Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WLI-04iwZ5RlSFP4U5FkL0oa3Ks.roa
File: WLI-04iwZ5RlSFP4U5FkL0oa3Ks.roa (raw, json)
Hash identifier: 1IqBV1Sn8T8m9pnYSn6zDOnh73yQI/R+YmB6iq/AwQg=
Subject key identifier: 58:B2:3E:D3:88:B0:67:94:65:48:53:F8:53:91:64:2F:4A:1A:DC:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7B25F7A2E0D0D6292E524CA176E4C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WLI-04iwZ5RlSFP4U5FkL0oa3Ks.roa
Signing time: Wed 01 Jan 2025 21:48:45 +0000
ROA not before: Wed 01 Jan 2025 21:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215026
IP address blocks: 37.202.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b2:5f:7a:2e:0d:0d:62:92:e5:24:ca:17:6e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58b23ed388b06794654853f85391642f4a1adcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:3f:fa:aa:1d:1d:d4:7a:5b:42:be:9a:0d:
b5:c7:8e:7e:b8:26:9b:23:b3:6b:10:32:82:ab:75:
b9:f6:9b:e4:64:e4:82:b9:41:6f:25:6e:61:53:ca:
83:ad:e4:f6:1f:0d:5e:6a:19:72:f8:3e:1d:9e:2d:
f3:7c:60:42:01:33:5f:ef:08:96:5b:e4:8e:12:f2:
0e:d1:91:48:59:0c:fa:7c:3e:1f:6e:a6:e3:fc:b9:
f2:9f:fb:57:7f:a6:89:38:d1:1f:0b:19:85:76:67:
49:ba:c5:4a:b7:d0:57:94:c1:6a:d3:6a:cd:6b:c6:
1a:fb:cc:2b:a5:72:8b:1f:fc:22:3a:bb:6a:83:e1:
2d:38:c9:4b:45:ff:75:48:6c:48:94:eb:21:99:f0:
51:fd:15:78:a5:b0:be:a0:e4:9e:5d:e6:cc:9e:e1:
c6:ab:45:82:09:df:2c:3f:64:74:68:40:fc:50:cc:
ac:9f:ca:b5:64:56:8a:63:96:c1:78:b7:18:fe:c6:
85:37:88:63:98:95:05:31:c7:60:1c:47:d7:36:c2:
07:8f:e3:75:e9:41:3c:b0:9d:85:55:ad:13:88:13:
2d:15:57:35:99:4e:67:5d:81:b5:35:1d:de:91:14:
28:21:5d:b7:f0:51:c5:60:8b:f4:1e:f9:5e:44:06:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B2:3E:D3:88:B0:67:94:65:48:53:F8:53:91:64:2F:4A:1A:DC:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WLI-04iwZ5RlSFP4U5FkL0oa3Ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.207.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c9:22:c1:3e:21:cd:89:5c:74:a2:3c:0d:7d:1b:44:5f:9f:
86:5b:08:f1:b3:7f:49:a3:c8:3d:03:f8:69:5e:fe:fd:1f:77:
a3:ae:ec:48:08:cf:a4:b1:cb:05:ba:01:d6:14:21:a3:a4:29:
ce:b1:02:0d:d2:77:2a:6e:c2:99:e4:a6:eb:95:04:8e:1c:12:
13:fe:ec:89:fa:fc:dd:40:14:ee:9a:b3:b8:db:c1:b9:91:25:
4e:48:1c:c4:95:3f:4a:53:f4:7b:95:0d:d2:da:2d:b5:03:24:
0b:e4:7b:31:d4:63:48:f0:bd:7d:c3:ec:62:fc:ef:37:b8:01:
ea:2d:b3:21:d9:db:85:83:ff:b3:84:4b:a5:80:96:89:3e:2b:
59:d2:bd:ca:b0:36:10:c1:56:ee:c5:ad:fb:67:7c:dd:7d:72:
04:76:aa:88:7f:54:61:01:a8:7b:b5:06:a7:22:1a:f5:8f:c4:
c2:c1:c3:ec:c8:4d:b3:a0:8a:a9:9b:8d:2f:93:cd:37:c1:c6:
2e:f8:bd:b4:90:52:9e:a9:1c:80:6d:6f:9a:0d:dd:a0:73:29:
01:62:8c:fd:ee:76:c4:cc:0f:37:6c:09:45:b6:5b:26:77:a5:
76:0e:aa:8b:5c:7b:13:89:19:a1:58:a9:eb:2d:3b:dd:3b:a0:
4d:6d:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:11:52 2025 by rpki-client