Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/wxf5LOqmnU9qRltsVLLxd1pv6kY.roa
File: wxf5LOqmnU9qRltsVLLxd1pv6kY.roa (raw, json)
Hash identifier: o/1ghBZh+TdSuhL1jWLo1gj3xTGhav6VTVVFt5RI8qs=
Subject key identifier: C3:17:F9:2C:EA:A6:9D:4F:6A:46:5B:6C:54:B2:F1:77:5A:6F:EA:46
Certificate issuer: /CN=8912e418225da95d6a21302407923ff94549572b
Certificate serial: 2AA95748
Authority key identifier: 89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/wxf5LOqmnU9qRltsVLLxd1pv6kY.roa
Signing time: Sat 01 Jan 2022 09:03:29 +0000
ROA not before: Sat 01 Jan 2022 09:03:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39033
IP address blocks: 89.104.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715741000 (0x2aa95748)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8912e418225da95d6a21302407923ff94549572b
Validity
Not Before: Jan 1 09:03:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c317f92ceaa69d4f6a465b6c54b2f1775a6fea46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:b6:52:8e:54:57:63:ed:10:5c:a2:5a:e1:
80:ba:fa:e2:52:fd:ff:dc:77:4c:1f:d4:fe:94:79:
cd:4e:bb:b0:10:9a:c3:23:d1:6e:89:b7:ef:03:1a:
14:43:21:76:ba:cb:d1:b2:94:07:73:7f:4a:be:84:
9b:61:a3:be:67:51:94:b8:ce:5e:a3:ed:01:7f:6e:
98:03:80:b4:76:ac:55:8b:59:49:f7:91:f0:7d:98:
c0:28:a3:03:f0:90:3a:7f:1a:06:07:bf:5c:7e:85:
c1:97:d1:98:13:91:76:81:b6:ff:56:5c:b6:38:25:
ad:c5:11:70:a8:33:cf:52:44:dd:a9:bd:49:94:73:
20:86:8e:cc:e4:ec:30:60:11:15:89:66:59:cf:0c:
9f:d8:f4:88:9a:16:56:31:b6:2f:de:69:47:ac:59:
44:21:2f:ae:95:46:e5:f6:90:ea:32:c6:34:65:de:
f0:9f:8d:a0:86:1a:4d:c6:4a:80:0b:41:54:96:ca:
8d:4d:ba:f5:0f:8c:2f:8e:67:c4:f2:03:e0:01:46:
9f:15:27:42:c5:f5:9d:e6:ca:6b:c0:50:7b:75:3c:
67:63:7c:fb:67:66:54:65:9a:65:0e:12:dc:89:98:
bf:d8:0d:f3:5e:3b:39:3a:a7:59:f5:fa:ce:5c:0e:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:17:F9:2C:EA:A6:9D:4F:6A:46:5B:6C:54:B2:F1:77:5A:6F:EA:46
X509v3 Authority Key Identifier:
keyid:89:12:E4:18:22:5D:A9:5D:6A:21:30:24:07:92:3F:F9:45:49:57:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRLkGCJdqV1qITAkB5I_-UVJVys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/wxf5LOqmnU9qRltsVLLxd1pv6kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/cac553-ee80-4658-ac05-92824c9da37b/1/iRLkGCJdqV1qITAkB5I_-UVJVys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.114.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b9:2e:19:36:3d:32:d5:15:b5:16:93:46:e8:2b:73:7b:a4:
28:ba:27:e7:77:46:2a:80:f1:59:30:d1:48:50:5b:14:2f:3a:
a3:b0:27:5f:c9:2b:3e:12:70:7f:a0:b0:73:70:a1:94:f8:3b:
1c:fe:db:51:51:6b:20:8a:14:43:48:39:b0:0a:c6:0d:89:3a:
92:90:4b:22:e2:d0:1a:4e:95:6e:80:7b:07:d4:ee:26:67:c8:
7a:25:83:8a:e6:80:3d:b4:85:69:82:06:3d:40:22:f9:5d:77:
8f:5b:9d:f1:98:da:25:c6:5d:49:d5:f9:c8:41:7e:ce:5e:0b:
69:46:14:bd:7f:db:1d:18:5b:d9:d4:ea:0e:01:b2:57:47:f8:
d3:6e:2d:65:ce:f0:5c:34:53:b0:87:f8:59:48:2d:7d:17:60:
68:35:f4:c4:26:f0:7c:6d:25:03:30:22:c0:2d:a4:05:42:bf:
83:f8:78:1d:3f:90:61:aa:13:c5:b6:7e:39:4c:86:9c:f7:5c:
b2:01:a3:a5:29:c2:27:c1:c5:6f:43:1c:e8:1c:f5:c5:ec:cd:
23:54:1b:99:ba:c4:c4:95:86:df:aa:53:1f:0a:cd:63:36:d3:
15:ac:68:07:7d:53:96:c4:97:e4:0f:76:0a:dc:dd:93:dc:93:
1a:d9:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:53 2025 by rpki-client