Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/WCGJT-sbJn3IN8zTh5nnqLz6J5Q.roa
File: WCGJT-sbJn3IN8zTh5nnqLz6J5Q.roa (raw, json)
Hash identifier: NZ4wajVVC8+VY3IWAbpQFPpBcH00dOJ3JIJWnd05pyw=
Subject key identifier: 58:21:89:4F:EB:1B:26:7D:C8:37:CC:D3:87:99:E7:A8:BC:FA:27:94
Certificate issuer: /CN=72978d1d4e7782816ac42da4788e33cbb2487859
Certificate serial: 018281C7F642B0AFCCB33D49D57827809EDA
Authority key identifier: 72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/WCGJT-sbJn3IN8zTh5nnqLz6J5Q.roa
Signing time: Tue 09 Aug 2022 08:45:41 +0000
ROA not before: Tue 09 Aug 2022 08:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 26548
IP address blocks: 45.159.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:c7:f6:42:b0:af:cc:b3:3d:49:d5:78:27:80:9e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72978d1d4e7782816ac42da4788e33cbb2487859
Validity
Not Before: Aug 9 08:45:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5821894feb1b267dc837ccd38799e7a8bcfa2794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:5b:4c:9f:bf:88:fb:e5:9b:bb:bc:92:f4:
8f:ec:28:fc:9e:16:f5:ad:4d:01:7b:67:98:47:88:
c6:95:52:a6:e4:74:bf:6f:90:d9:0e:25:71:b9:ab:
4c:b0:e4:c1:3b:b6:20:7a:54:03:c5:fd:7b:2b:70:
b7:59:7c:46:e6:89:fb:6c:1d:0b:e5:ab:7d:0b:66:
0e:ef:b3:73:fb:17:e3:6c:83:ba:6e:64:27:bc:0b:
ab:0a:d1:56:11:7b:f8:92:78:49:f2:34:7a:f6:79:
05:d2:70:c3:f0:e6:b3:ad:38:ac:eb:8b:49:5e:72:
3b:4e:0b:9d:55:0e:56:64:14:ea:27:b0:fd:69:92:
85:d0:21:9f:da:10:fa:fe:0f:84:e6:20:17:c5:86:
9f:af:85:aa:57:82:af:cc:a2:54:80:6f:21:fe:ab:
ee:4f:b5:a2:11:68:b8:2c:cc:16:a1:cc:6e:08:12:
de:38:e4:36:27:bb:1c:49:9b:2a:5c:31:8d:d1:68:
22:fd:4c:dd:73:d5:8f:68:02:bd:78:8e:34:0c:18:
57:0f:5d:8a:77:a3:83:10:88:00:50:d1:6b:3d:19:
83:88:0b:fb:cf:38:63:9b:93:a5:95:3c:5a:1d:cf:
31:9a:a6:d1:11:8c:98:ed:29:c3:60:5c:f2:28:6c:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:89:4F:EB:1B:26:7D:C8:37:CC:D3:87:99:E7:A8:BC:FA:27:94
X509v3 Authority Key Identifier:
keyid:72:97:8D:1D:4E:77:82:81:6A:C4:2D:A4:78:8E:33:CB:B2:48:78:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpeNHU53goFqxC2keI4zy7JIeFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/WCGJT-sbJn3IN8zTh5nnqLz6J5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/22e96f-2451-4e86-a037-8db62ea50995/1/cpeNHU53goFqxC2keI4zy7JIeFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e8:21:e8:3b:56:1f:be:f0:b5:90:e2:30:98:15:0c:e0:38:
ec:0f:64:50:bb:65:40:ee:2e:1e:bb:29:96:12:a5:06:c0:22:
c0:88:34:e6:56:b1:d6:76:aa:22:ca:d5:86:2b:e6:0d:5a:73:
68:87:0a:b6:c3:53:c0:21:a0:33:2d:b2:58:ad:fa:fd:de:af:
f8:f7:53:91:d9:ec:7f:21:43:bd:31:9f:2a:f4:e2:33:22:df:
f8:e6:8b:66:c7:2d:ef:7a:52:9f:af:68:07:a1:61:97:f4:91:
92:33:c1:5c:46:e2:fc:11:4a:32:9a:a0:91:be:60:f3:04:04:
67:a4:b7:6a:30:86:5e:75:72:4e:f3:c1:2f:ec:bc:1a:cc:85:
9a:be:3e:b3:fb:82:8b:6d:41:13:bc:34:61:78:1a:9e:bd:79:
1d:70:4a:f8:41:f6:f5:8c:0c:23:70:41:fd:c5:32:b8:eb:a6:
84:3a:1c:af:22:a9:6d:86:d1:a3:56:bd:3f:40:f3:36:18:0a:
5b:82:47:7b:2e:c2:69:a7:c7:44:60:b6:b5:03:2f:e3:7f:a0:
27:c1:a8:11:b8:fd:73:f3:99:fd:65:dd:2e:79:37:bc:d4:b1:
c5:33:6d:c6:26:7c:71:68:48:53:ea:90:ad:0e:2d:b0:a6:71:
04:2f:af:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYKBx/ZCsK/Msz1J1XgngJ7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOTc4ZDFkNGU3NzgyODE2YWM0MmRhNDc4OGUzM2NiYjI0
ODc4NTkwHhcNMjIwODA5MDg0NTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODIxODk0ZmViMWIyNjdkYzgzN2NjZDM4Nzk5ZTdhOGJjZmEyNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRBbTJ+/iPvlm7u8kvSP7Cj8nhb1
rU0Be2eYR4jGlVKm5HS/b5DZDiVxuatMsOTBO7YgelQDxf17K3C3WXxG5on7bB0L
5at9C2YO77Nz+xfjbIO6bmQnvAurCtFWEXv4knhJ8jR69nkF0nDD8OazrTis64tJ
XnI7TgudVQ5WZBTqJ7D9aZKF0CGf2hD6/g+E5iAXxYafr4WqV4KvzKJUgG8h/qvu
T7WiEWi4LMwWocxuCBLeOOQ2J7scSZsqXDGN0Wgi/Uzdc9WPaAK9eI40DBhXD12K
d6ODEIgAUNFrPRmDiAv7zzhjm5OllTxaHc8xmqbREYyY7SnDYFzyKGxe1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFghiU/rGyZ9yDfM04eZ56i8+ieUMB8GA1UdIwQY
MBaAFHKXjR1Od4KBasQtpHiOM8uySHhZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3BlTkhVNTNnb0ZxeEMya2VJNHp5N0pJZUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yMmU5NmYtMjQ1MS00ZTg2LWEwMzct
OGRiNjJlYTUwOTk1LzEvV0NHSlQtc2JKbjNJTjh6VGg1bm5xTHo2SjVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yMmU5NmYtMjQ1MS00ZTg2LWEwMzctOGRiNjJlYTUwOTk1
LzEvY3BlTkhVNTNnb0ZxeEMya2VJNHp5N0pJZUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8XMA0G
CSqGSIb3DQEBCwUAA4IBAQBK6CHoO1YfvvC1kOIwmBUM4DjsD2RQu2VA7i4euymW
EqUGwCLAiDTmVrHWdqoiytWGK+YNWnNohwq2w1PAIaAzLbJYrfr93q/491OR2ex/
IUO9MZ8q9OIzIt/45otmxy3velKfr2gHoWGX9JGSM8FcRuL8EUoymqCRvmDzBARn
pLdqMIZedXJO88Ev7LwazIWavj6z+4KLbUETvDRheBqevXkdcEr4Qfb1jAwjcEH9
xTK466aEOhyvIqlthtGjVr0/QPM2GApbgkd7LsJpp8dEYLa1Ay/jf6AnwagRuP1z
85n9Zd0ueTe81LHFM23GJnxxaEhT6pCtDi2wpnEEL68w
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:54 2025 by rpki-client