Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/WdrQA2XxuRSob5fch_vmulfj1p4.roa
File: WdrQA2XxuRSob5fch_vmulfj1p4.roa (raw, json)
Hash identifier: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=
Subject key identifier: 59:DA:D0:03:65:F1:B9:14:A8:6F:97:DC:87:FB:E6:BA:57:E3:D6:9E
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 0194222033CA2C3B1525A5C56B3C3FD8E164
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/WdrQA2XxuRSob5fch_vmulfj1p4.roa
Signing time: Wed 01 Jan 2025 13:48:43 +0000
ROA not before: Wed 01 Jan 2025 13:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212496
IP address blocks: 141.98.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:33:ca:2c:3b:15:25:a5:c5:6b:3c:3f:d8:e1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 1 13:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59dad00365f1b914a86f97dc87fbe6ba57e3d69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:2d:75:d1:6f:de:a4:9b:2b:69:5e:bf:ac:
2a:c8:79:ef:df:a9:aa:93:02:f0:8c:65:02:bc:82:
31:72:81:5f:b8:0d:6d:74:fc:ff:f3:cf:76:81:25:
15:7a:0f:6f:a8:86:01:f5:94:3e:c2:25:28:61:54:
4b:1a:6d:92:8f:79:7f:83:e8:e6:b7:04:15:e9:4b:
3f:ea:26:c4:1f:2a:3b:04:3d:52:2c:9a:fe:27:f0:
02:95:9d:fa:01:cd:2c:63:41:40:6c:1c:c4:58:b6:
4b:53:e0:e6:28:e5:be:d4:8c:81:08:6d:9f:ab:85:
6f:21:73:38:16:96:ad:17:32:6d:85:71:80:a1:5c:
76:c7:d8:84:bc:b8:c3:fb:30:d3:84:f1:b2:37:a1:
ad:33:a7:a4:9c:2a:32:46:de:bb:60:86:63:ee:56:
54:4f:a4:29:2f:76:81:7a:bb:2b:3b:48:7b:7f:47:
1b:dd:70:0a:1f:a7:7d:f8:64:2d:05:d2:12:df:07:
4e:29:ea:72:64:0a:db:db:ec:26:d5:e4:15:38:42:
a9:de:eb:8f:40:b3:c7:6e:07:52:47:dc:93:3d:20:
b9:b7:17:89:e3:d4:98:4a:b4:3c:82:f9:b3:04:0d:
a4:ed:d7:f3:af:4a:95:e7:32:cf:94:5f:17:cc:ee:
23:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:D0:03:65:F1:B9:14:A8:6F:97:DC:87:FB:E6:BA:57:E3:D6:9E
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/WdrQA2XxuRSob5fch_vmulfj1p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:62:96:ba:41:40:9f:fb:b3:89:8a:4d:99:ae:5a:34:30:28:
ca:1e:ab:47:a3:68:b5:a6:a0:5e:87:c7:66:2a:ab:38:a9:a5:
8b:12:6e:7c:01:8a:6a:aa:ca:41:83:a0:f9:fb:07:27:a7:f7:
10:86:75:7d:49:6b:1e:e9:b5:2a:d2:5a:ac:35:29:97:00:a7:
51:46:eb:2b:6f:63:d7:66:a4:c4:c5:40:ca:68:8a:f9:e5:60:
44:ab:aa:7e:e1:de:de:2a:33:be:9e:1c:e8:3f:bc:ca:61:e5:
6b:88:3c:a6:27:79:0d:cf:df:7b:b5:aa:d3:bb:a8:96:c9:e5:
4c:12:2e:ab:d6:86:75:e9:c3:6f:74:ce:80:5b:94:0e:bb:55:
70:d0:3a:1c:2d:3f:4a:80:f7:d7:79:08:4c:54:37:7d:5e:c9:
60:80:7f:81:1d:8a:c0:46:cf:31:19:81:d7:fc:3c:14:97:a2:
33:6a:81:23:10:e9:38:eb:ca:a2:f0:85:69:b9:28:70:b9:a0:
2a:c9:71:ae:79:5e:5e:de:61:44:50:a1:96:b7:06:38:78:51:
bf:8e:e0:fd:6a:39:c0:f8:fa:c9:90:c0:5d:04:94:41:22:18:
61:23:71:d9:44:2e:5a:f9:5d:9e:79:be:77:c4:06:c5:b0:b9:
cd:39:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:33:44 2025 by rpki-client