Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa
File: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (raw, json)
Hash identifier: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=
Subject key identifier: 5A:09:FE:67:78:BA:95:75:38:99:51:98:9F:DC:C4:3A:ED:98:E6:EA
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01942747477AC2F1AAB55E398E9D0125C004
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa
Signing time: Thu 02 Jan 2025 13:49:30 +0000
ROA not before: Thu 02 Jan 2025 13:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 185.226.56.0/23 maxlen: 23
185.226.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:47:7a:c2:f1:aa:b5:5e:39:8e:9d:01:25:c0:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 13:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a09fe6778ba9575389951989fdcc43aed98e6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:cc:0b:dc:91:b0:4d:cd:38:af:2e:84:71:
c9:5a:a2:4a:c3:cb:4f:0b:89:ee:3a:cc:28:b8:34:
21:7e:93:b1:f4:35:8c:7c:49:c9:69:ca:cf:a4:25:
5b:57:24:8a:9b:ca:b6:61:ab:b5:c7:c2:03:3b:dd:
68:94:a7:98:b5:34:c3:40:21:ab:72:03:85:a6:4f:
18:45:bb:18:81:23:b9:0a:a9:96:dc:8d:ec:e0:30:
4b:d5:94:6b:4c:9c:fe:02:04:98:fa:cd:4d:ea:0e:
ff:06:e8:aa:92:18:19:96:ed:44:cc:28:70:bf:fa:
7c:d4:f4:a9:e5:9d:3a:7e:0c:f7:d0:ac:01:87:ef:
95:af:c2:8f:59:b9:bc:61:6c:ba:6f:7b:65:0d:f9:
b0:54:ea:4a:23:1e:c9:3a:3a:e9:21:01:d9:1c:9f:
3e:44:ab:5b:bc:0b:11:71:cc:01:fc:59:55:e6:26:
37:a4:ad:a3:53:51:62:6b:38:f4:4e:1d:43:1b:77:
05:45:5b:36:7b:03:66:6c:3b:cd:9c:31:44:51:e1:
61:a0:a0:f9:e8:fd:30:7c:9e:36:ff:b3:a8:b8:80:
18:17:f2:ac:fc:e6:19:38:ae:19:49:db:07:01:82:
4f:e0:47:a7:54:c1:0b:f9:f2:0a:c7:ec:9c:5b:2f:
79:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:FE:67:78:BA:95:75:38:99:51:98:9F:DC:C4:3A:ED:98:E6:EA
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.56.0/22
Signature Algorithm: sha256WithRSAEncryption
78:d7:c6:4b:c1:75:ac:42:8e:e2:f6:5d:f0:80:8e:29:49:f0:
f0:a8:f0:19:23:cd:c5:5a:d7:ac:cd:ca:06:d0:2c:3e:75:30:
b8:83:a2:84:b1:19:08:58:cf:ec:b0:2f:3f:ca:e5:cd:48:53:
e6:42:aa:57:b2:94:f3:9a:d7:9a:90:f5:aa:26:f9:00:52:1b:
59:67:48:6c:b4:e6:2b:df:48:71:74:fc:e6:65:ad:77:aa:13:
bb:d3:d4:15:60:d0:6a:ec:d1:cc:bd:a8:8f:94:4a:39:19:5d:
53:53:ae:c9:88:ef:70:04:1b:24:a9:7e:4d:ca:2a:21:3e:e1:
9d:73:31:ef:0a:8a:6d:d6:1d:71:13:11:4f:1f:b3:a8:e7:cc:
e0:48:20:92:42:e7:91:f4:6f:87:be:b6:bc:38:15:8e:19:ec:
27:86:6b:fb:3e:d9:f2:29:c1:00:a6:cb:32:a3:cf:51:95:f1:
63:02:d5:01:77:56:d2:67:98:f7:bf:1d:d6:b2:c4:8a:6a:ba:
15:cf:d8:61:69:f3:ad:28:70:48:95:2d:bd:60:10:f1:0e:cd:
17:6a:42:19:44:11:12:94:7d:9a:3b:20:c0:ce:50:cf:26:9a:
c3:bb:4c:7c:74:94:2e:8d:ef:84:c8:17:10:d3:25:e6:14:62:
b5:df:b5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:51 2025 by rpki-client