Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/WGy1cA3da99W4WDLy3MY4ZyczoU.roa
File: WGy1cA3da99W4WDLy3MY4ZyczoU.roa (raw, json)
Hash identifier: SJ9b+hH7b3cVwCr6CT26WQO6ifaQhtn6CrsiD/nybF0=
Subject key identifier: 58:6C:B5:70:0D:DD:6B:DF:56:E1:60:CB:CB:73:18:E1:9C:9C:CE:85
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019427466DB11C8F98D31C96188CF48A4E65
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/WGy1cA3da99W4WDLy3MY4ZyczoU.roa
Signing time: Thu 02 Jan 2025 13:48:34 +0000
ROA not before: Thu 02 Jan 2025 13:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59726
IP address blocks: 37.230.201.0/24 maxlen: 24
212.86.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:6d:b1:1c:8f:98:d3:1c:96:18:8c:f4:8a:4e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: Jan 2 13:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=586cb5700ddd6bdf56e160cbcb7318e19c9cce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:af:73:aa:88:a8:cd:e1:9d:6c:41:a2:58:
3a:8d:03:28:9c:d8:40:ea:45:39:08:60:0a:c1:43:
99:04:04:13:37:a8:18:a9:63:67:2a:98:9e:67:02:
08:a0:5d:bc:ba:d9:74:be:81:49:b6:29:44:86:1d:
99:fc:cf:83:09:c9:6c:6b:18:9b:26:50:4d:d6:a6:
7c:37:5b:cc:b3:42:a9:38:15:68:15:b6:50:6c:de:
ac:3f:cf:b4:0e:c9:6b:0c:f1:3a:00:13:c2:41:f6:
49:a6:9d:72:e8:92:4a:15:ff:4c:da:c3:2d:35:b3:
a8:47:86:0b:43:b9:d8:57:bd:36:9e:34:7d:e3:2c:
23:3e:72:0a:63:25:7a:65:d2:e2:48:b6:c3:f2:a9:
d5:18:92:86:8c:2a:e9:d0:89:98:b9:08:b3:19:fd:
f3:27:07:21:e3:c6:42:a3:ea:46:b7:b3:f3:8f:ea:
ef:7b:45:24:e7:62:ac:0d:72:c5:ee:ab:ee:d6:90:
77:1a:9f:2e:77:3f:4f:f6:5d:c1:9a:e9:42:27:fe:
04:f4:7f:e9:5f:37:06:15:a5:62:df:2c:fb:bd:9c:
76:6a:63:47:d3:ac:cc:86:d3:9c:0f:a0:63:a7:6e:
b3:72:df:e6:c4:9d:5e:18:f9:bb:e7:59:20:ea:25:
40:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:B5:70:0D:DD:6B:DF:56:E1:60:CB:CB:73:18:E1:9C:9C:CE:85
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/WGy1cA3da99W4WDLy3MY4ZyczoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.201.0/24
212.86.99.0/24
Signature Algorithm: sha256WithRSAEncryption
97:da:4d:34:4d:66:b6:29:09:0c:29:47:2b:8d:4a:26:2a:a7:
0f:06:47:1d:80:42:7f:45:9d:1f:a8:2f:2f:55:94:19:41:40:
07:3d:5a:63:21:54:c5:7c:f1:6a:b5:b8:8c:4d:a7:8a:b5:4a:
5d:07:d5:b7:9c:fc:74:0a:9c:55:5f:b9:00:62:8c:76:c0:27:
89:fd:14:4c:f4:44:e8:54:6d:a9:0e:3e:94:d9:88:90:ab:aa:
c9:83:93:cf:b3:3b:9a:18:fa:4b:3c:b3:c4:62:9f:63:54:4b:
29:03:df:26:39:7f:47:98:26:49:d1:fb:ec:ac:5b:bb:11:4d:
26:6a:1b:83:52:04:ed:3b:50:30:42:44:47:a1:59:ab:63:c7:
ee:63:f9:ec:87:a9:9f:d8:ca:db:3b:f8:78:cf:08:1e:49:cf:
96:f9:0f:9a:ad:73:cc:f0:8e:c2:7c:22:b7:ff:b0:34:8f:ed:
4d:e1:7e:00:12:8c:47:65:e4:fb:4e:a8:c4:d2:48:20:3b:03:
3b:42:37:56:ea:6d:83:5c:d5:c6:99:be:e9:48:20:48:f7:47:
d8:d1:74:f8:6e:b2:70:59:fb:4c:a7:1c:ec:ce:8a:f7:0e:a5:
23:ed:ea:10:04:a5:03:0b:a4:27:1c:aa:a5:0c:cf:ed:48:09:
10:c6:d6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:31 2025 by rpki-client