Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/WlOZOeoQ9P_kQXbLWzzdPt9m_2g.roa
File: WlOZOeoQ9P_kQXbLWzzdPt9m_2g.roa (raw, json)
Hash identifier: p1IXSS0dQT7jQoZ+bhqnxR0GfdNISbb4bIxh4ZncPMk=
Subject key identifier: 5A:53:99:39:EA:10:F4:FF:E4:41:76:CB:5B:3C:DD:3E:DF:66:FF:68
Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial: 019426D9F3C189810EA23D6AE059279201D4
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/WlOZOeoQ9P_kQXbLWzzdPt9m_2g.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61424
IP address blocks: 45.129.141.0/24 maxlen: 24
2a09:31c0:beef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f3:c1:89:81:0e:a2:3d:6a:e0:59:27:92:01:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a539939ea10f4ffe44176cb5b3cdd3edf66ff68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:76:0d:54:e3:79:9a:49:33:46:be:2d:dc:
f2:47:8b:97:d9:65:7e:aa:99:6f:9a:6b:39:b7:aa:
42:e5:88:aa:56:98:9d:01:d3:bd:51:7c:9d:93:8f:
05:d8:cc:0d:1c:0e:2f:72:f7:1d:d7:0e:98:5a:9f:
79:33:5a:eb:7f:32:47:ac:b8:c2:5d:1f:0c:10:4e:
82:96:95:28:7b:9f:83:71:2c:e3:4b:e5:76:c3:15:
81:67:91:5e:d3:57:a0:a1:6c:57:a4:3a:4f:c5:10:
48:74:81:e4:cd:3c:77:26:ed:8a:a8:f9:91:d6:be:
5b:54:35:40:8b:4c:25:24:79:db:17:0e:7d:b2:d1:
85:52:f7:cb:83:69:45:10:d7:07:51:cb:b7:4b:bd:
08:11:5c:fc:e9:4f:be:26:e4:c0:47:35:79:95:5c:
e9:13:53:eb:77:3f:96:4a:ea:2b:a3:5d:fd:7c:97:
4c:5c:e4:01:4c:fd:a7:bb:a7:9e:9f:fe:78:bd:c0:
94:28:3d:7a:0c:f1:e6:30:77:7b:26:35:44:4d:1e:
ff:68:43:64:61:e0:c0:b7:08:b6:f1:36:e3:f8:ba:
42:9a:7b:81:f9:8d:a0:ac:e3:29:0c:3f:e9:72:91:
1d:bc:9a:97:3a:a3:dd:63:c6:d5:5f:60:b0:0d:f1:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:53:99:39:EA:10:F4:FF:E4:41:76:CB:5B:3C:DD:3E:DF:66:FF:68
X509v3 Authority Key Identifier:
keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/WlOZOeoQ9P_kQXbLWzzdPt9m_2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.141.0/24
IPv6:
2a09:31c0:beef::/48
Signature Algorithm: sha256WithRSAEncryption
3a:f9:93:97:a3:fd:d1:d3:9f:fb:22:c6:4f:f4:5b:fb:b5:a1:
2f:f5:d0:22:46:ca:f5:23:66:0b:06:7e:b0:33:01:ce:ae:c2:
73:4c:71:10:e1:88:44:74:17:af:9d:2d:0f:52:b8:0c:76:8a:
67:e7:10:2e:75:6a:0c:74:3f:af:0a:04:e1:73:29:69:3e:2b:
2f:64:07:5c:36:64:79:09:e9:66:a7:ad:13:bb:79:3b:fa:f6:
68:cf:da:87:cd:0c:b2:59:c4:66:74:26:4c:2a:78:4a:53:ee:
80:7f:fe:eb:11:cc:12:6a:8a:a0:41:7f:f6:25:14:64:c7:a0:
f0:e6:4d:1d:c1:d0:4a:35:42:35:42:e5:70:c6:0f:7a:d1:d0:
bb:b8:c8:6e:84:0c:92:d4:f9:ba:2d:b5:1a:91:3e:74:46:c4:
9d:65:6e:f7:d0:39:55:69:0f:da:49:3a:db:97:10:d2:66:4e:
82:07:a2:f8:87:69:ce:72:99:97:14:4e:e2:55:6a:f0:78:a9:
ac:b3:a4:54:d3:fd:4c:4d:08:e7:56:d0:8a:65:62:97:4e:a0:
dd:32:27:92:99:58:d6:dc:5f:39:6d:60:cf:28:02:59:3e:92:
bb:4a:e6:45:cc:c2:51:92:fc:72:bb:e8:36:41:a6:e0:d8:06:
8f:7d:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:18:52 2025 by rpki-client