Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2d401e-06eb-4309-b556-1d621238c4fd/1/WkgezF_yLei1SclXCYZSSnafuYw.roa
File: WkgezF_yLei1SclXCYZSSnafuYw.roa (raw, json)
Hash identifier: zJ7k3a1ldkT0f6zaOMfymLFFYVwD3BrjCpZHWs1FKAc=
Subject key identifier: 5A:48:1E:CC:5F:F2:2D:E8:B5:49:C9:57:09:86:52:4A:76:9F:B9:8C
Certificate issuer: /CN=efea1063575c710d50c43f1c7a1a6883f84d9498
Certificate serial: 01896478E8AC44236765C1D51BEC923EC53C
Authority key identifier: EF:EA:10:63:57:5C:71:0D:50:C4:3F:1C:7A:1A:68:83:F8:4D:94:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oQY1dccQ1QxD8cehpog_hNlJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2d401e-06eb-4309-b556-1d621238c4fd/1/WkgezF_yLei1SclXCYZSSnafuYw.roa
Signing time: Mon 17 Jul 2023 15:29:52 +0000
ROA not before: Mon 17 Jul 2023 15:29:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 89.248.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:78:e8:ac:44:23:67:65:c1:d5:1b:ec:92:3e:c5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea1063575c710d50c43f1c7a1a6883f84d9498
Validity
Not Before: Jul 17 15:29:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a481ecc5ff22de8b549c9570986524a769fb98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:b7:78:50:d8:ce:80:ce:ca:28:e1:9c:96:
4e:5c:94:9a:06:d1:3a:9d:44:fd:93:d9:b5:c9:98:
ae:27:4f:8a:a6:0f:8c:8d:90:88:c0:d9:ae:c4:02:
fe:6e:d6:a7:cf:b4:b1:0d:18:8b:06:e4:6b:f9:44:
88:ae:a4:41:cb:a5:92:37:d6:1b:34:b5:a9:c3:a6:
fa:a4:ac:fb:df:4f:84:e8:ae:13:c4:19:2d:29:d0:
db:24:6c:50:32:0d:e4:ff:b7:cd:d9:7f:34:c5:02:
e8:fe:cd:aa:f2:f5:d9:82:af:c7:12:59:cc:c1:7e:
3a:5e:96:95:16:86:0b:e3:83:79:bb:01:08:f7:77:
84:aa:fc:0d:68:f6:4b:47:7e:14:2e:c1:57:a2:ea:
7f:8b:29:50:cc:33:92:d3:59:19:5a:c3:da:41:75:
92:a4:ef:5a:2a:08:ba:ec:84:19:9c:d3:64:85:de:
b1:d2:d7:c5:3d:85:b3:2a:79:f1:e1:71:93:3b:5e:
a3:d9:85:d0:45:d7:15:86:22:c8:aa:6e:66:16:a7:
11:9f:d7:dd:18:f4:dd:35:77:e2:a8:76:bc:58:fb:
fa:8b:ab:96:ee:b1:ea:17:06:cd:2a:9f:ce:62:0d:
99:6d:fa:fc:08:41:5a:d1:38:20:e9:5e:5f:a0:86:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:48:1E:CC:5F:F2:2D:E8:B5:49:C9:57:09:86:52:4A:76:9F:B9:8C
X509v3 Authority Key Identifier:
keyid:EF:EA:10:63:57:5C:71:0D:50:C4:3F:1C:7A:1A:68:83:F8:4D:94:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oQY1dccQ1QxD8cehpog_hNlJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2d401e-06eb-4309-b556-1d621238c4fd/1/WkgezF_yLei1SclXCYZSSnafuYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2d401e-06eb-4309-b556-1d621238c4fd/1/7-oQY1dccQ1QxD8cehpog_hNlJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a3:70:54:01:cf:ad:3c:e8:52:08:ae:ce:11:79:a2:fb:93:
