Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wc-bV8f9JlL_xLZBRF2QoOkxnBM.roa
File: wc-bV8f9JlL_xLZBRF2QoOkxnBM.roa (raw, json)
Hash identifier: fefZYwtCRvoNR5tVgAECnvH+141ZQxdPZRpjx5dBP44=
Subject key identifier: C1:CF:9B:57:C7:FD:26:52:FF:C4:B6:41:44:5D:90:A0:E9:31:9C:13
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282437F5B83D3D31B27D1A1307756E
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wc-bV8f9JlL_xLZBRF2QoOkxnBM.roa
Signing time: Thu 02 Jan 2025 17:55:06 +0000
ROA not before: Thu 02 Jan 2025 17:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198576
IP address blocks: 84.242.132.0/24 maxlen: 24
212.95.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:24:37:f5:b8:3d:3d:31:b2:7d:1a:13:07:75:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1cf9b57c7fd2652ffc4b641445d90a0e9319c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:49:c5:00:36:91:ce:36:0f:b4:de:9e:ba:
f3:a0:ed:1a:eb:94:13:60:c5:18:3d:ab:b3:28:3e:
ec:2c:62:2a:19:d2:6d:5d:57:ff:0d:a9:bc:c5:e1:
4c:b6:cf:d0:55:e7:7d:c0:ba:28:43:90:13:32:b3:
e5:7c:f3:24:b4:6c:38:ad:a0:9b:c5:01:04:70:72:
c3:19:63:6f:b1:14:8b:13:8a:db:48:29:55:1a:14:
db:35:ca:39:f5:ed:8f:78:e6:63:72:8b:a4:82:5a:
19:84:c0:86:15:92:04:bc:05:85:75:b2:62:18:e2:
42:56:8f:5d:d5:8b:02:04:6d:cc:46:69:b5:1d:a7:
c8:ad:20:9f:11:36:3e:98:ad:48:8d:2c:a3:1f:17:
df:80:73:41:de:35:75:e2:fa:4d:40:1c:f4:b6:b1:
30:fd:ca:b1:45:8e:8c:a0:2a:b6:8f:b8:1a:d8:b1:
46:d3:03:09:df:03:1f:ac:c8:e1:6c:3b:b5:a5:6c:
07:f4:73:8d:d4:8d:21:83:3b:b5:66:db:7f:a5:f2:
6b:c7:1b:3c:23:79:81:5c:42:22:25:29:ee:3d:25:
d0:c4:b8:d7:ce:a3:7d:5a:a9:f3:c1:50:b1:48:a4:
ac:6b:61:5a:a0:34:78:99:75:27:1f:95:98:09:62:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:9B:57:C7:FD:26:52:FF:C4:B6:41:44:5D:90:A0:E9:31:9C:13
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wc-bV8f9JlL_xLZBRF2QoOkxnBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.242.132.0/24
212.95.175.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9e:ef:b0:6f:c2:df:5e:18:f1:b7:36:c0:93:e4:ca:8d:ff:
01:58:5a:e1:b0:44:41:3d:88:81:4d:d8:a2:20:de:1a:2d:ec:
c8:4a:69:d2:56:3c:5e:ca:1a:c4:46:98:71:09:c0:aa:47:ee:
15:c2:64:17:b0:c2:6b:b4:ca:20:a1:7b:28:57:48:46:36:7d:
1b:09:09:18:dc:f8:59:2e:ff:cc:65:e6:a5:ec:1e:e6:48:02:
0c:9b:a2:08:f3:ac:6f:77:af:8c:08:84:88:dc:6c:6d:cc:c6:
9d:4d:85:99:7a:ce:cf:86:f9:98:5d:bf:75:05:f1:83:c6:0b:
3e:c5:e9:cb:66:c5:c8:bf:8a:1f:14:de:f3:1d:e1:96:8d:c1:
fb:83:8d:09:1e:2d:fd:41:66:27:90:7a:e2:c8:a2:24:62:3b:
94:26:fc:ac:d0:64:ad:37:be:c7:f9:96:53:55:d4:c2:f4:2d:
31:94:51:dd:22:a6:92:da:7f:83:4c:29:e7:1c:62:96:d2:1c:
d2:da:f4:fc:4b:83:36:e9:bf:49:6a:cd:07:1d:07:43:81:43:
b5:3b:5a:55:ac:6e:66:d4:4c:b5:c7:bd:e8:4f:1d:22:48:66:
de:2a:2f:56:ea:3b:2f:7f:c1:0d:cb:19:1c:a4:7a:ac:20:dd:
3f:3f:d4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:45:01 2025 by rpki-client