Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wue3csem_PZPy2tRuaD3_Lzkbcs.roa
File: wue3csem_PZPy2tRuaD3_Lzkbcs.roa (raw, json)
Hash identifier: 1XcVUmBVOWnaGlm06ru0ZzlulYeZ124KzIzVs6w9iZA=
Subject key identifier: C2:E7:B7:72:C7:A6:FC:F6:4F:CB:6B:51:B9:A0:F7:FC:BC:E4:6D:CB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195604E52CD42BCA29C1FD0C65F84A77462
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wue3csem_PZPy2tRuaD3_Lzkbcs.roa
Signing time: Tue 04 Mar 2025 08:38:20 +0000
ROA not before: Tue 04 Mar 2025 08:38:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52041
IP address blocks: 45.84.91.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:4e:52:cd:42:bc:a2:9c:1f:d0:c6:5f:84:a7:74:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 4 08:38:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e7b772c7a6fcf64fcb6b51b9a0f7fcbce46dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:4a:81:2b:3a:9f:08:36:86:58:d3:35:57:
25:3a:37:12:51:d0:3c:75:f2:35:62:9b:2b:30:b5:
7c:a9:0b:12:13:db:5e:37:e4:a3:e1:1b:99:32:58:
c7:64:d0:ee:a5:93:c8:2d:e5:a4:00:43:62:eb:a5:
67:0a:a8:33:fb:5f:7e:de:70:2e:15:a9:7a:67:8c:
a8:e0:77:d9:1c:c8:95:e6:b1:d8:96:11:f8:b0:3c:
b8:6d:bb:2a:e0:70:57:29:65:75:dd:e3:2c:2c:f6:
a0:8e:92:78:0a:ad:7e:4a:ec:08:ae:5a:81:47:23:
3a:cc:12:51:f4:03:8d:f6:a2:5b:2d:e4:5d:b5:ec:
8b:ac:df:af:3a:02:e3:38:6a:56:42:87:8a:db:30:
bb:b9:50:c0:64:cb:5c:0e:9c:18:fd:df:c3:86:e4:
1e:96:8f:e7:d3:52:ea:49:f9:65:ca:b8:f6:e9:7b:
c0:61:fa:28:a0:a2:8b:1f:1c:c5:0a:39:94:9f:99:
92:1b:b4:1a:d5:ed:14:f1:f3:53:91:88:e5:6d:3f:
bd:49:b8:92:08:26:12:7b:b6:86:e1:f8:64:c3:30:
6c:d9:25:ff:d6:19:a7:51:3a:14:8b:ee:f7:e4:a4:
f9:f6:00:70:16:c3:89:d7:ea:eb:91:9a:60:b9:57:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:B7:72:C7:A6:FC:F6:4F:CB:6B:51:B9:A0:F7:FC:BC:E4:6D:CB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wue3csem_PZPy2tRuaD3_Lzkbcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.91.0/24
87.121.44.0/24
194.180.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f6:0f:82:f0:f1:d5:82:f9:06:66:9d:3e:e9:41:9e:3f:00:
0a:72:b6:8e:91:0e:e6:97:0f:db:81:9e:40:71:e6:85:15:58:
c7:e6:8e:5a:dc:e9:08:6c:89:c9:0d:da:eb:62:21:ab:5b:d2:
70:01:30:db:58:99:ea:72:64:0e:a9:2a:9a:6d:d0:4d:68:0f:
fa:e9:82:8a:71:9c:e1:6b:90:53:3f:a1:52:f1:11:57:45:04:
96:6d:19:7b:dc:cb:a5:0b:bb:4f:d7:72:e6:17:69:8e:a6:d8:
c2:61:4a:88:47:53:b4:38:8d:f2:bf:6a:4c:52:6c:20:ac:1c:
da:17:51:cf:87:5c:68:03:af:9b:43:02:45:f0:5f:43:6c:6e:
37:e7:a3:a2:ec:ff:48:48:e7:d1:d0:dd:2a:44:c7:70:a0:fb:
36:41:92:6b:0a:f5:d8:e3:c6:27:80:6a:91:ec:db:f4:ad:f0:
b2:9e:83:8a:24:41:89:02:8a:16:80:a9:0c:8a:52:89:9c:ae:
bc:27:11:e3:39:e4:f7:aa:2c:cc:ef:7a:3d:26:18:84:6e:fb:
77:66:20:90:12:4c:28:a9:8c:61:de:3d:17:11:26:fb:ca:87:
81:07:53:15:ff:f6:c1:0c:10:a1:c8:8d:88:5b:79:3f:90:9c:
c2:da:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:27:54 2025 by rpki-client