f:10:23:be:41:1f:6c:3a:c0:fc:
43:d8:32:39:b8:a9:27:21:fd:77:7c:59:d4:c7:6c:29:6d:33:
52:c8:51:f3:32:c7:80:da:b1:93:6e:81:de:c2:69:7e:56:3c:
c1:c3:74:8f:77:81:dd:95:08:55:74:2b:db:f8:c1:2e:a5:e3:
14:ea:2a:ed:82:e9:bd:e1:b5:85:e9:56:6a:db:64:00:7d:5f:
de:3d:77:aa:e1:20:54:5a:25:23:ee:fb:e1:e6:04:8e:6b:86:
b2:0d:80:9c:6c:a1:c7:09:c9:9d:c5:0d:de:81:c7:2d:f6:21:
20:3e:10:88:80:ba:ea:a1:b7:e8:80:94:8a:48:ad:9a:56:b0:
7e:00:5b:fe:ba:82:c4:02:d5:e4:51:93:bb:2d:a2:e2:98:6d:
a4:70:a9:ba:11:b6:ae:6f:3d:69:bc:53:ad:23:35:37:c4:25:
c5:e9:03:f1:92:2a:09:a6:20:3f:4b:8f:84:82:75:bc:ad:f8:
04:16:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:35 2025 by rpki-client