Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/WGRsfAzpc5xX7GESUMGImwYaJiY.roa
File: WGRsfAzpc5xX7GESUMGImwYaJiY.roa (raw, json)
Hash identifier: hLur/QNKMlicAxeWfXgbaU1St8hJfOLKnZqVjpngKZQ=
Subject key identifier: 58:64:6C:7C:0C:E9:73:9C:57:EC:61:12:50:C1:88:9B:06:1A:26:26
Certificate issuer: /CN=254bacb2712c259c873cdf0c1196c21e523a1138
Certificate serial: 081DB930
Authority key identifier: 25:4B:AC:B2:71:2C:25:9C:87:3C:DF:0C:11:96:C2:1E:52:3A:11:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUussnEsJZyHPN8MEZbCHlI6ETg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/WGRsfAzpc5xX7GESUMGImwYaJiY.roa
Signing time: Sat 01 Jan 2022 02:56:28 +0000
ROA not before: Sat 01 Jan 2022 02:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43582
IP address blocks: 91.198.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136165680 (0x81db930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254bacb2712c259c873cdf0c1196c21e523a1138
Validity
Not Before: Jan 1 02:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58646c7c0ce9739c57ec611250c1889b061a2626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:78:da:c4:df:08:95:f8:5b:e0:82:97:31:
dc:10:d3:a8:4a:23:b1:a0:b8:57:36:80:97:7f:32:
6c:6b:50:9b:f4:0f:98:55:3d:f5:c6:8c:15:00:71:
10:45:05:2c:92:b6:6e:9b:1d:ee:aa:32:4e:67:bc:
9d:37:4e:fb:ea:b6:bb:8f:c2:d0:24:f1:c5:71:3a:
07:97:a0:a9:df:c5:d0:3e:27:92:9c:39:2e:80:66:
72:bb:ba:5f:66:b4:04:96:ae:bf:a5:a1:55:68:81:
b3:9c:be:2d:a4:33:b6:d2:7a:53:16:42:a1:bd:7a:
c4:a9:c7:cf:62:5a:c4:0e:98:c7:d8:f3:d2:29:72:
b3:bc:93:07:19:86:76:8f:c2:d8:54:68:25:6f:f4:
05:9a:48:17:73:d7:54:00:db:d0:af:f7:bb:19:d8:
f7:56:b1:91:b8:85:03:be:39:79:0b:7f:a0:1d:70:
61:fa:9e:f4:e4:45:52:37:27:ea:79:b4:99:23:69:
3c:c1:ef:9e:8e:0c:b2:89:63:62:40:4d:a7:28:42:
67:04:df:b9:53:6a:ca:79:dc:cc:46:fc:32:6b:ea:
98:fa:fb:5c:d6:c9:16:61:96:d8:4d:ff:c4:46:ea:
d5:d0:d8:a7:1c:67:27:20:d0:61:b5:50:f5:77:de:
c4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:64:6C:7C:0C:E9:73:9C:57:EC:61:12:50:C1:88:9B:06:1A:26:26
X509v3 Authority Key Identifier:
keyid:25:4B:AC:B2:71:2C:25:9C:87:3C:DF:0C:11:96:C2:1E:52:3A:11:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUussnEsJZyHPN8MEZbCHlI6ETg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/WGRsfAzpc5xX7GESUMGImwYaJiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6657da-a179-4c6b-87f9-9f9d31be8899/1/JUussnEsJZyHPN8MEZbCHlI6ETg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.61.0/24
Signature Algorithm: sha256WithRSAEncryption
25:67:9a:6d:9e:f8:56:73:ef:a8:d6:50:30:b7:d8:91:45:17:
50:6e:73:49:28:51:14:c3:19:cf:92:e9:88:c2:47:a5:b5:4a:
53:81:f8:29:ac:c4:8e:94:2c:ab:73:5e:91:5d:96:a3:04:52:
b1:97:dd:4e:15:71:fa:09:27:b4:72:b3:6f:5f:a0:0f:fd:41:
a1:a2:59:10:4d:98:83:b8:73:7b:84:18:9a:ba:1d:46:54:d6:
c8:ea:7a:32:c2:f7:16:3b:15:c3:f4:bd:4c:17:7a:2f:2c:f5:
0e:8e:5e:17:3d:0b:08:63:01:f0:b1:17:2d:63:c3:56:3a:73:
a7:7d:2b:54:db:09:3d:a1:a5:45:ca:5a:5d:10:1d:6e:e3:21:
4d:6a:6c:d8:03:45:b7:e6:65:1a:ef:8c:5c:7e:02:1e:17:3a:
1a:9c:2b:26:92:1f:d3:2b:a6:ee:f9:57:7e:0b:88:70:58:c7:
26:f3:e7:bd:e9:a7:a6:11:a3:56:4d:40:a8:f4:0f:88:0d:31:
af:be:da:a0:f4:59:68:7d:3c:68:37:e2:f6:69:b7:86:8a:6e:
11:a6:84:41:8a:48:e3:68:fa:62:ee:5a:22:17:ca:a9:6c:8a:
fe:13:7a:11:fd:b9:99:a5:02:75:e0:2c:12:de:07:cc:63:e1:
f8:7e:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:52 2025 by rpki-client