Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wWvCjNVphk92fPb1vY_qEiiBp2I.roa
File: wWvCjNVphk92fPb1vY_qEiiBp2I.roa (raw, json)
Hash identifier: IjSdnbV4KoQJHC1WMh37elZ5wg5bXsGbcnPe45JxgSU=
Subject key identifier: C1:6B:C2:8C:D5:69:86:4F:76:7C:F6:F5:BD:8F:EA:12:28:81:A7:62
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018FB8EE1953F7315B49E1652F7F54726DDF
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wWvCjNVphk92fPb1vY_qEiiBp2I.roa
Signing time: Mon 27 May 2024 07:22:42 +0000
ROA not before: Mon 27 May 2024 07:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 126050
IP address blocks: 109.203.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:ee:19:53:f7:31:5b:49:e1:65:2f:7f:54:72:6d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: May 27 07:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c16bc28cd569864f767cf6f5bd8fea122881a762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:c5:4d:1e:9d:6d:5c:b8:9c:60:04:db:0f:
36:0c:6d:b4:20:9c:b9:b6:69:a3:4a:ed:f2:5a:89:
2a:cb:2b:b7:f0:75:01:9c:16:36:a0:3f:4b:dd:5c:
48:d4:e9:ce:4a:3d:38:30:25:dc:10:c5:cf:6c:b7:
7e:7e:ed:71:a3:5f:20:92:aa:34:c5:fb:ce:d9:09:
cd:4a:f0:4f:66:c1:00:1f:8a:2d:89:49:21:39:34:
71:d7:a8:a5:e7:d1:5f:df:d7:89:43:5b:42:f7:7d:
eb:15:25:3a:2e:ed:09:8e:0e:97:c9:dc:cf:79:ae:
2b:0b:ac:19:b4:0b:ae:fe:67:a8:61:10:02:15:9f:
4d:6b:5b:5d:29:7e:4b:c5:a4:03:01:1d:af:50:84:
ed:f0:03:18:b4:01:c0:69:e6:ed:8e:93:fa:e1:3d:
88:ec:10:42:dc:0f:e2:65:d8:9d:8b:d6:c7:e4:d0:
b8:ef:92:31:e3:b6:5a:92:ef:4f:c2:97:75:ac:ea:
9f:e2:b6:af:3f:f0:9f:2b:f0:9e:39:82:90:6a:61:
c7:fa:69:55:65:db:3c:0a:a6:45:85:e6:f5:78:54:
46:14:3b:69:87:eb:94:30:b5:90:87:7e:b0:4c:89:
72:e3:19:14:4a:fe:9f:92:38:2c:bb:f6:06:c6:45:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:C2:8C:D5:69:86:4F:76:7C:F6:F5:BD:8F:EA:12:28:81:A7:62
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/wWvCjNVphk92fPb1vY_qEiiBp2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.203.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:49:7a:da:a6:29:71:86:ba:69:5c:77:8a:ff:7a:09:77:7a:
4c:d7:47:2f:e5:b1:a9:b7:27:6a:29:7d:09:40:4f:bf:8e:72:
17:a3:ac:2a:ec:cd:1c:a8:e8:dc:32:2d:41:c1:c9:95:93:5e:
22:a9:3b:71:f1:34:3f:cd:d6:4c:36:f5:1f:ac:ff:9c:78:fa:
98:bf:90:07:87:be:f4:ee:2e:9f:dc:25:5e:b3:61:76:6f:82:
bb:24:04:43:22:34:d2:f6:68:e8:32:8b:42:c8:be:1d:2a:cf:
8b:dd:2c:52:90:c1:c5:01:c8:0c:b6:03:5e:8f:35:b6:12:1c:
52:0f:65:9f:20:1a:bd:f5:64:c5:d4:80:16:99:c0:57:7a:98:
a2:ca:f6:75:bb:e3:05:2f:39:fd:a0:87:83:c5:ca:62:72:dc:
30:5a:5a:20:50:bb:eb:f7:13:05:d0:19:6a:2d:ff:11:b9:5b:
f4:9f:a1:b0:6d:84:5d:ca:c1:fd:15:e4:db:17:fe:77:b5:dc:
5e:21:82:be:19:be:fb:cf:9f:34:d8:c7:95:de:6e:d3:e2:43:
58:3c:6b:ea:5f:2d:e7:18:d9:e1:20:d0:70:96:e6:43:39:29:
86:56:ea:0c:d7:7e:4d:88:9f:c8:17:4b:c9:79:64:20:65:fb:
d9:d2:6a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:38 2025 by rpki-client