Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/O-Wl_Zh9230IL4oktlbERiHysKI.roa
File: O-Wl_Zh9230IL4oktlbERiHysKI.roa (raw, json)
Hash identifier: Gu1lYAp60jQgS6gz8JI0GJxDZJG43oUVNOnXDzwtmhI=
Subject key identifier: 3B:E5:A5:FD:98:7D:DB:7D:08:2F:8A:24:B6:56:C4:46:21:F2:B0:A2
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018E5551C224A86FF6308C396061F2A72CA6
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/O-Wl_Zh9230IL4oktlbERiHysKI.roa
Signing time: Tue 19 Mar 2024 06:06:45 +0000
ROA not before: Tue 19 Mar 2024 06:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:51:c2:24:a8:6f:f6:30:8c:39:60:61:f2:a7:2c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Mar 19 06:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3be5a5fd987ddb7d082f8a24b656c44621f2b0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:b4:9e:71:b9:a0:74:c0:e2:50:ae:24:be:
f4:5e:f3:8a:e9:6f:4c:ba:aa:62:6e:e1:c8:b1:a9:
3e:43:99:3e:f5:b5:e5:6c:d7:e0:dc:01:c1:e8:a5:
fd:de:e0:a9:03:39:b4:7a:ef:f5:6f:59:8d:61:bc:
22:f5:49:ce:60:df:39:83:ef:23:ea:1c:ad:42:07:
94:eb:41:86:2d:2a:e7:2f:20:9e:4a:62:bc:2e:c3:
a8:b7:7d:9a:62:74:1b:81:d7:ca:6e:7c:a3:57:d2:
50:93:d9:de:99:ea:aa:e1:8d:fd:2d:f2:11:42:4f:
f6:8e:41:51:1f:b2:d3:65:1e:ac:f2:c3:15:c3:04:
bb:0a:56:42:eb:13:61:e6:97:a5:d2:52:3f:57:22:
cb:e4:28:59:91:fe:b6:29:1b:d2:ba:b1:05:91:5c:
f5:8f:ef:3d:5f:8b:3f:8b:61:dc:e8:87:c0:f4:a4:
82:fc:43:c7:33:cd:f6:84:08:af:02:83:54:5d:20:
b5:e8:be:6c:cb:c6:98:1f:8d:1f:5c:4f:fc:d1:e7:
60:25:a7:65:ca:42:3a:d8:99:05:90:9f:62:c4:2a:
2d:c1:6e:74:dd:c9:99:60:b7:9e:35:ae:f3:2f:81:
3c:03:33:ca:28:14:3d:9b:a3:c8:62:04:6d:65:ee:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E5:A5:FD:98:7D:DB:7D:08:2F:8A:24:B6:56:C4:46:21:F2:B0:A2
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/O-Wl_Zh9230IL4oktlbERiHysKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/32
Signature Algorithm: sha256WithRSAEncryption
04:97:c0:e4:09:a2:a1:2f:41:8c:50:a7:39:63:2f:2e:0e:24:
1d:f2:70:0e:56:ae:78:31:54:f1:9d:28:81:92:d4:19:f8:46:
b6:db:c6:13:c1:80:53:2e:1f:46:35:b7:96:b4:9c:c4:e5:4c:
13:9a:36:66:05:fa:50:99:df:1b:2b:55:b9:4d:8f:f2:5d:52:
00:bb:90:b9:c5:56:76:39:bd:25:3c:5d:76:45:e4:44:db:5e:
28:d0:d6:a8:4a:dd:b4:41:7e:92:b5:6c:65:d3:9d:87:26:e2:
59:a0:05:b8:4b:bb:80:6d:f5:a9:22:21:47:ed:d3:a4:52:1f:
97:04:25:ac:f1:76:85:e4:33:7d:7a:a8:ac:22:7c:e8:55:17:
f7:83:98:37:0c:2f:6d:6b:7d:c4:69:9e:15:2c:4f:76:04:75:
54:22:13:6c:02:e8:33:37:d4:47:c6:8f:22:df:60:4b:e7:6d:
01:7a:63:c0:14:e9:7d:96:9d:34:37:21:06:8a:f1:08:ca:a2:
68:d2:24:83:4c:f5:ec:f8:e9:ae:78:f0:66:11:b3:12:a8:63:
04:d3:2b:7b:89:60:e0:88:ac:0e:00:dc:c0:0f:3e:40:8e:d5:
98:d4:a5:11:60:21:1e:bf:64:32:e5:bb:3e:f0:f4:18:73:ce:
46:42:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:42 2025 by rpki-client