Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/wbD-TnDUp1TwUlydyX2mjpnUIwo.roa
File: wbD-TnDUp1TwUlydyX2mjpnUIwo.roa (raw, json)
Hash identifier: 1pFizDKKcItlorTdrCT4PhEwNdUEu73s4l8ex3pbBds=
Subject key identifier: C1:B0:FE:4E:70:D4:A7:54:F0:52:5C:9D:C9:7D:A6:8E:99:D4:23:0A
Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial: 018322470702590D78A54B90CDA294774064
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/wbD-TnDUp1TwUlydyX2mjpnUIwo.roa
Signing time: Fri 09 Sep 2022 12:43:43 +0000
ROA not before: Fri 09 Sep 2022 12:43:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35744
IP address blocks: 91.238.176.0/24 maxlen: 24
185.28.56.0/24 maxlen: 24
2a00:9b60:5353::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:22:47:07:02:59:0d:78:a5:4b:90:cd:a2:94:77:40:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Validity
Not Before: Sep 9 12:43:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1b0fe4e70d4a754f0525c9dc97da68e99d4230a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e6:1a:32:23:75:22:28:5b:57:9a:50:18:9e:
e0:ea:b9:46:e6:54:2b:2b:eb:32:de:50:be:01:17:
af:40:83:f0:32:8c:f1:51:cb:43:60:98:27:80:c8:
84:7c:38:4b:7b:00:30:c3:52:aa:7d:d9:46:48:d6:
95:68:3e:c7:84:51:6b:b1:89:70:b3:94:85:31:d2:
14:13:56:2a:59:77:7c:3f:13:dc:ac:2c:d9:d7:7c:
30:5d:10:08:58:4b:8a:43:a6:1b:8e:8c:cc:f9:b7:
b2:cf:68:19:c4:9e:6b:f9:6d:18:61:cd:d9:4f:e0:
dc:2c:43:c3:42:e4:fa:6e:d6:69:21:57:3b:d4:08:
c7:a3:a7:cf:50:8d:e2:db:d5:f2:3c:4a:5d:33:57:
b3:11:7e:79:7e:60:a9:63:6c:a9:6f:93:0c:30:27:
0e:36:81:d9:4f:c1:75:ce:19:e0:29:af:ea:7c:b6:
78:f1:a4:89:28:5e:14:0c:fc:c8:b4:44:a6:1c:61:
56:2a:ad:15:d7:97:d9:5b:8d:8d:5f:ec:fc:18:23:
21:0c:30:c1:1e:8f:a0:55:dc:dc:63:d5:8e:7e:89:
17:8c:11:7f:10:e1:24:b6:dc:42:03:54:86:f1:63:
a8:f9:9b:e7:6b:b1:f9:d4:2a:35:28:ad:58:3d:e2:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:FE:4E:70:D4:A7:54:F0:52:5C:9D:C9:7D:A6:8E:99:D4:23:0A
X509v3 Authority Key Identifier:
keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/wbD-TnDUp1TwUlydyX2mjpnUIwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.176.0/24
185.28.56.0/24
IPv6:
2a00:9b60:5353::/48
Signature Algorithm: sha256WithRSAEncryption
07:a2:ef:0e:56:96:d4:9b:c4:00:56:be:72:32:7f:54:fa:d1:
1f:cb:dc:31:c2:55:f8:1c:e5:c8:69:3c:ad:74:1d:f4:87:82:
43:79:27:40:78:d2:41:94:75:03:2a:44:fc:c3:8d:dc:dc:15:
1e:b8:12:3e:25:c5:17:bc:3d:af:5c:9e:36:d1:fc:d4:7b:b4:
4c:b6:1e:fe:70:5c:3f:56:d2:d3:cf:55:18:68:88:5f:97:76:
50:c8:ff:2c:d0:a8:50:3d:12:62:2b:a6:6b:3b:20:4f:eb:c2:
cf:87:6c:e4:65:95:ee:90:b9:6f:eb:a0:2e:74:2f:e3:ee:b6:
6a:1c:d9:be:d2:9e:28:ce:8c:8c:17:81:91:ba:c3:c1:eb:23:
e8:bc:2c:47:31:e7:df:96:c9:ad:0a:52:58:5d:00:44:9a:c1:
23:29:d2:4d:6d:f1:18:07:41:9c:b6:3a:28:fb:94:44:2d:e1:
a8:99:a2:c6:83:3a:90:b7:47:0b:26:e6:9d:9f:17:cc:f1:63:
4e:50:b9:e2:7e:9e:aa:fd:d6:cc:99:23:49:89:fa:8d:30:4a:
bd:aa:2a:26:98:33:3b:e5:dc:39:d0:c4:2c:60:c5:e0:67:70:
3d:45:e9:95:6c:9a:92:f0:45:06:4d:ac:b6:ce:7c:0a:dc:34:
b2:b1:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:37 2025 by rpki-client