Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3a10d8-8155-484d-b42d-fc5568c8627d/1/WWYkEljN3uq70KX6T3r__k-qYHQ.roa
File: WWYkEljN3uq70KX6T3r__k-qYHQ.roa (raw, json)
Hash identifier: 0aTtZnBYcULbse53i68LAri21GDteijNpJn1YFEfUcM=
Subject key identifier: 59:66:24:12:58:CD:DE:EA:BB:D0:A5:FA:4F:7A:FF:FE:4F:AA:60:74
Certificate issuer: /CN=914f91dd10decf4e34a806ec04d4c0e08c21f732
Certificate serial: 01856F3928863A3F2AA9B769CE2A7D1D9004
Authority key identifier: 91:4F:91:DD:10:DE:CF:4E:34:A8:06:EC:04:D4:C0:E0:8C:21:F7:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kU-R3RDez040qAbsBNTA4Iwh9zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3a10d8-8155-484d-b42d-fc5568c8627d/1/WWYkEljN3uq70KX6T3r__k-qYHQ.roa
Signing time: Sun 01 Jan 2023 21:24:54 +0000
ROA not before: Sun 01 Jan 2023 21:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206613
IP address blocks: 195.39.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:28:86:3a:3f:2a:a9:b7:69:ce:2a:7d:1d:90:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914f91dd10decf4e34a806ec04d4c0e08c21f732
Validity
Not Before: Jan 1 21:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5966241258cddeeabbd0a5fa4f7afffe4faa6074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:23:4e:6a:29:bb:bb:ba:a1:cc:26:2c:ea:
5b:c0:87:9b:ba:96:1a:d4:d3:7d:85:c1:15:f9:32:
9a:97:73:73:f2:c6:9d:4f:b5:b6:e6:c3:e2:18:4a:
60:22:48:c0:b6:1d:48:6a:a5:63:5f:62:e3:cf:05:
5e:3e:92:a6:50:09:1c:65:f3:4c:a6:19:2d:b6:8a:
80:01:5d:4d:61:99:67:6c:b8:f5:f1:c0:e6:4c:90:
15:ce:46:4a:dd:f8:76:5f:de:67:5b:e2:66:a1:f2:
40:71:71:30:7e:db:69:1d:1d:c2:21:ae:a0:fe:97:
a6:28:5f:77:70:d0:74:15:b5:51:a3:cb:ba:b7:6f:
7a:fd:90:c9:9b:82:2e:2e:18:f5:a1:59:4a:cf:93:
ac:91:ae:fa:ed:07:d5:9d:3e:d0:e2:4c:de:ca:f5:
4e:55:2e:50:04:34:f2:57:e8:f6:91:c7:74:67:57:
ac:c9:fd:a5:be:41:4a:cc:18:5a:6e:04:fe:2b:35:
98:5e:02:e8:a2:66:a1:7b:95:a4:f2:f4:90:17:a6:
51:14:38:0b:e4:7e:61:09:2c:6b:47:14:35:d2:db:
59:19:4a:e6:8e:18:59:f0:76:ab:05:83:f4:6e:32:
87:1a:8f:64:ba:3b:27:00:d8:b1:11:64:0a:b3:a3:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:24:12:58:CD:DE:EA:BB:D0:A5:FA:4F:7A:FF:FE:4F:AA:60:74
X509v3 Authority Key Identifier:
keyid:91:4F:91:DD:10:DE:CF:4E:34:A8:06:EC:04:D4:C0:E0:8C:21:F7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kU-R3RDez040qAbsBNTA4Iwh9zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3a10d8-8155-484d-b42d-fc5568c8627d/1/WWYkEljN3uq70KX6T3r__k-qYHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3a10d8-8155-484d-b42d-fc5568c8627d/1/kU-R3RDez040qAbsBNTA4Iwh9zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.39.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:68:34:da:c3:c2:2d:d8:5d:13:be:ab:f0:21:38:13:58:4b:
f8:f7:70:0d:9c:66:9b:5a:67:69:1e:6c:61:c4:c3:1a:1e:d3:
4a:66:6a:5d:0d:2c:43:94:00:5c:84:93:07:00:00:1f:3f:c1:
61:52:04:3f:7a:b0:2e:aa:1f:44:99:2e:1e:80:bd:ac:3c:95:
dd:b9:1c:27:68:84:a8:bd:a1:3e:c4:be:53:ea:bd:5b:2b:8a:
01:39:46:13:df:2b:cd:1f:ce:09:46:59:2b:d6:ab:42:4d:00:
8a:24:6b:ba:47:2f:32:f5:f8:12:2b:a6:29:54:4b:80:ac:67:
d2:a5:42:59:91:68:fd:07:53:1c:f2:fd:6a:ae:e7:e1:6c:87:
6e:5c:a0:7c:42:64:e3:98:c0:18:56:d9:3b:6c:51:8e:57:b9:
3b:7d:e1:21:3f:d7:f2:57:4c:98:17:d8:db:23:9b:bc:7b:67:
37:61:04:ce:12:91:09:e7:83:f7:2b:a3:b7:30:a7:51:4a:cf:
5a:79:87:69:b1:59:88:bd:62:09:bd:94:ec:55:3d:aa:af:9f:
fb:9e:65:3f:8d:5c:56:8a:a9:c2:df:0b:88:d1:45:93:d1:8f:
52:37:eb:63:75:4f:05:e0:26:29:bd:be:35:4d:6d:66:03:41:
ee:b4:2d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:37 2025 by rpki-client