Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/WsvaN_584MNWNs47X7BpxagnKgA.roa
File: WsvaN_584MNWNs47X7BpxagnKgA.roa (raw, json)
Hash identifier: Erp19ZWhxC1GSMVmCKutk3JNndBCVS2/T+v+dm2bTPM=
Subject key identifier: 5A:CB:DA:37:FE:7C:E0:C3:56:36:CE:3B:5F:B0:69:C5:A8:27:2A:00
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D59F6E5A192E0FFC7F03FEAEA142E6
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/WsvaN_584MNWNs47X7BpxagnKgA.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8567
IP address blocks: 212.234.160.0/24 maxlen: 24
212.234.161.0/24 maxlen: 24
217.167.116.0/24 maxlen: 24
217.167.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9f:6e:5a:19:2e:0f:fc:7f:03:fe:ae:a1:42:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5acbda37fe7ce0c35636ce3b5fb069c5a8272a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:ae:f3:e6:98:df:00:d8:9e:ec:0b:68:19:
66:4c:05:f6:b9:b0:2f:3d:57:f4:fa:17:0d:af:68:
ad:a0:de:08:7c:ee:2e:14:3b:cc:97:cb:e1:07:65:
0e:15:dd:96:b5:80:9f:ed:7a:6e:12:0f:09:91:2b:
45:ad:f8:f2:6c:25:37:68:05:0c:32:e1:e9:9e:50:
ec:81:1e:5f:19:79:3a:74:cb:0f:67:53:4f:ed:71:
38:49:63:da:79:e5:a7:62:c5:7f:3a:a9:66:0f:96:
91:53:e7:72:6b:1c:25:aa:31:cb:46:ce:ae:b4:65:
2d:d3:55:d6:f1:29:65:7b:c6:55:45:51:76:0a:55:
59:06:a4:ec:53:f9:aa:99:9d:b5:19:1d:aa:fb:f7:
f9:ab:ca:50:83:79:40:44:81:a9:50:60:b5:10:39:
40:bc:66:ac:94:d8:11:7e:e0:54:10:74:95:2e:f5:
46:af:12:a5:96:90:1b:65:d3:1b:ab:29:91:54:19:
e2:56:99:ef:4a:25:cd:01:68:77:3a:df:24:e6:a6:
ff:22:11:0f:b6:8a:9f:29:85:c3:08:f8:a2:32:a5:
55:3b:56:07:f6:90:cf:1f:1a:87:c3:d3:ea:55:69:
29:e1:f9:6c:8d:ab:c8:d0:d8:fc:0a:e7:2b:29:87:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:CB:DA:37:FE:7C:E0:C3:56:36:CE:3B:5F:B0:69:C5:A8:27:2A:00
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/WsvaN_584MNWNs47X7BpxagnKgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.234.160.0/23
217.167.116.0/23
Signature Algorithm: sha256WithRSAEncryption
27:00:36:ec:b0:26:b1:95:7b:e9:1a:e0:2d:4d:92:45:85:f8:
93:bf:e8:4e:65:71:46:d3:48:5e:85:01:a8:68:e3:2a:5c:f1:
9a:69:43:73:25:1f:b8:5a:fb:73:e7:ce:5f:36:66:ea:17:ac:
f7:25:87:d0:f3:d8:be:c2:c0:d1:3e:d0:5d:99:76:c9:4b:01:
44:5a:1a:44:9b:fd:c4:ac:0d:d5:c1:4a:d7:5f:74:2c:44:e8:
1d:9c:f4:58:07:09:3e:4d:f8:db:82:9c:9a:4f:85:09:87:42:
59:f2:28:a2:ac:b8:de:7d:55:8d:21:26:d5:2b:70:22:46:83:
2e:a6:0c:41:6f:75:c9:1a:29:1e:a1:e2:f6:cb:8d:a4:92:0d:
e7:5d:4f:b7:5c:7a:3c:59:a7:c8:32:b2:2d:52:a0:e1:26:c3:
4f:78:de:02:78:92:f1:bc:04:d7:b1:65:19:74:49:05:24:e1:
91:8c:93:7b:dd:2d:d4:f7:e5:a9:81:a6:6f:ce:4a:6d:0f:85:
ca:1a:65:f4:62:a3:c0:e6:c5:16:43:6c:eb:01:c6:ca:d2:21:
d5:85:63:89:f6:64:0f:3e:ca:eb:2c:00:89:dd:ce:a9:99:de:
bd:8b:84:02:9b:25:6c:38:b4:ce:ae:5a:7f:f5:a9:19:df:02:
19:48:fc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:23:26 2025 by rpki-client