Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WWRcVForgEmCByIHZYFrqW7QWbA.roa
File: WWRcVForgEmCByIHZYFrqW7QWbA.roa (raw, json)
Hash identifier: J1VB+kJ5gMA8DaJwcCbwDiS1U9k1NyqMnn0R1iV0jKY=
Subject key identifier: 59:64:5C:54:5A:2B:80:49:82:07:22:07:65:81:6B:A9:6E:D0:59:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824BB7031D27FB8EDD7623F0D53BF2C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WWRcVForgEmCByIHZYFrqW7QWbA.roa
Signing time: Thu 02 Jan 2025 17:51:23 +0000
ROA not before: Thu 02 Jan 2025 17:51:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210211
IP address blocks: 31.13.226.0/24 maxlen: 24
87.121.40.0/24 maxlen: 24
87.121.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:bb:70:31:d2:7f:b8:ed:d7:62:3f:0d:53:bf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59645c545a2b80498207220765816ba96ed059b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:11:a8:9c:55:28:e4:ec:84:9d:8f:68:a9:
b5:c0:c7:80:7f:1f:ed:4d:da:e4:eb:f4:47:02:d0:
8e:e3:a7:d5:e0:5b:9d:0b:ef:03:d8:4c:9c:08:41:
d5:76:c6:38:6c:bb:53:21:d9:8c:18:dd:d7:5b:70:
67:ce:bc:08:8c:f8:c3:69:88:25:4b:a8:55:75:45:
d5:92:af:48:a1:92:cc:52:5d:b9:80:b3:8f:f9:43:
6d:9e:d9:c6:38:89:17:c2:ca:f5:36:8b:19:d4:f6:
94:5a:30:03:98:79:11:f0:d8:4c:86:98:78:f9:b4:
a7:79:09:22:a2:ec:0e:8b:35:6b:d0:f9:43:57:41:
31:de:f9:5a:f8:86:9b:04:39:11:11:2c:e7:c7:dc:
48:62:56:95:2f:bb:47:ef:a8:6a:d0:3d:a8:4b:8c:
f4:06:75:33:c4:d8:ce:8a:ce:c6:c8:ca:12:84:9c:
b1:47:ec:1e:ae:b1:2b:e0:9a:0f:9e:f9:d9:5e:9d:
75:30:2a:a6:fa:1e:d0:9e:2c:91:41:90:6a:74:d6:
9c:69:e7:ca:4b:e0:2f:4c:37:05:b5:ba:e2:f3:f4:
c8:ce:46:a7:4f:39:d1:42:f3:08:d8:55:5b:24:dc:
a5:36:a6:e1:68:b2:a3:ca:21:40:e5:a3:07:f1:93:
71:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:64:5C:54:5A:2B:80:49:82:07:22:07:65:81:6B:A9:6E:D0:59:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WWRcVForgEmCByIHZYFrqW7QWbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.226.0/24
87.121.40.0/23
Signature Algorithm: sha256WithRSAEncryption
54:99:91:f8:8e:fa:4e:77:8e:e2:e7:df:c5:ba:86:ba:94:49:
bf:cb:5f:86:8c:8e:2c:0a:54:98:76:52:f3:1e:73:d4:62:26:
ed:9c:8f:e5:8b:fc:cb:ee:c5:c7:ae:08:8b:30:68:29:0e:79:
a0:cf:4a:9a:4b:20:51:b3:47:07:9b:66:5e:dc:f6:78:36:98:
2f:bc:e7:12:49:99:05:43:6d:9f:d9:76:1c:10:94:f7:11:14:
22:de:63:72:69:f9:80:ee:37:a1:80:d0:a0:ed:76:4a:35:39:
e3:60:75:1b:42:65:71:ed:3d:24:cc:74:0b:47:6c:41:31:69:
f5:63:d2:b9:58:ea:20:9b:4e:b6:74:32:b2:da:13:98:40:94:
52:ca:eb:d1:08:86:13:14:0b:2d:87:28:ff:6d:0a:5c:cb:40:
a5:66:25:b1:b0:c7:62:f5:60:3b:bb:43:ac:e5:6f:eb:f1:ce:
a3:eb:31:87:be:9c:9f:48:88:84:29:3d:fb:87:ed:d4:be:0d:
21:dd:7c:7e:4e:84:54:bd:a3:d1:f5:6b:75:48:41:e5:d2:6b:
a7:8f:56:a3:c6:13:3c:8c:11:30:1b:d4:1b:00:51:8a:61:b9:
43:05:44:0f:0c:da:ec:4f:cb:50:13:ba:3c:4d:07:74:2c:86:
ed:43:db:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:34 2025 by rpki-client