Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/WaflIRWPiBqZASTG_nfNMy9iAwQ.roa
File: WaflIRWPiBqZASTG_nfNMy9iAwQ.roa (raw, json)
Hash identifier: iz0kvliJbeDu4k9eMM8+YesqNrgfDDlwzpfI5/f1ejA=
Subject key identifier: 59:A7:E5:21:15:8F:88:1A:99:01:24:C6:FE:77:CD:33:2F:62:03:04
Certificate issuer: /CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
Certificate serial: 03BBD917
Authority key identifier: 18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/WaflIRWPiBqZASTG_nfNMy9iAwQ.roa
Signing time: Sat 01 Jan 2022 12:03:55 +0000
ROA not before: Sat 01 Jan 2022 12:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199168
IP address blocks: 91.105.205.0/24 maxlen: 24
91.105.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62642455 (0x3bbd917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1836f266c2516bbf7bdeefe2e1ece1d0efcf8106
Validity
Not Before: Jan 1 12:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59a7e521158f881a990124c6fe77cd332f620304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:ac:ad:2c:5e:19:9a:c1:51:21:7f:5b:26:
93:96:78:37:97:6a:9e:c4:9a:90:42:45:a4:a5:61:
a3:06:8e:92:66:45:93:45:33:44:f6:b2:83:af:d5:
ad:19:11:fe:85:f9:4a:1b:8f:0b:f9:a5:50:99:fe:
b1:e8:66:14:d1:5d:39:6a:b6:16:06:c7:81:2e:9f:
15:a5:ab:b6:18:90:6d:f0:89:e1:63:09:5a:de:8e:
9d:ec:c0:01:1b:1c:f6:e6:45:9a:26:6c:b7:1d:8a:
a8:32:f9:2d:58:60:87:b3:d4:eb:d6:dd:42:4f:3c:
d8:c5:76:7a:9a:10:73:6a:d7:c8:c1:a7:6e:38:3f:
ef:c5:00:e4:87:60:9f:11:de:3a:5e:62:26:ba:34:
f5:3e:30:c5:79:20:ca:50:37:25:9b:63:c6:9b:39:
0f:ad:f2:83:66:63:6c:76:c0:32:6c:a6:e9:74:58:
44:84:2f:20:e8:cc:04:b6:98:25:4e:98:87:8f:4c:
7c:59:33:83:ca:d9:d5:87:d6:22:63:f7:a4:a4:e8:
f0:68:c7:08:86:db:86:85:d3:f2:2e:10:45:92:8f:
c7:24:1f:8e:4d:44:6f:6e:7d:76:db:15:55:ea:d7:
55:25:ec:2d:c5:2f:04:15:ae:56:d5:84:39:66:cd:
8f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A7:E5:21:15:8F:88:1A:99:01:24:C6:FE:77:CD:33:2F:62:03:04
X509v3 Authority Key Identifier:
keyid:18:36:F2:66:C2:51:6B:BF:7B:DE:EF:E2:E1:EC:E1:D0:EF:CF:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDbyZsJRa7973u_i4ezh0O_PgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/WaflIRWPiBqZASTG_nfNMy9iAwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cfbe5a-b074-45d4-b429-f31fb54f6a92/1/GDbyZsJRa7973u_i4ezh0O_PgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.204.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:a0:92:52:1d:ce:61:32:35:88:19:54:61:20:d4:7b:34:01:
d7:e8:4a:fd:b7:06:f1:81:13:de:cb:8f:b1:b7:36:20:e4:e5:
13:99:fa:02:3c:67:df:58:27:7b:c0:7e:fe:9d:d7:be:2f:76:
f3:c8:c7:c1:57:0a:c3:47:0d:73:99:6a:4b:e8:7b:e0:a5:0c:
1d:78:82:4f:c8:bb:af:85:ec:10:fc:1c:9c:98:cb:9d:67:59:
19:48:80:f4:42:30:4f:bb:ed:6a:4a:b6:d9:35:8f:95:9f:42:
84:86:fa:11:a6:46:20:8c:a5:32:97:bc:4e:a7:ef:08:6f:3b:
9c:2e:52:3f:1a:54:ea:4f:d0:a6:28:f1:66:4e:43:21:97:90:
77:76:65:0d:30:16:23:8e:cf:78:c0:2f:fc:e4:cc:ab:e2:13:
5a:9b:04:c0:87:de:39:70:cd:f9:c2:32:b0:cc:d1:a7:5f:22:
9e:f0:67:65:dd:45:73:dd:84:61:30:de:7d:06:c8:e3:04:50:
5b:76:28:31:05:6b:6d:5a:d6:22:3e:cd:a3:ea:ae:2f:29:61:
fb:60:bf:ed:28:e7:a6:8c:b5:10:70:ea:15:f5:75:5b:37:3d:
24:3a:33:04:8e:1c:22:eb:88:db:61:3f:f3:4d:d2:f7:25:58:
56:65:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:09 2025 by rpki-client