Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/WTb_e2ZbT1RhFs5jURahaZTbmG0.roa
File: WTb_e2ZbT1RhFs5jURahaZTbmG0.roa (raw, json)
Hash identifier: RbcCcF3mnkJdbE+uWey3rc4Y6DxWA7ai6ZTi1IMVv6k=
Subject key identifier: 59:36:FF:7B:66:5B:4F:54:61:16:CE:63:51:16:A1:69:94:DB:98:6D
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01942746FAA2D0A82C7A772FDBFC1815164B
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/WTb_e2ZbT1RhFs5jURahaZTbmG0.roa
Signing time: Thu 02 Jan 2025 13:49:10 +0000
ROA not before: Thu 02 Jan 2025 13:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 146.255.188.0/24 maxlen: 24
2a11:c880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:fa:a2:d0:a8:2c:7a:77:2f:db:fc:18:15:16:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 2 13:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5936ff7b665b4f546116ce635116a16994db986d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:58:c7:40:3c:8f:a9:82:09:76:f4:c2:b1:c1:
7f:77:58:ff:90:0d:20:a4:e4:68:9b:41:70:74:3f:
2d:c2:d6:13:4d:ad:45:df:c2:a9:0a:2f:9b:94:b8:
02:2e:9b:e8:79:85:be:3e:99:ee:ed:2a:45:00:dd:
fa:c0:8b:3b:32:d9:1e:b1:4d:92:d6:05:6b:44:11:
9a:d8:35:56:f8:aa:c1:5e:cd:7c:f3:5d:f7:81:0e:
83:7f:d5:dc:43:d3:af:77:80:67:51:b6:86:5f:22:
e1:61:0f:e9:01:ed:d8:f0:df:7c:9d:ba:38:fe:01:
5b:f8:b7:18:d2:77:1f:dc:79:fd:c5:22:ee:15:70:
d9:0d:4e:44:e5:d5:d1:fe:1b:a6:a4:5b:7b:24:0e:
5e:c9:b1:bc:86:a4:1d:b0:da:b2:02:7c:90:fa:bd:
83:da:cc:df:c6:d0:75:0d:59:b2:01:a1:1a:a8:45:
e9:ce:07:21:47:d9:82:77:7e:c5:bb:86:32:e1:79:
3d:33:a9:cb:27:0c:44:41:84:42:ab:bd:1c:44:05:
cd:02:4d:6e:8a:ac:42:0c:ab:c4:98:b5:06:c9:00:
75:61:d6:bf:b5:99:ea:d2:7e:eb:59:a3:1c:c2:c4:
79:95:69:1d:c9:ec:0d:14:28:d8:65:be:05:3e:82:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:FF:7B:66:5B:4F:54:61:16:CE:63:51:16:A1:69:94:DB:98:6D
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/WTb_e2ZbT1RhFs5jURahaZTbmG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.188.0/24
IPv6:
2a11:c880::/29
Signature Algorithm: sha256WithRSAEncryption
32:da:33:3f:ae:bd:ac:b0:b8:a0:c9:99:4c:08:4a:6b:86:4d:
8a:12:6f:5f:fe:16:62:83:52:f5:94:ff:80:7c:6d:bc:36:28:
dd:30:dc:eb:50:56:d3:a2:50:a9:1c:fa:47:30:52:56:12:d1:
25:d1:4f:ca:1c:8b:69:ef:b1:09:56:b8:ee:70:89:66:70:a6:
43:74:b6:80:83:0b:66:84:0f:b9:4d:88:ca:5b:4a:44:f8:0c:
ee:61:ab:e3:47:1b:b8:49:3f:e8:6a:29:84:14:39:34:4f:3c:
f9:18:45:36:26:e1:93:c4:33:c6:03:2e:a0:af:2a:f7:af:17:
89:5e:bf:1f:0a:02:a8:fa:12:f5:25:47:7c:a7:ff:ff:e3:98:
3f:35:14:f8:c7:f4:93:57:a2:27:04:c4:bd:43:ce:b9:cd:81:
b7:74:25:2a:e9:d6:27:cb:98:aa:a4:6b:b5:cc:91:2e:89:24:
e6:90:91:aa:94:42:68:38:0e:c9:bd:85:5c:a8:4f:77:f0:e5:
5e:50:bb:1d:e8:14:9a:61:28:0b:73:10:58:40:ce:f6:b0:36:
55:43:6c:83:bd:78:ad:30:3b:d5:0b:07:37:f1:6f:37:81:79:
15:67:da:b3:66:e5:f6:b4:1a:6c:21:30:6c:46:dd:13:9e:a5:
32:34:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:46 2025 by rpki-client