Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WLExxdJdxfXakHe3wsRRNLDYIC0.roa
File: WLExxdJdxfXakHe3wsRRNLDYIC0.roa (raw, json)
Hash identifier: z0Rf7ZOcKpPAPl9W49pVlODRIXpARjJ8IRNTjRK8Yys=
Subject key identifier: 58:B1:31:C5:D2:5D:C5:F5:DA:90:77:B7:C2:C4:51:34:B0:D8:20:2D
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428281519026D9A69F728BBAD465CCB3C
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WLExxdJdxfXakHe3wsRRNLDYIC0.roa
Signing time: Thu 02 Jan 2025 17:55:03 +0000
ROA not before: Thu 02 Jan 2025 17:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42157
IP address blocks: 151.251.64.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:15:19:02:6d:9a:69:f7:28:bb:ad:46:5c:cb:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58b131c5d25dc5f5da9077b7c2c45134b0d8202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:a0:9d:0b:3b:4d:82:a4:d9:56:45:86:48:
47:ba:f6:75:27:35:6c:4f:b0:4c:d3:67:0b:bd:36:
bd:c0:65:f5:36:52:30:ae:17:32:38:7b:88:93:c0:
c7:d5:fa:78:4c:15:49:5b:fe:cd:74:f0:7a:1f:ff:
e6:43:32:9f:75:95:81:67:ab:db:2b:83:36:15:e1:
f0:48:b5:21:d0:ed:74:0a:7a:77:6f:b3:6e:69:4b:
70:40:f8:cb:e6:79:8b:07:b7:28:9c:81:c2:f1:81:
b8:18:a3:dc:3a:53:8b:6f:6b:2e:8f:09:55:c3:fd:
12:4f:c0:71:6b:be:e2:09:fd:81:f7:c9:60:41:62:
be:08:04:5d:84:49:5a:0e:85:2e:f8:c4:08:f3:da:
47:24:e0:ad:f5:2c:9d:a5:4a:0c:a5:e3:aa:ad:a1:
db:6a:37:d3:1f:09:9d:c0:9f:03:ed:a1:05:7a:62:
54:63:91:ed:7c:e1:fc:68:35:f9:4d:bd:28:5c:b6:
5a:ae:21:79:6a:6a:47:73:88:c5:f4:78:10:cb:24:
36:43:67:3b:e1:b5:6a:b6:44:96:0d:f4:bd:27:34:
66:60:f3:69:37:62:20:c0:21:c4:f4:99:e9:99:ff:
b6:00:fb:a3:74:7f:7e:5d:55:e7:19:f6:69:59:92:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:31:C5:D2:5D:C5:F5:DA:90:77:B7:C2:C4:51:34:B0:D8:20:2D
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WLExxdJdxfXakHe3wsRRNLDYIC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.64.0/23
Signature Algorithm: sha256WithRSAEncryption
16:3b:09:71:43:77:f1:34:d2:bb:52:73:44:d6:cc:1a:06:2f:
3b:8f:e7:ce:10:e8:2d:ae:87:8e:17:4c:f7:a7:73:f0:b6:d6:
c6:f8:4e:ff:68:95:11:60:aa:5e:a4:66:82:86:b8:6d:91:1e:
28:d2:d5:ed:ca:05:2d:aa:1a:18:9f:a6:31:a5:55:83:59:31:
f6:fc:1a:41:63:05:dd:52:17:82:ec:3e:27:39:41:b0:18:24:
05:f7:4d:ee:22:b1:46:0f:77:1b:8a:de:e3:76:b1:4e:c3:48:
9a:76:99:4b:27:b9:43:4a:82:8e:17:da:79:c8:21:a3:ad:7a:
70:5d:f0:58:fa:74:2f:9b:70:61:54:2d:0a:df:f5:82:58:47:
d2:76:20:c6:eb:43:65:18:c6:85:33:59:3d:40:49:34:c4:50:
ca:60:ac:e1:a6:c3:b2:33:55:9a:8b:b9:61:6c:86:90:bd:bf:
b8:ec:b6:e4:fe:76:10:1f:fc:eb:60:f0:cd:23:06:3d:ce:c8:
31:3a:8a:18:50:ee:40:73:01:9c:44:9f:eb:a8:9f:29:2d:74:
51:57:7e:26:81:5e:6f:3b:6a:44:4f:45:53:76:dd:cf:ee:d5:
9b:12:f2:0c:a7:80:0c:60:7b:e6:c7:9a:98:b8:a8:f0:f1:ab:
0c:9d:21:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:50:44 2025 by rpki-client