Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WiON6CdHeAs54FIwJq22Q-CMJYQ.roa
File: WiON6CdHeAs54FIwJq22Q-CMJYQ.roa (raw, json)
Hash identifier: 4t1adRl+qe2aNtYrRhoxvc66aXOa5Y+iHAm8U5xH9j8=
Subject key identifier: 5A:23:8D:E8:27:47:78:0B:39:E0:52:30:26:AD:B6:43:E0:8C:25:84
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1DBC4258A4D373278EDA5980A0579
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WiON6CdHeAs54FIwJq22Q-CMJYQ.roa
Signing time: Wed 01 Jan 2025 11:48:11 +0000
ROA not before: Wed 01 Jan 2025 11:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58079
IP address blocks: 84.1.241.0/24 maxlen: 24
84.1.242.0/24 maxlen: 24
84.1.243.0/24 maxlen: 24
84.1.244.0/24 maxlen: 24
84.1.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:db:c4:25:8a:4d:37:32:78:ed:a5:98:0a:05:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a238de82747780b39e0523026adb643e08c2584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:ac:74:4d:cc:54:ce:e7:0d:1e:15:23:1a:
d5:7e:31:79:5c:aa:2b:bc:38:eb:74:10:49:dc:86:
8d:70:77:c6:ff:40:70:0c:8f:5c:90:4b:d4:ea:ba:
d9:5e:bb:01:d4:c1:fe:bb:a1:3f:5c:0f:2a:1c:cc:
92:1f:f0:cb:5d:0b:80:2b:d7:e4:24:54:75:09:31:
c0:e5:b9:5d:31:b3:69:4e:d6:63:56:ba:bc:5b:cb:
f1:d2:b0:ff:47:1c:94:95:f4:9f:9d:53:eb:f5:b6:
49:c1:c1:ae:7c:b5:3a:57:1a:4e:82:59:92:ce:13:
27:a8:ee:ce:db:e9:77:03:2d:56:9e:88:a5:73:1e:
66:d0:70:62:a7:38:8d:1c:e9:a4:c5:c4:e4:82:13:
ec:88:87:3f:c5:cc:89:11:4f:f5:e0:dd:8e:c0:cd:
35:f9:fb:4a:e0:87:97:54:17:1f:93:8c:52:78:d6:
95:29:df:ad:a4:13:a5:c1:92:b8:9c:67:ec:7a:5f:
d0:21:6f:d5:f6:f5:3e:12:ee:4a:4c:7c:20:23:1f:
db:ba:59:cd:cb:a3:00:bc:ce:30:d5:41:f6:70:1b:
8e:1f:5e:4a:4a:27:59:96:00:19:a6:48:dd:03:d3:
c1:00:f9:32:63:aa:e4:b0:ca:eb:61:4f:09:b7:5e:
28:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:23:8D:E8:27:47:78:0B:39:E0:52:30:26:AD:B6:43:E0:8C:25:84
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/WiON6CdHeAs54FIwJq22Q-CMJYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.241.0-84.1.245.255
Signature Algorithm: sha256WithRSAEncryption
2e:34:aa:41:ed:39:6f:89:43:08:77:4d:c9:fe:55:98:d4:c9:
53:02:8b:37:9c:02:44:09:89:37:a0:5c:91:93:ef:5a:89:ea:
be:2c:93:6a:c0:79:3b:fc:f7:de:e7:43:85:e1:07:db:6a:82:
e0:d5:00:a4:56:5b:88:0a:0b:aa:d5:d2:52:f9:8b:3b:83:66:
42:9c:77:da:90:75:fe:18:83:c8:72:fd:6b:d4:19:47:9c:6f:
e2:cc:94:51:2f:74:fc:db:6c:72:6f:a6:a5:9a:f5:da:d7:b3:
4f:1b:78:86:80:62:15:06:c0:90:3e:7c:75:0a:e1:54:99:8c:
9b:aa:a0:a7:ea:e8:8e:90:48:ff:6d:79:9a:77:7b:a8:3f:b5:
82:26:34:6a:a7:b9:cc:57:e4:be:b4:05:e1:b1:b2:04:d4:1f:
38:9a:de:68:38:38:c7:9e:f7:f8:7a:b5:4e:94:1b:a7:fb:f4:
e2:33:a0:34:22:46:36:1c:af:5b:f5:63:6d:9c:27:a8:43:1b:
6b:52:ed:7f:10:9b:81:db:b6:99:f3:56:8c:15:11:fb:81:82:
92:21:c5:d3:74:ad:9e:ee:e4:3a:80:32:87:c0:aa:4d:7e:e1:
49:fe:72:4e:2a:54:d7:55:ab:9b:a5:0a:ad:51:e1:c9:3b:28:
89:70:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:36:57 2025 by rpki-client