Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WDKIHrVYkHEP-_jHo4nENWRIc38.roa
File: WDKIHrVYkHEP-_jHo4nENWRIc38.roa (raw, json)
Hash identifier: eRiMu2gAszaQ29h+cDiGSbBxDr/jEEiSq3+mBGq95KQ=
Subject key identifier: 58:32:88:1E:B5:58:90:71:0F:FB:F8:C7:A3:89:C4:35:64:48:73:7F
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 019428241947E8533B83B4B0A50ADD869C5E
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WDKIHrVYkHEP-_jHo4nENWRIc38.roa
Signing time: Thu 02 Jan 2025 17:50:41 +0000
ROA not before: Thu 02 Jan 2025 17:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270158
IP address blocks: 5.102.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:19:47:e8:53:3b:83:b4:b0:a5:0a:dd:86:9c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5832881eb55890710ffbf8c7a389c4356448737f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:33:69:67:c8:3b:2c:30:a9:47:de:c4:f6:
fd:12:58:b2:c7:4c:fa:11:55:6d:ba:d6:33:59:83:
fb:26:d5:f2:bd:9e:67:ee:0e:72:61:00:06:1e:b8:
b7:d4:37:5e:4e:ca:f0:04:f9:52:f9:22:86:cb:96:
53:a4:f1:08:98:f1:61:56:b1:41:25:eb:70:27:d3:
92:ae:44:cf:ae:b1:9c:66:7d:15:41:1b:9c:c0:ce:
3c:f4:83:a7:73:21:1c:04:2f:7c:36:77:d9:8f:57:
e9:77:f0:e2:62:15:53:d1:f4:c4:ed:83:df:71:4c:
42:c7:33:37:fc:ef:ce:e3:cd:ad:58:83:7c:b4:78:
e1:c1:d7:4e:16:90:af:c2:f1:47:0b:c7:ee:b7:c7:
8e:ec:bb:30:88:bf:48:f8:70:68:91:30:b0:74:c7:
ad:bb:c6:e0:a9:89:c9:76:7f:31:ed:d1:b8:63:6b:
7b:6e:67:34:5b:bf:b6:5c:08:75:e1:7f:24:86:5b:
cb:00:0e:64:fc:04:99:a9:6b:f8:c6:10:b9:cc:95:
4c:e6:42:54:7e:6c:92:dd:37:ca:ff:82:cb:c7:c0:
3a:1c:4f:60:94:9d:fc:8b:bd:26:13:8d:ef:34:05:
b5:31:bb:66:93:6c:5b:b1:3a:c2:4b:d3:6e:90:18:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:88:1E:B5:58:90:71:0F:FB:F8:C7:A3:89:C4:35:64:48:73:7F
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/WDKIHrVYkHEP-_jHo4nENWRIc38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:01:85:78:d2:b2:8f:dd:01:ac:8f:8d:1b:6f:a7:ab:5f:fc:
a3:10:05:32:fe:cc:1a:d0:d3:c9:f9:7e:5f:b0:81:1b:41:4d:
36:1e:d3:25:22:49:64:bc:b2:46:62:8a:1f:d4:da:3b:98:2c:
a9:76:cb:05:d0:88:d0:21:db:90:cb:27:63:d4:40:3b:c5:13:
c9:c4:d6:7e:1a:07:14:84:f2:43:c3:fe:c6:f3:54:01:30:a2:
75:dd:62:f9:94:1b:80:de:aa:e6:bd:59:5e:29:68:88:99:c4:
1d:5e:5f:22:88:43:62:da:3d:72:1f:3e:4e:d7:0d:f1:b5:3a:
3c:62:26:0e:46:aa:5b:ba:1a:b5:17:31:ce:c9:88:69:89:8d:
1b:28:37:87:01:90:96:0e:3a:b2:05:06:ed:d2:45:35:72:3f:
77:18:7a:3f:c6:07:6f:ff:59:7a:fe:93:57:ac:0c:c7:30:a4:
15:d5:32:86:e9:25:86:06:fb:3a:6d:13:5e:7d:53:e0:be:88:
0d:47:2c:31:34:df:98:f6:e8:8f:1a:31:e0:f9:d2:83:37:b5:
0a:4d:f4:ca:42:c9:09:85:9a:f2:62:9d:ce:e4:61:40:a4:ea:
48:93:fd:9a:e9:94:75:b5:26:14:59:1b:0e:10:80:3a:57:84:
05:44:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:41 2025 by rpki-client