Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/WOQXF6ljvMfg6a1iim5XO2d2AzY.roa
File: WOQXF6ljvMfg6a1iim5XO2d2AzY.roa (raw, json)
Hash identifier: DO1A3OyEsz+wkWLPDOF3p1018G9/DaOn8rJKq+aYEbY=
Subject key identifier: 58:E4:17:17:A9:63:BC:C7:E0:E9:AD:62:8A:6E:57:3B:67:76:03:36
Certificate issuer: /CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Certificate serial: 018AD15649A0059E2CA76006C477D0B52BEF
Authority key identifier: 20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/WOQXF6ljvMfg6a1iim5XO2d2AzY.roa
Signing time: Tue 26 Sep 2023 11:53:27 +0000
ROA not before: Tue 26 Sep 2023 11:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57685
IP address blocks: 171.25.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:56:49:a0:05:9e:2c:a7:60:06:c4:77:d0:b5:2b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d617bdb5d768e395e49b41cd81217bd3163ab3
Validity
Not Before: Sep 26 11:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58e41717a963bcc7e0e9ad628a6e573b67760336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c3:51:d6:9c:e5:cc:fa:af:ed:bf:07:fe:24:
dd:17:26:fa:ad:fe:e8:c1:13:f5:e8:bf:8b:f9:b8:
86:ce:b6:03:95:09:f3:3b:8f:c5:08:ce:ac:6c:74:
96:51:bb:ec:ab:1a:ae:cb:64:5a:3f:16:aa:57:5b:
77:f7:dc:dc:57:36:0c:e9:d5:78:96:2b:f3:25:e6:
b1:ec:c0:99:0b:f0:91:af:50:75:7c:f1:8f:c1:96:
e7:e7:f0:12:e3:6f:00:db:02:40:b9:71:b0:af:5e:
95:72:b6:b2:e7:11:f3:28:8d:c9:e0:ef:d5:b7:fd:
d5:f9:5d:39:7d:00:3e:98:88:7d:dc:50:36:eb:f5:
4c:66:2b:49:49:30:a1:c0:ce:a7:e4:f1:26:91:c3:
d6:0d:87:7d:97:23:37:8c:ed:98:68:d4:49:a9:0f:
72:46:c6:62:74:92:8f:22:5b:76:66:c2:69:66:76:
e1:4d:a9:01:7c:2b:2c:70:2f:b4:13:62:ce:41:07:
7a:11:4a:1c:15:cf:43:8d:4b:8b:ef:13:42:86:12:
61:20:77:16:ca:93:81:82:62:b3:78:c3:57:30:a3:
ce:48:4d:e9:c6:00:2d:82:15:46:b8:88:a4:4b:e3:
4c:3f:36:78:08:3e:b8:80:68:19:55:34:3e:9f:0b:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:17:17:A9:63:BC:C7:E0:E9:AD:62:8A:6E:57:3B:67:76:03:36
X509v3 Authority Key Identifier:
keyid:20:D6:17:BD:B5:D7:68:E3:95:E4:9B:41:CD:81:21:7B:D3:16:3A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INYXvbXXaOOV5JtBzYEhe9MWOrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/WOQXF6ljvMfg6a1iim5XO2d2AzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/808471-7daa-4cd2-a860-069da9c84785/1/INYXvbXXaOOV5JtBzYEhe9MWOrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.179.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a2:68:ec:91:99:af:83:fe:ba:4f:97:7f:3c:13:1b:47:0e:
41:c5:cb:2b:4f:e2:08:2f:25:0d:f0:83:c1:50:7b:4b:5b:1d:
46:2f:4e:61:da:bb:94:81:19:85:6d:7f:5c:52:ed:62:5c:ef:
30:7e:bd:ca:07:5d:ee:fe:d0:77:31:55:eb:ae:74:8a:49:1e:
14:4a:dd:9b:96:f0:2b:90:ae:59:d8:24:76:a4:b0:3d:83:96:
f2:1f:74:b7:3e:b4:26:cd:12:d0:1d:b1:2d:a1:44:78:e5:92:
77:73:b0:c2:a2:20:21:69:78:1f:23:e8:fd:ff:98:51:05:e6:
61:cb:7d:b7:a3:6b:d8:7b:8f:a9:ef:95:e0:f0:75:b1:1d:ae:
a6:65:77:61:1a:34:2e:a1:e0:91:21:e2:cd:09:23:9f:e6:6d:
2b:31:f6:93:24:d8:68:b5:58:83:50:c1:24:14:ec:64:17:10:
e9:27:6a:a9:17:a4:e8:13:b6:cd:8a:c7:91:b3:b0:18:cf:da:
58:01:21:f7:f4:37:58:3c:59:33:57:d7:c8:d1:45:27:69:e8:
d2:a8:ee:61:80:99:96:8e:76:32:4c:73:48:16:d4:7f:3a:fa:
c2:af:f2:37:a3:37:d8:92:e6:10:b6:58:37:ef:7b:8b:e0:6a:
ab:ae:16:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:55:18 2025 by rpki-client