Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/wg3QQMDNs8Mlfqkq_6MV7Mkue1E.roa
File: wg3QQMDNs8Mlfqkq_6MV7Mkue1E.roa (raw, json)
Hash identifier: Bp8atb7JATCUwFsEv46VDw5f3cEkmS79FccSa79aW60=
Subject key identifier: C2:0D:D0:40:C0:CD:B3:C3:25:7E:A9:2A:FF:A3:15:EC:C9:2E:7B:51
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 045BBCDB
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/wg3QQMDNs8Mlfqkq_6MV7Mkue1E.roa
Signing time: Sat 01 Jan 2022 05:56:29 +0000
ROA not before: Sat 01 Jan 2022 05:56:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41075
IP address blocks: 5.56.32.0/24 maxlen: 24
5.56.39.0/24 maxlen: 24
2a01:47c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73120987 (0x45bbcdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Jan 1 05:56:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c20dd040c0cdb3c3257ea92affa315ecc92e7b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:07:95:7b:d6:57:a5:53:59:80:df:0d:9a:
b9:9c:3c:44:37:e3:8b:50:e7:f5:a3:dc:25:a9:de:
29:65:86:60:a5:c9:4b:7b:46:ca:ff:98:a3:e3:c2:
68:ae:c6:57:10:a8:a4:45:3b:f9:1e:8f:1e:0e:20:
be:5b:82:25:4b:24:46:94:03:94:c2:7b:c1:c7:7c:
5d:90:34:29:54:e9:65:7a:05:f4:fc:8d:1b:db:53:
96:f7:37:d1:e9:55:a0:b8:a3:01:40:3e:18:eb:1a:
88:ec:81:9d:18:b8:00:45:4d:82:ee:e8:c6:66:e9:
a4:8c:9f:e9:86:94:f8:68:fb:b2:69:2f:40:bb:9f:
fd:a5:d5:8f:9a:8b:df:07:c3:91:a4:c0:ab:83:ed:
f7:16:22:4a:95:61:d6:bc:5f:da:0f:71:b3:e4:78:
e6:b4:e8:0a:50:3c:13:2f:50:3d:99:ab:4d:f9:69:
90:8c:52:50:f8:5a:6e:bc:0b:51:c0:ac:d5:40:32:
e3:ec:3a:c3:22:ac:76:54:4d:1e:7f:ed:db:00:b7:
a3:61:54:a9:5a:aa:67:3a:8c:10:8a:73:1b:90:77:
f2:e2:86:bf:1b:99:93:53:87:79:a9:8f:da:bd:ef:
69:42:8e:e5:e5:d4:88:ad:a5:34:6c:78:af:38:ab:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0D:D0:40:C0:CD:B3:C3:25:7E:A9:2A:FF:A3:15:EC:C9:2E:7B:51
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/wg3QQMDNs8Mlfqkq_6MV7Mkue1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.32.0/24
5.56.39.0/24
IPv6:
2a01:47c1::/32
Signature Algorithm: sha256WithRSAEncryption
15:de:55:85:8f:a7:b3:58:28:4d:17:4c:32:ee:80:f2:c2:41:
08:8d:c0:19:d2:71:a8:30:46:2d:bc:5e:aa:d0:41:31:82:f8:
bb:b7:02:fe:4f:c2:30:71:bb:51:85:3a:59:f2:a1:15:06:01:
7d:eb:39:6b:46:0f:34:90:d3:f0:cb:80:2f:0f:29:ca:34:12:
0d:2d:6d:77:f3:b6:34:32:20:c2:92:c1:12:7e:e1:9e:13:f0:
bb:b7:10:61:2d:ea:66:56:b5:42:6e:b5:bb:4e:d1:b4:c2:59:
bf:61:81:7f:fc:fc:b1:8d:cd:0d:aa:e0:0a:07:85:8c:44:42:
a6:6d:60:1d:0e:33:77:56:70:59:39:4f:24:15:bd:ca:32:a2:
16:07:42:b0:f9:a7:b0:32:da:16:0f:f2:b1:76:15:ba:72:a7:
a7:4a:01:3c:48:3c:71:a1:ba:ae:dd:13:f5:3f:1e:02:66:ba:
5d:25:b6:99:df:fd:03:bc:e4:0d:d3:9a:ac:a7:1b:b9:71:88:
54:97:04:b8:ed:16:be:4d:ba:77:5b:e1:a9:04:9c:7b:f7:21:
1d:75:f4:e8:5c:66:d7:ab:01:1a:b6:3e:d7:17:bd:56:ff:07:
4e:91:a8:d8:7a:ca:75:d5:3b:04:b4:05:79:2b:cf:8d:37:72:
2d:c1:d5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:35:49 2025 by rpki-client