Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WZHainzzMabQzMygIpns3KnEG64.roa
File: WZHainzzMabQzMygIpns3KnEG64.roa (raw, json)
Hash identifier: XBFqr7qJ3hQDkSl3QHxKLrjUrKOq86pdibHdWS0uFGM=
Subject key identifier: 59:91:DA:8A:7C:F3:31:A6:D0:CC:CC:A0:22:99:EC:DC:A9:C4:1B:AE
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 0194266C237BBE186834676563F407CCEF59
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WZHainzzMabQzMygIpns3KnEG64.roa
Signing time: Thu 02 Jan 2025 09:50:08 +0000
ROA not before: Thu 02 Jan 2025 09:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26383
IP address blocks: 5.39.252.0/24 maxlen: 24
5.39.254.0/24 maxlen: 24
5.144.178.0/24 maxlen: 24
31.192.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:23:7b:be:18:68:34:67:65:63:f4:07:cc:ef:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 2 09:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5991da8a7cf331a6d0cccca02299ecdca9c41bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:63:8c:c2:fe:47:43:e2:0d:1e:25:13:af:
05:0c:a0:11:dd:d5:76:bd:22:97:68:43:a1:24:4e:
a7:87:dc:46:0b:5d:35:15:7e:a5:a6:ee:6f:68:a2:
7f:d5:a9:c9:88:f6:41:0e:29:ba:1f:d9:58:92:4e:
8a:0c:78:0e:55:8e:6a:44:0b:b5:e5:61:e7:7f:a6:
eb:ba:5d:4f:e9:07:53:f3:46:43:26:f4:56:9c:2a:
8c:63:82:0b:9e:47:50:36:e3:26:b4:83:66:12:71:
85:e0:35:98:f4:dc:ca:f5:64:53:42:1b:0e:28:ef:
62:3a:ea:4b:e0:3f:7a:a3:ad:af:a0:ac:f7:f9:ec:
bd:9b:1f:5b:43:78:ba:83:86:32:8d:ec:fd:04:ab:
00:b0:f2:83:7e:ac:81:83:da:7b:92:ce:54:04:47:
7a:8c:92:f8:1b:cd:98:38:f6:38:d0:3b:64:ba:60:
07:e0:45:ce:be:7c:f6:79:66:41:a3:43:b2:be:c9:
20:3d:92:cf:d5:92:b2:43:af:51:fc:99:94:0f:aa:
c5:55:7f:56:3d:ce:76:0a:8f:cb:9b:77:48:56:bb:
31:4b:3e:1e:e1:c8:b7:90:17:e6:87:80:88:c6:92:
92:fe:5b:17:27:63:57:6b:33:02:21:1b:52:e3:78:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:91:DA:8A:7C:F3:31:A6:D0:CC:CC:A0:22:99:EC:DC:A9:C4:1B:AE
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WZHainzzMabQzMygIpns3KnEG64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.252.0/24
5.39.254.0/24
5.144.178.0/24
31.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
16:76:fa:e2:18:5b:91:92:d2:7e:74:ec:0c:5a:fa:4b:67:99:
a0:85:0e:d1:74:3d:45:71:c3:87:6e:ab:e5:80:2b:fc:bd:64:
c4:57:10:00:96:7a:72:b9:51:0c:0f:64:9d:60:47:ae:6c:4d:
f1:1a:0e:7c:8f:1c:06:1a:61:ce:0b:d1:16:c6:94:e4:6f:33:
19:6f:db:b9:de:39:9b:6b:5b:8c:f0:e8:a4:c1:c1:0b:ea:a1:
9f:27:c1:8a:2b:1b:d6:6b:54:8e:8a:f2:f0:ef:57:ab:30:8d:
88:cd:49:41:fb:63:65:40:db:12:9a:77:4a:87:b1:8f:9a:ae:
35:61:6a:00:a2:6c:80:7e:39:1c:cf:5e:31:fe:a5:88:6f:27:
9d:cd:6b:33:fa:21:a8:36:e4:c0:e1:0d:b3:31:7a:b3:94:e3:
8d:11:79:45:e7:29:ad:1c:32:b6:f5:d8:03:8f:9a:38:59:9d:
f3:9e:2c:cc:13:db:88:f8:2f:e3:d7:fe:8c:04:8a:d1:f4:1b:
1d:0f:6b:d9:38:f4:ab:f4:64:a2:41:62:e3:8f:19:e6:26:c7:
75:86:42:be:a6:d2:69:44:11:1f:72:2f:b7:07:85:bb:50:6d:
ae:2d:d9:5b:08:31:59:27:06:02:e1:cd:13:f6:43:09:2c:4f:
76:e5:1b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:26 2025 by rpki-client