Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wl3IaXGyRtG4_Vo7vstBY5rs9iA.roa
File: wl3IaXGyRtG4_Vo7vstBY5rs9iA.roa (raw, json)
Hash identifier: iFg5SyiD/aHkY0B/DS/1TH94Z6MHmcGz0yYx/IVf+Ww=
Subject key identifier: C2:5D:C8:69:71:B2:46:D1:B8:FD:5A:3B:BE:CB:41:63:9A:EC:F6:20
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282826B922630A3849AF1CA48E8EADBC
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wl3IaXGyRtG4_Vo7vstBY5rs9iA.roa
Signing time: Thu 02 Jan 2025 17:55:07 +0000
ROA not before: Thu 02 Jan 2025 17:55:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200422
IP address blocks: 213.169.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:26:b9:22:63:0a:38:49:af:1c:a4:8e:8e:ad:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c25dc86971b246d1b8fd5a3bbecb41639aecf620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:70:95:11:e7:a5:0c:e4:a3:de:a6:3c:f0:9f:
54:b0:18:d4:28:9c:b5:2a:e5:71:8d:f8:42:93:49:
7c:a6:88:87:bc:9f:0b:c5:a0:79:6f:b0:4d:ca:36:
0f:48:53:88:ca:e3:c8:ba:13:36:88:3e:1e:75:2b:
41:7f:e8:04:a0:58:72:cb:f3:ab:25:e3:c0:b0:2c:
6a:c9:f1:45:bb:cc:97:dd:aa:93:f8:ff:f6:c1:6d:
c9:1a:c3:3c:31:53:15:ea:d6:70:22:97:4f:fd:4e:
ca:e2:45:a4:bb:63:7f:4c:4f:72:f4:a5:78:18:8a:
c2:15:c3:78:73:a1:6a:da:9f:ae:81:61:3b:8f:fc:
c9:14:e2:09:ab:6c:8d:9e:d5:28:17:64:eb:c4:0c:
37:6f:b8:00:de:9c:e9:ff:a5:60:1d:0d:e0:bd:5c:
13:e2:a3:e9:8f:7c:75:05:41:42:5c:58:b2:e9:1b:
bb:10:5a:aa:02:0e:d8:79:be:c6:03:3f:b8:ce:05:
27:8e:ef:07:db:e6:3c:9b:02:b8:c7:79:9b:bd:da:
ac:6f:b9:fe:e0:0c:e6:6f:20:98:ea:50:da:8b:2a:
c4:73:37:b2:19:7c:c9:1f:cd:d1:b6:2c:af:9a:14:
d9:e9:cb:83:c6:50:c9:8e:f2:4d:fa:f2:e5:68:aa:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5D:C8:69:71:B2:46:D1:B8:FD:5A:3B:BE:CB:41:63:9A:EC:F6:20
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/wl3IaXGyRtG4_Vo7vstBY5rs9iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.58.0/24
Signature Algorithm: sha256WithRSAEncryption
73:26:ca:ca:49:99:1a:cb:ff:51:08:00:f6:cb:75:f7:3f:70:
fc:3d:79:1d:06:42:58:18:c1:14:26:17:04:01:5d:e7:e4:56:
60:33:7e:16:2e:dc:93:bc:f9:c3:92:a5:6d:7b:68:5f:67:c6:
1b:1e:bc:6e:82:c7:c3:9b:cf:7b:6b:92:73:96:40:e7:b8:7a:
e2:17:7f:ef:0f:c4:f0:a8:e0:aa:ea:66:7c:0a:c8:fe:04:7e:
a6:0c:66:e7:07:ee:5d:b1:50:4f:fe:8c:e4:47:87:5e:6c:2b:
67:ee:0c:5f:13:28:79:81:88:6d:b3:4d:25:01:10:c8:db:e7:
ce:b4:db:db:dc:64:6e:68:dc:5a:e7:9d:02:85:07:38:bc:c1:
38:9f:ad:61:b1:bf:11:f6:a4:64:16:b7:ba:81:11:a9:43:ed:
11:3c:40:1a:ae:0a:b0:6e:34:5d:e7:58:66:48:b1:cb:86:1f:
b9:12:0e:63:4d:6d:5d:88:1f:3c:13:39:fe:30:d0:b4:9e:12:
14:dc:d8:b0:f8:8e:f4:71:d7:f6:ff:fa:56:7d:b4:d7:e2:0e:
e8:d9:0b:90:ee:7d:fe:69:17:4b:ef:9a:0c:60:a4:fe:7e:38:
e4:7a:f6:0e:ae:5b:c3:e6:5c:1b:2e:82:93:65:fe:93:7c:49:
55:8e:b6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:51 2025 by rpki-client