Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/wcgFMyvWhqJvffO8wVrnzqPEWeA.roa
File: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (raw, json)
Hash identifier: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=
Subject key identifier: C1:C8:05:33:2B:D6:86:A2:6F:7D:F3:BC:C1:5A:E7:CE:A3:C4:59:E0
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019420D64E9E6CF31BC179284E77C62168F3
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/wcgFMyvWhqJvffO8wVrnzqPEWeA.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35489
IP address blocks: 213.145.103.0/24 maxlen: 24
213.145.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4e:9e:6c:f3:1b:c1:79:28:4e:77:c6:21:68:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c805332bd686a26f7df3bcc15ae7cea3c459e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:b9:ef:b2:db:82:17:f7:e4:9a:c5:bb:eb:
18:1e:e7:bc:2c:fc:1d:4f:ff:32:b1:08:6b:09:9b:
7f:48:22:b4:52:23:79:92:34:cd:e3:f1:bd:86:d5:
7b:ca:8b:ef:47:90:75:45:d0:ac:aa:69:b5:c9:75:
38:ab:52:aa:e8:b3:97:33:83:a6:de:88:ca:9c:2f:
8a:2a:1a:51:71:b0:f9:b2:f6:89:97:36:ae:42:29:
18:15:84:ad:e8:2a:a6:ee:d0:a4:da:cb:06:3c:73:
b9:40:1f:f1:67:b0:7e:cd:20:c8:39:25:b3:88:fb:
fb:1c:83:99:f3:4b:53:04:fe:22:f2:97:29:64:57:
13:51:05:ce:1c:6f:68:29:4d:36:ab:4a:ed:8d:cf:
c0:1c:60:23:a6:39:1f:1e:c7:c5:41:73:35:16:e6:
ad:38:89:4f:da:3c:56:53:71:0a:d8:01:26:c4:15:
dc:1d:33:9c:06:7c:b1:89:15:66:97:e2:96:52:17:
ec:bf:77:c2:24:8e:c0:0b:0d:d2:c5:dc:82:cb:5a:
c5:4d:9a:ff:5c:6a:46:af:34:a2:fa:76:b3:fe:62:
ca:04:fd:7c:9e:04:a7:81:90:8b:02:97:8e:cf:ca:
1b:ea:ed:82:69:9d:ce:d2:a6:83:c2:1d:77:b3:ad:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C8:05:33:2B:D6:86:A2:6F:7D:F3:BC:C1:5A:E7:CE:A3:C4:59:E0
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/wcgFMyvWhqJvffO8wVrnzqPEWeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.103.0/24
213.145.108.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:5e:dd:53:34:c0:fb:35:be:7d:e8:21:3b:67:fe:1e:f8:c2:
d9:fe:d3:e2:9d:8c:a1:5e:19:b5:9d:08:01:e6:00:94:15:b0:
22:6c:33:1d:d3:78:77:46:36:57:d7:04:bc:9d:22:32:ca:15:
ca:50:46:3a:9f:8b:b8:ed:da:d3:58:f9:5c:a4:d2:12:47:14:
a0:14:e4:81:c7:5a:98:b7:4d:24:b2:a8:8d:61:2f:b2:05:44:
0b:21:34:b8:be:4a:26:9b:99:e4:5a:fc:87:03:9f:95:ab:f0:
c1:5b:ba:19:bd:9d:5b:cc:a2:0d:7c:95:aa:de:7a:99:64:29:
6d:89:55:0a:8a:fa:f4:ab:ef:9f:5c:0c:0a:4f:f1:be:a9:f0:
62:13:cf:53:2f:61:5b:9f:59:9c:01:e7:78:b7:c4:d5:f1:26:
76:b8:c0:00:5d:52:b1:84:0e:e3:cf:6f:08:6b:8e:f8:54:43:
0b:c7:38:e6:c1:ee:a9:60:27:15:48:1b:dd:28:a8:ce:d8:ec:
43:75:37:65:9c:05:c5:ae:e8:87:cc:d0:57:6a:bd:cd:57:77:
10:6e:e2:77:e9:13:11:34:c0:fd:b7:11:cd:ae:4d:4c:35:be:
36:3a:3f:b7:95:8f:8a:10:3e:a2:7f:5f:68:4c:d2:ba:38:e1:
2f:a1:0c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:51 2025 by rpki-client