43:95:ce:37:19:2b:f2:e4:f0:7c:9e:af:d2:7b:83:80:74:96:
50:92:06:0d:ae:8a:8e:57:73:97:20:c5:47:e5:99:b5:18:e2:
47:e3:21:3b:bf:88:3d:9c:8d:6c:27:98:58:10:1f:94:f0:e8:
1e:99:05:39:f6:3d:56:a6:f4:a6:91:8b:ae:a0:5c:82:19:93:
01:d7:5e:61:0f:1b:e7:2c:d3:ad:52:d0:51:ec:7c:8d:93:9d:
52:15:6e:f6:7d:9b:81:5f:7c:f5:79:32:2e:0f:68:50:70:da:
4d:3e:d2:86:fd:48:cf:e8:6b:1f:a1:f6:48:47:74:13:9e:78:
db:16:76:5d:7a:d9:c9:40:9e:d9:97:a8:a7:36:48:e9:c5:82:
7f:84:f8:77:71:35:40:2e:58:27:61:0d:8c:ac:ae:c3:14:a4:
ee:31:16:ce:58:a8:97:dc:6b:c8:64:b4:d5:49:36:ce:c1:7f:
10:20:82:4c:ad:7b:59:b0:3c:51:32:00:47:f5:85:1a:51:24:
b3:a1:fc:8b:62:92:93:75:d9:31:55:d4:46:3d:e4:56:8c:ac:
84:81:95:dd:98:11:dc:31:2a:d1:88:0a:50:ff:b3:27:26:2c:
aa:28:c1:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkeOisRCNnZcHVG+ySPsU8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZWExMDYzNTc1YzcxMGQ1MGM0M2YxYzdhMWE2ODgzZjg0
ZDk0OTgwHhcNMjMwNzE3MTUyOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTQ4MWVjYzVmZjIyZGU4YjU0OWM5NTcwOTg2NTI0YTc2OWZiOThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5C3eFDYzoDOyijhnJZOXJSaBtE6
nUT9k9m1yZiuJ0+Kpg+MjZCIwNmuxAL+btanz7SxDRiLBuRr+USIrqRBy6WSN9Yb
NLWpw6b6pKz730+E6K4TxBktKdDbJGxQMg3k/7fN2X80xQLo/s2q8vXZgq/HElnM
wX46XpaVFoYL44N5uwEI93eEqvwNaPZLR34ULsFXoup/iylQzDOS01kZWsPaQXWS
pO9aKgi67IQZnNNkhd6x0tfFPYWzKnnx4XGTO16j2YXQRdcVhiLIqm5mFqcRn9fd
GPTdNXfiqHa8WPv6i6uW7rHqFwbNKp/OYg2Zbfr8CEFa0Tgg6V5foIbruQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpIHsxf8i3otUnJVwmGUkp2n7mMMB8GA1UdIwQY
MBaAFO/qEGNXXHENUMQ/HHoaaIP4TZSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNy1vUVkxZGNjUTFReEQ4Y2VocG9nX2hObEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZDQwMWUtMDZlYi00MzA5LWI1NTYt
MWQ2MjEyMzhjNGZkLzEvV2tnZXpGX3lMZWkxU2NsWENZWlNTbmFmdVl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yZDQwMWUtMDZlYi00MzA5LWI1NTYtMWQ2MjEyMzhjNGZk
LzEvNy1vUVkxZGNjUTFReEQ4Y2VocG9nX2hObEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfhGMA0G
CSqGSIb3DQEBCwUAA4IBAQCko3BUAc+tPOhSCK7OEXmi+5NDlc43GSvy5PB8nq/S
e4OAdJZQkgYNroqOV3OXIMVH5Zm1GOJH4yE7v4g9nI1sJ5hYEB+U8OgemQU59j1W
pvSmkYuuoFyCGZMB115hDxvnLNOtUtBR7HyNk51SFW72fZuBX3z1eTIuD2hQcNpN
PtKG/UjP6GsfofZIR3QTnnjbFnZdetnJQJ7Zl6inNkjpxYJ/hPh3cTVALlgnYQ2M
rK7DFKTuMRbOWKiX3GvIZLTVSTbOwX8QIIJMrXtZsDxRMgBH9YUaUSSzofyLYpKT
ddkxVdRGPeRWjKyEgZXdmBHcMSrRiApQ/7MnJiyqKMEG
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:29 2025 by rpki-client