Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/W3UE20l_8Px6YA0EYO3_NVSjfaA.roa
File: W3UE20l_8Px6YA0EYO3_NVSjfaA.roa (raw, json)
Hash identifier: SmuzL3cKoEYF8dbOh8LZGbcugb4WzfvFlt+ZhSQ+t5A=
Subject key identifier: 5B:75:04:DB:49:7F:F0:FC:7A:60:0D:04:60:ED:FF:35:54:A3:7D:A0
Certificate issuer: /CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Certificate serial: 0194236A38EC2D1118C15C40C93E027C62B5
Authority key identifier: EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/W3UE20l_8Px6YA0EYO3_NVSjfaA.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47848
IP address blocks: 91.208.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:38:ec:2d:11:18:c1:5c:40:c9:3e:02:7c:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b7504db497ff0fc7a600d0460edff3554a37da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:71:ea:e8:be:2d:55:bb:50:91:ee:87:dc:
19:b6:cc:81:82:3d:16:dc:f2:98:44:ea:31:8b:b9:
2c:08:57:b0:b3:72:f2:2e:68:4e:1f:80:b6:fb:5d:
60:4f:79:44:db:84:40:d5:a9:23:e6:0c:ef:28:eb:
af:ca:e4:57:3f:80:20:d8:8c:ee:c1:58:cc:19:48:
6c:9a:47:ba:41:a1:de:74:7a:4c:4e:38:23:96:b9:
3b:5d:48:c5:1c:ac:30:36:dc:a3:dc:cc:fa:96:2d:
9a:70:c7:78:e3:c3:2b:67:72:5a:c6:4b:3f:26:e4:
9b:d2:b8:1c:a9:7a:68:94:3e:d6:93:5d:93:aa:37:
a5:5b:67:13:76:7e:66:56:10:4c:76:35:4c:6c:d0:
5b:52:c5:04:9a:37:84:41:4f:b1:f8:40:66:bd:67:
9e:7c:e5:37:57:7c:22:4c:67:55:9b:56:05:1f:a2:
1f:f4:36:e7:7c:d6:5f:bd:92:50:bb:ff:13:8d:fd:
72:a2:fb:e9:48:a5:1e:6d:fe:2e:07:6f:4e:95:22:
3b:d4:e5:f5:d4:a4:3e:51:7e:a6:0c:ed:ac:d5:52:
46:79:53:f1:39:89:27:6b:9d:fe:39:fb:55:99:7c:
14:a3:b7:4c:b1:98:52:43:30:73:9d:a7:d2:82:13:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:75:04:DB:49:7F:F0:FC:7A:60:0D:04:60:ED:FF:35:54:A3:7D:A0
X509v3 Authority Key Identifier:
keyid:EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/W3UE20l_8Px6YA0EYO3_NVSjfaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7a:18:8f:74:ec:c0:7a:55:f4:13:68:26:3a:27:d1:3a:f2:
ab:4f:8d:b5:5c:75:0a:d0:46:02:80:7c:18:d6:cf:18:10:1f:
de:2c:b3:ef:61:0f:c5:db:04:df:5d:67:61:2c:c6:1f:01:79:
ab:8a:69:2f:cc:88:ee:d2:8f:4b:ac:90:72:7c:0e:13:37:c2:
35:a2:6a:5a:04:4c:06:b4:d8:84:6f:f8:4d:a7:b5:b7:a8:d7:
21:56:99:c4:0e:3d:35:f8:a5:5e:91:a2:f0:4b:2b:2a:60:fc:
be:93:6f:25:5e:e8:d3:9f:a1:5b:c5:f2:91:fe:a7:90:6c:84:
38:c9:20:a3:49:07:73:48:6f:61:e3:4c:d3:fb:12:04:8a:74:
ab:41:59:0b:e4:ce:f8:b3:89:0a:ca:ab:64:7d:12:40:7a:5f:
23:59:6a:9f:59:c9:c6:0f:44:85:34:ff:93:a4:85:55:c7:a9:
cb:a6:b4:de:67:57:a9:58:34:d0:54:fc:55:31:71:eb:f6:33:
b8:c0:cb:cc:71:e2:f3:d7:db:16:90:71:fd:6e:5e:64:d1:a5:
51:d0:5c:64:24:25:5b:37:d6:c1:1c:06:76:8e:dd:b1:37:29:
7f:ce:db:f1:37:e9:94:9e:90:7b:eb:22:59:a9:30:fc:5c:3b:
22:eb:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:01 2025 by rpki-client