Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WOjukwigD4gLbRJdJSNFu8DvqPo.roa
File: WOjukwigD4gLbRJdJSNFu8DvqPo.roa (raw, json)
Hash identifier: ygSWINJhSDs9k1oNOL5/yxBhO7klyiaH49ubou538Qw=
Subject key identifier: 58:E8:EE:93:08:A0:0F:88:0B:6D:12:5D:25:23:45:BB:C0:EF:A8:FA
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018C62AF04AEF5FDC497A6A756206013A698
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WOjukwigD4gLbRJdJSNFu8DvqPo.roa
Signing time: Wed 13 Dec 2023 10:18:06 +0000
ROA not before: Wed 13 Dec 2023 10:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210579
IP address blocks: 79.172.221.0/24 maxlen: 24
79.172.222.0/23 maxlen: 24
79.172.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:af:04:ae:f5:fd:c4:97:a6:a7:56:20:60:13:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Dec 13 10:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58e8ee9308a00f880b6d125d252345bbc0efa8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:69:f9:99:36:9a:86:84:e2:71:03:e5:69:
b0:f4:47:32:ba:f0:f8:35:7b:a9:92:a4:74:3f:29:
c3:f4:7f:c8:17:bf:33:c3:30:cc:54:7b:c3:6c:db:
9b:a3:a3:a9:6f:7a:98:d9:7b:c8:f7:43:66:c4:8c:
b0:1a:98:b9:ad:65:4d:dd:08:2f:53:6f:4b:ce:5e:
45:83:90:05:ec:ee:a4:80:37:0a:89:3a:79:f1:8f:
d5:d6:dd:21:7b:2e:41:05:01:bb:ef:d5:11:c3:71:
f7:ed:fe:b5:6e:a5:b5:24:88:fd:7a:51:b9:73:b8:
c1:22:ad:46:18:84:3e:3a:b7:79:f2:1c:a4:d1:65:
73:7f:17:98:6b:f2:3c:b1:97:cf:17:2d:69:95:c8:
2e:09:de:88:44:e2:22:b6:8c:31:51:ec:bc:b1:97:
6e:b4:e5:3b:ed:45:52:5a:d6:f6:1d:89:d6:2f:f7:
d7:b2:dc:a2:90:2d:31:ea:c6:7b:1f:71:e7:18:01:
56:0c:ec:97:98:e6:06:a7:88:54:34:9f:72:4c:0f:
c5:58:84:d9:03:a4:fb:23:de:cf:58:ff:30:7e:34:
58:8e:cd:96:c9:98:ec:42:54:91:38:33:64:39:f1:
9c:58:ef:d6:52:d5:c2:0a:d5:47:31:3d:dd:cf:89:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:EE:93:08:A0:0F:88:0B:6D:12:5D:25:23:45:BB:C0:EF:A8:FA
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/WOjukwigD4gLbRJdJSNFu8DvqPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.221.0-79.172.224.255
Signature Algorithm: sha256WithRSAEncryption
7a:53:23:ce:5c:f6:e4:37:42:8b:37:1b:af:dc:96:6d:3b:42:
4e:c7:99:e9:6e:bc:95:96:36:1c:ac:3e:f4:7e:6e:3c:9d:e9:
6c:45:77:17:ac:92:f2:6f:d7:9b:c9:4a:e7:44:39:67:aa:27:
ae:13:f2:60:41:56:08:32:8c:9a:4a:9b:80:42:46:c5:26:f9:
b9:1b:46:ae:67:8d:f1:57:b0:f8:80:f1:d5:50:55:bc:1b:6f:
68:69:35:da:30:b3:28:84:90:0b:55:39:ae:c7:a3:8e:1f:bc:
67:d4:c2:18:03:ad:17:ea:93:f2:a6:c9:9c:c7:f0:eb:2e:6f:
e8:f9:52:e9:d1:01:a9:58:76:38:48:15:15:27:63:1d:67:41:
26:76:a9:02:25:72:1a:bf:1b:7a:75:49:6a:d6:46:6e:0c:eb:
7f:d3:a8:f9:09:ea:a8:4e:9c:7d:ef:73:a3:a2:cc:21:34:5f:
62:d3:c3:73:84:63:f2:3d:4c:68:94:7d:74:b6:11:b9:62:a7:
01:0a:33:66:58:7a:8a:56:95:30:ab:33:bc:2b:44:f5:87:57:
f6:a0:33:13:cd:4e:e4:f8:39:0a:de:b2:a8:9e:da:5a:18:04:
a3:66:db:a2:58:57:bf:a9:83:d3:80:af:42:53:30:d4:d3:cc:
6e:66:57:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:14 2025 by rpki-client