Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/WcxkwTxMGLHIE9Wk_7rVEN14cjs.roa
File: WcxkwTxMGLHIE9Wk_7rVEN14cjs.roa (raw, json)
Hash identifier: tMqXA9KSFN7v1X2DyqPnegaaifWlFOznEAXXMaJeY4I=
Subject key identifier: 59:CC:64:C1:3C:4C:18:B1:C8:13:D5:A4:FF:BA:D5:10:DD:78:72:3B
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018C3EC8C9D564C62980EB0610F0ABD1F97D
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/WcxkwTxMGLHIE9Wk_7rVEN14cjs.roa
Signing time: Wed 06 Dec 2023 10:59:55 +0000
ROA not before: Wed 06 Dec 2023 10:59:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59692
IP address blocks: 95.164.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:c8:c9:d5:64:c6:29:80:eb:06:10:f0:ab:d1:f9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Dec 6 10:59:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59cc64c13c4c18b1c813d5a4ffbad510dd78723b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:a3:b1:82:4b:6e:84:31:ed:6f:6c:38:be:
f7:32:9f:bf:62:a4:f3:7f:c3:6d:ed:25:95:aa:02:
d8:61:34:d9:ef:dc:fd:70:39:61:43:db:2f:87:02:
4c:96:84:c4:f0:d2:af:84:72:c7:40:40:17:72:89:
00:89:55:2c:57:78:d4:86:e0:8d:21:ef:2d:5f:5d:
9c:ca:18:73:6d:46:6c:6f:ab:2c:9b:36:9e:2c:6b:
df:f5:43:35:29:79:08:8a:d5:ce:e0:a0:1d:0f:ff:
3a:ac:36:84:f8:fa:fb:d8:5d:cd:6b:3c:92:f6:27:
4f:e0:93:e5:d1:56:b5:7c:cb:3b:2c:e7:64:27:07:
59:ce:43:de:2f:3f:43:65:05:a6:d9:00:26:46:35:
f9:d3:7b:38:0a:e2:32:85:fd:82:fd:d7:fe:40:53:
23:f7:b2:aa:e6:47:86:cb:71:46:8f:10:50:2c:f5:
a2:c4:b2:bd:84:ac:c2:0c:bb:a6:80:0e:5d:d6:87:
cc:d2:51:a7:8d:07:c7:e1:80:59:ad:17:06:a1:3b:
c3:5a:71:02:b6:08:ba:44:0e:44:10:89:b9:a5:ed:
0c:d6:bd:1f:48:8c:64:d8:3d:4a:08:4d:fc:1f:a4:
5d:27:82:36:60:30:86:b7:3b:d5:23:9e:f7:dd:5a:
9d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CC:64:C1:3C:4C:18:B1:C8:13:D5:A4:FF:BA:D5:10:DD:78:72:3B
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/WcxkwTxMGLHIE9Wk_7rVEN14cjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.60.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f0:bd:e8:c5:0c:41:40:33:2e:76:3e:1d:08:7b:ff:b2:27:
67:41:83:86:c6:83:15:ad:e2:ce:eb:38:61:40:16:f8:8f:10:
be:14:ca:0b:f6:08:93:4c:c9:75:66:85:52:18:eb:f1:68:d0:
ee:89:f5:65:84:96:ee:0d:0c:95:ab:65:40:f9:69:af:70:c3:
59:85:c7:e0:14:fd:e4:6d:6d:ea:18:ee:a9:db:84:bc:b4:2e:
77:7d:0c:ea:6b:4a:fd:a7:86:93:fa:dd:71:37:f0:5f:5c:5b:
2f:f5:35:1c:23:cb:cb:a2:1b:33:b0:2e:f1:a8:5c:0f:84:1e:
6e:56:b4:2c:df:b2:b9:92:6e:ed:8d:0f:7d:58:bb:0b:8a:60:
13:4a:73:91:24:cd:71:79:ef:08:8f:ad:d2:e7:76:a9:84:38:
a1:b5:de:85:f3:3f:0e:31:09:ab:eb:eb:2d:01:5a:25:ae:31:
ee:71:55:5c:72:17:53:d4:89:0e:33:60:1b:89:ed:2e:50:e0:
90:d5:f8:9f:15:2d:eb:90:c4:ba:80:41:7c:39:6a:cf:2d:23:
82:33:27:7d:5b:51:8b:99:b5:28:95:af:4c:38:43:48:17:5c:
3b:b1:b4:82:d7:9d:2c:c6:69:09:57:78:4e:85:b5:7d:63:bf:
91:75:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:39 2025 by rpki-client