Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WdM_5DyED9It4MTDkeE0IlrYyPY.roa
File: WdM_5DyED9It4MTDkeE0IlrYyPY.roa (raw, json)
Hash identifier: k3sh0iM1Fpt5YU8P8Hmh3fQkWHii7v25GEZC3xXCvAI=
Subject key identifier: 59:D3:3F:E4:3C:84:0F:D2:2D:E0:C4:C3:91:E1:34:22:5A:D8:C8:F6
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423699FAC51BB20775FC7D58579D03228
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WdM_5DyED9It4MTDkeE0IlrYyPY.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51099
IP address blocks: 89.47.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9f:ac:51:bb:20:77:5f:c7:d5:85:79:d0:32:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59d33fe43c840fd22de0c4c391e134225ad8c8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:67:73:d5:56:06:ae:0a:ff:c9:d4:64:cc:8c:
e9:30:eb:87:6e:71:3d:72:5d:d7:28:f1:f3:e1:c9:
a9:af:5f:30:80:38:f3:a0:e7:e8:0a:2a:34:34:64:
40:85:2d:b6:15:76:c6:34:48:f4:18:6e:80:2c:fe:
47:7d:bd:d1:c6:53:3b:d9:10:97:92:cf:85:dc:08:
75:c1:e4:13:76:58:cb:6e:ad:dd:2a:eb:81:4a:fe:
a4:74:d5:93:0f:fb:07:fe:0f:f4:0f:ba:1f:0a:8f:
15:94:d4:2a:83:9c:e4:6e:1e:db:d3:27:1f:6f:d4:
4d:73:c3:24:9f:38:41:69:7f:0a:9c:42:56:80:49:
06:42:3d:c3:ca:c9:55:8e:b6:5b:d0:61:77:3e:09:
1d:e5:f5:f5:74:f3:b0:88:29:f6:f0:ce:2a:20:7e:
5e:cc:87:d2:4d:b7:e9:4b:80:bf:44:fa:66:40:d0:
aa:5b:e5:64:b3:77:2d:4a:1b:31:08:db:30:9a:a8:
8c:0e:0c:f3:00:8d:79:4f:47:68:19:fd:7e:17:45:
ee:46:6b:bd:0e:20:66:01:ee:0f:19:f8:01:b1:17:
1a:3c:f1:f4:0a:c3:38:d7:f6:c1:5f:e6:ef:a7:6d:
89:8c:5d:49:d6:5f:1f:ed:8a:5c:49:b1:39:49:0d:
69:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D3:3F:E4:3C:84:0F:D2:2D:E0:C4:C3:91:E1:34:22:5A:D8:C8:F6
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/WdM_5DyED9It4MTDkeE0IlrYyPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.254.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:8d:0f:45:fa:47:d3:2f:6d:6d:21:26:0c:37:b9:22:b0:73:
ab:70:5d:49:50:86:01:df:65:47:57:1c:cd:2b:64:60:ca:bd:
13:04:c5:95:a0:de:ef:82:fb:0e:04:a6:13:42:d6:b9:c7:38:
3d:04:d2:2d:67:3e:6e:01:4a:2b:56:89:c8:ac:19:82:36:e7:
09:35:d0:19:0b:75:97:af:c6:2a:0e:8e:40:f1:27:39:62:c6:
0d:6d:12:19:d4:c5:a6:16:e5:94:da:09:70:25:34:8d:fd:b8:
aa:8f:13:49:e1:96:8a:d1:6a:ad:c5:63:75:64:79:fc:39:a6:
13:cb:c0:24:52:fb:4d:71:1b:d4:3d:01:44:f4:fe:b4:53:37:
03:75:91:1c:ad:ba:a0:cc:0e:26:00:1c:ea:0a:0f:4e:27:78:
ca:a9:9f:86:e7:b1:08:7f:b4:e2:b1:5f:58:d4:5e:7a:28:bd:
cc:68:12:7b:81:c9:e5:ae:3c:36:3d:2c:b7:92:0e:aa:da:b7:
4d:7b:3f:50:ea:9c:ff:95:ad:b3:77:76:e9:da:62:f4:45:95:
4f:37:b0:20:52:86:50:01:5d:c5:9e:07:01:16:9b:90:cc:68:
e2:d1:34:9b:41:90:7a:c9:62:0e:1a:14:ec:27:ab:c7:23:57:
ab:2c:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:51 2025 by rpki-client