Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/wxwsQanfQy5790A813fRANF-qCc.roa
File: wxwsQanfQy5790A813fRANF-qCc.roa (raw, json)
Hash identifier: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=
Subject key identifier: C3:1C:2C:41:A9:DF:43:2E:7B:F7:40:3C:D7:77:D1:00:D1:7E:A8:27
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019426D93DCBCD8BFE681FEBB13601115FF3
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/wxwsQanfQy5790A813fRANF-qCc.roa
Signing time: Thu 02 Jan 2025 11:49:18 +0000
ROA not before: Thu 02 Jan 2025 11:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12693
IP address blocks: 84.38.72.0/22 maxlen: 22
91.203.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:3d:cb:cd:8b:fe:68:1f:eb:b1:36:01:11:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Jan 2 11:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c31c2c41a9df432e7bf7403cd777d100d17ea827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:28:ce:04:70:da:70:3b:f6:a0:26:40:69:7c:
96:4c:c8:27:1f:63:7e:a1:4c:3c:69:12:6d:19:d0:
fe:17:32:a5:2b:e0:2c:7d:36:4c:dd:84:34:8d:4f:
78:20:5a:77:38:7d:6b:6e:0e:00:77:23:b8:c0:5b:
54:fa:21:7e:f3:f3:bf:c6:14:e5:33:ee:fc:89:e8:
c0:7e:5b:8d:98:a3:79:9b:88:05:e9:a5:0b:bd:06:
f6:70:94:f6:c5:0a:94:81:c5:a2:f9:a2:e7:f7:fb:
4b:1c:df:6d:69:e3:d0:31:b3:5f:09:0f:75:d5:71:
ea:92:41:82:dd:e5:81:11:a6:73:3e:08:be:d1:c7:
9b:ce:ad:c2:c8:a6:23:b0:dd:5a:d9:33:a3:ac:3e:
84:4d:62:b7:83:35:19:f3:49:31:34:b4:5c:0a:7e:
1c:af:e6:2c:65:ef:bd:25:db:c1:69:19:ee:73:24:
c4:68:72:fc:df:43:e3:89:5a:fb:61:65:2e:57:ee:
cf:d1:30:00:94:85:45:f1:e6:c7:78:3e:34:3f:e8:
01:8a:8f:77:fd:ff:90:23:88:da:a7:86:03:11:04:
73:e3:62:07:69:8e:15:0e:86:33:0f:d6:4c:6d:00:
02:65:b0:cf:88:85:d3:e7:90:ca:f7:81:77:5c:0b:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1C:2C:41:A9:DF:43:2E:7B:F7:40:3C:D7:77:D1:00:D1:7E:A8:27
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/wxwsQanfQy5790A813fRANF-qCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.72.0/22
91.203.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:e5:1a:0a:73:d4:dc:56:c1:da:77:b2:37:4b:6c:fe:78:fb:
b8:33:1a:6b:b8:d3:8d:1e:2b:45:74:a6:04:d5:39:2d:b2:1f:
07:15:73:77:ea:42:46:e1:fe:f9:23:48:e2:df:b0:43:1d:7c:
40:40:7e:1b:f8:69:5c:ee:b3:34:b1:e5:e7:b8:c7:58:b7:63:
1f:a3:17:00:cd:df:9f:51:7a:0f:7c:85:d5:24:7d:a4:8e:56:
3b:76:30:ea:1c:61:65:54:24:b5:d2:1f:8b:29:c1:72:46:1b:
4a:65:1d:df:3c:40:16:2b:17:7a:52:05:9c:35:0c:93:d5:4a:
e8:dc:f2:66:36:00:ad:65:96:12:60:e3:39:fd:38:14:cb:80:
90:eb:b1:d7:c1:d9:16:3a:b9:12:c6:9c:28:52:87:4c:cd:8a:
4e:cf:e0:b0:d0:c3:a7:29:3f:18:df:c9:7c:e2:b9:1c:0c:8f:
73:bd:29:24:db:50:52:64:f2:78:25:fb:c9:11:03:c8:2b:53:
e1:3e:1a:4b:1f:d9:ab:f8:99:4d:82:0e:ae:e1:f1:6d:54:c0:
e3:fd:d8:79:08:5a:78:fe:70:05:bb:ee:b3:fa:30:41:f0:e1:
3f:62:f9:52:5a:cc:73:26:e7:76:c0:da:ac:80:f3:30:ab:a0:
5f:d8:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:25 2025 by rpki-client