Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WohBgOePqR35hSMfPj1Zz5dH6l4.roa
File: WohBgOePqR35hSMfPj1Zz5dH6l4.roa (raw, json)
Hash identifier: ufiBhx+UbH8IqJmmi8avlRIHO79c7baFJfbTCVFvmvc=
Subject key identifier: 5A:88:41:80:E7:8F:A9:1D:F9:85:23:1F:3E:3D:59:CF:97:47:EA:5E
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 0195607FC068F0A725156E6D0241F1995AD4
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WohBgOePqR35hSMfPj1Zz5dH6l4.roa
Signing time: Tue 04 Mar 2025 09:32:19 +0000
ROA not before: Tue 04 Mar 2025 09:32:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 82.206.48.0/21 maxlen: 24
82.206.96.0/19 maxlen: 19
82.206.96.0/20 maxlen: 24
82.206.112.0/21 maxlen: 24
82.206.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:7f:c0:68:f0:a7:25:15:6e:6d:02:41:f1:99:5a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Mar 4 09:32:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a884180e78fa91df985231f3e3d59cf9747ea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:65:cb:d1:49:79:00:23:46:38:40:91:ce:
f1:4f:41:9e:69:eb:a1:07:84:bc:af:4e:ad:d1:bc:
c9:49:de:b8:60:67:b9:7c:06:59:09:29:0d:5b:09:
d5:b3:97:8b:c8:c1:2a:01:dd:92:2b:99:64:08:0f:
8e:5f:58:32:7a:9d:00:b4:8e:fb:d1:65:fb:93:6d:
c8:94:b3:1e:2d:c6:ee:9d:49:e3:a2:c0:fa:c6:3a:
54:02:a1:8f:07:7b:20:56:e9:e0:cc:ba:ab:21:0e:
3d:40:7c:00:8d:70:06:2b:68:27:3b:79:35:ae:21:
59:eb:a7:56:52:fc:38:e8:ce:87:b7:69:69:53:e9:
e2:cd:2c:63:26:94:ce:8d:c9:28:87:aa:b0:90:01:
9e:f2:2d:7a:94:0b:dc:43:65:1c:59:44:16:b7:93:
68:7d:f2:93:0b:cf:fa:bb:cd:05:0b:ba:fc:a8:cb:
6f:34:7a:49:ab:1f:1f:59:bc:fe:04:86:b8:68:e1:
19:80:1f:d8:2c:ed:9d:f8:77:d9:fb:1c:81:db:72:
0b:6b:87:f2:96:11:74:c4:4c:07:39:29:53:f1:01:
47:0c:a9:70:6d:12:37:44:38:1d:3c:b0:46:22:69:
72:a5:8b:40:f5:20:b5:7c:4c:79:28:b5:19:28:43:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:88:41:80:E7:8F:A9:1D:F9:85:23:1F:3E:3D:59:CF:97:47:EA:5E
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/WohBgOePqR35hSMfPj1Zz5dH6l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.48.0/21
82.206.96.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:5c:e8:66:4f:56:dd:1b:05:21:ec:81:d8:c0:c7:c4:5c:29:
96:c3:b0:f1:41:48:81:59:78:ba:2f:aa:fe:b0:e3:0a:20:cd:
6a:c7:c9:c4:07:dd:4c:89:d4:c8:2d:76:b5:57:f4:c7:cf:20:
d6:65:90:84:14:bf:08:81:da:f2:21:d0:59:df:21:fa:11:ff:
d8:f9:fe:e0:9f:9b:36:99:d9:f2:6b:34:06:9b:33:a1:e3:05:
e1:da:f7:13:a5:a5:73:4e:4f:e5:8c:1e:b3:37:73:f2:4d:80:
f4:2b:9f:7f:df:48:83:fc:0f:16:9b:f7:f8:ee:4e:3e:03:8c:
c6:b5:57:59:a7:98:94:eb:a5:1b:72:a9:d3:20:4f:1b:59:02:
a4:ee:fa:3b:3d:58:e2:99:77:c8:2d:e8:8f:41:b1:e7:ea:d9:
09:0d:a9:6e:d8:56:3d:4b:9b:5a:12:a2:25:14:be:96:70:da:
03:ad:d9:99:fa:e0:ee:cb:3d:80:92:9a:01:6e:42:14:ed:c0:
2b:66:c7:6a:c9:38:73:ab:7a:40:b7:a6:63:20:63:af:44:ba:
2f:74:78:c5:3e:38:9f:c1:c3:a3:4c:4b:4a:b6:e8:34:e6:ee:
7e:84:f1:76:54:5e:f3:bc:81:d5:b2:d3:3f:b3:ab:9d:93:e5:
46:0f:90:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:34 2025 by rpki-client