Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d74732-c163-4c64-adb2-9585231d0226/1/wfin0Sj1kVc2QXYAEtC1lstgaIs.roa
File: wfin0Sj1kVc2QXYAEtC1lstgaIs.roa (raw, json)
Hash identifier: bn7+xleKOAMWIRQEbqQqeRwghCEgGeYWhGcnCWiZa+8=
Subject key identifier: C1:F8:A7:D1:28:F5:91:57:36:41:76:00:12:D0:B5:96:CB:60:68:8B
Certificate issuer: /CN=1451d2a6ba446b9432ed20d2c9df57b40b3bd2ea
Certificate serial: 065F5691
Authority key identifier: 14:51:D2:A6:BA:44:6B:94:32:ED:20:D2:C9:DF:57:B4:0B:3B:D2:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFHSprpEa5Qy7SDSyd9XtAs70uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d74732-c163-4c64-adb2-9585231d0226/1/wfin0Sj1kVc2QXYAEtC1lstgaIs.roa
Signing time: Sat 01 Jan 2022 13:59:09 +0000
ROA not before: Sat 01 Jan 2022 13:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34660
IP address blocks: 94.199.24.0/21 maxlen: 21
185.52.196.0/22 maxlen: 22
159.253.48.0/21 maxlen: 21
2a02:20d0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106911377 (0x65f5691)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1451d2a6ba446b9432ed20d2c9df57b40b3bd2ea
Validity
Not Before: Jan 1 13:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1f8a7d128f591573641760012d0b596cb60688b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:58:b4:df:c6:e1:a2:4e:cc:6b:21:90:2e:
83:34:5c:26:8a:6e:de:09:1a:11:64:27:12:d2:9c:
ae:f2:1c:bc:99:77:d5:aa:65:e4:be:34:ae:4e:68:
25:f2:08:7f:7c:1d:be:88:76:fa:99:5f:5e:53:17:
66:9b:54:3d:c0:d7:fa:4e:e9:e6:2c:d0:85:4a:d0:
14:4e:b7:61:9d:0c:f5:21:48:10:14:37:3c:50:b7:
7f:42:09:50:11:b4:25:2f:94:1b:f4:40:ee:c0:a8:
c7:55:72:b0:0e:d7:c0:01:58:f7:7d:e1:66:b4:e0:
b5:13:6c:92:3f:ff:20:93:9e:4f:82:d9:15:7f:df:
0e:6b:a6:ea:09:40:2d:0e:b0:ff:a8:19:ef:2d:7d:
82:67:5d:55:83:bf:58:ea:a1:6f:a2:fb:24:4f:26:
32:cc:1d:a6:f0:64:69:71:aa:56:65:1a:4b:da:f6:
cc:ff:b0:3f:37:36:0e:8a:57:22:3b:d9:08:1f:ee:
ae:b7:58:3d:ed:f6:4c:0a:ca:f2:b9:78:e8:8d:92:
b7:76:24:07:4c:9a:5c:dd:24:ea:a4:aa:9b:66:98:
d4:6b:7c:d6:c1:9a:55:93:85:de:2d:23:67:ea:e2:
04:4a:8c:85:e2:d5:8b:e0:aa:27:41:3d:99:45:eb:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:A7:D1:28:F5:91:57:36:41:76:00:12:D0:B5:96:CB:60:68:8B
X509v3 Authority Key Identifier:
keyid:14:51:D2:A6:BA:44:6B:94:32:ED:20:D2:C9:DF:57:B4:0B:3B:D2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFHSprpEa5Qy7SDSyd9XtAs70uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d74732-c163-4c64-adb2-9585231d0226/1/wfin0Sj1kVc2QXYAEtC1lstgaIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d74732-c163-4c64-adb2-9585231d0226/1/FFHSprpEa5Qy7SDSyd9XtAs70uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.24.0/21
159.253.48.0/21
185.52.196.0/22
IPv6:
2a02:20d0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:68:aa:bd:f8:e4:e4:68:13:e6:3c:ac:31:3b:c7:90:86:39:
df:fc:d5:da:b3:d8:04:c0:19:30:cf:fc:66:eb:0d:c8:70:75:
a2:a7:1b:49:87:c1:44:2a:81:ca:55:68:27:54:af:96:b6:2f:
fa:c5:1a:2f:fa:1d:f2:9b:6c:c1:eb:13:8f:a1:2e:8c:7c:b1:
b3:b3:6c:29:10:48:66:ff:b1:92:40:49:ae:7b:b9:78:0c:86:
8e:54:94:95:e4:2f:f5:ef:f0:3d:6d:4d:b8:29:2e:36:52:4d:
d8:34:6b:62:c1:1b:51:41:f5:40:74:90:4c:9c:0c:f6:61:e1:
cf:e8:40:39:71:08:d7:dd:13:dd:95:25:18:81:f2:18:c2:fc:
3d:f1:77:65:9b:21:38:65:05:64:f9:3f:a3:80:c9:ae:71:94:
a3:05:3f:01:0a:57:3a:0b:8f:8f:1a:87:b7:6d:e1:ad:5b:d2:
d1:16:23:94:db:f6:a3:9e:21:2b:dd:eb:1f:38:5c:a6:fe:44:
12:63:32:34:d9:ea:6c:b5:28:a5:06:0b:25:b1:29:3d:56:ac:
77:b3:8f:ff:b3:99:c0:f5:ee:13:7e:74:ae:c5:d0:1c:fb:c8:
07:c5:7e:6f:dd:01:53:50:b8:a8:82:ac:36:35:4b:ff:0a:17:
0c:2e:db:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:41 2025 by rpki-client