Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WoudBW4BS6qbTcOi0Imq0w7g8bQ.roa
File: WoudBW4BS6qbTcOi0Imq0w7g8bQ.roa (raw, json)
Hash identifier: wgw8Bn9l6+UpRtRZU1GOs8BSyFXFNk5DtJ/Adjm8gdk=
Subject key identifier: 5A:8B:9D:05:6E:01:4B:AA:9B:4D:C3:A2:D0:89:AA:D3:0E:E0:F1:B4
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C64FCF6B67C2A9E3712F2FE901D8
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WoudBW4BS6qbTcOi0Imq0w7g8bQ.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199106
IP address blocks: 89.37.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c6:4f:cf:6b:67:c2:a9:e3:71:2f:2f:e9:01:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a8b9d056e014baa9b4dc3a2d089aad30ee0f1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c9:b0:cf:94:26:ae:71:7e:bc:84:14:30:12:
4e:bd:49:c1:14:88:9b:0e:45:96:62:18:b4:ec:c4:
cb:1e:20:93:f0:ae:61:26:e6:67:e2:1d:66:4c:d7:
0d:df:61:ce:70:eb:85:f0:f3:96:4f:7d:d8:06:9d:
6e:91:40:5a:04:45:0f:b1:cd:69:5c:c2:cb:16:88:
87:d3:c1:68:63:98:ba:05:d9:2a:5d:c0:63:3c:4f:
32:ae:e7:d1:0e:9c:28:58:0b:c3:c7:89:6b:a9:ad:
69:c3:b1:8f:df:05:6f:3b:b6:74:78:71:4b:0c:02:
d1:be:08:a4:5d:d4:45:0b:e7:41:48:07:6c:19:16:
5c:29:b4:fa:dd:6e:5f:4c:ba:20:f9:f1:a6:47:3a:
8d:6e:ac:08:d4:87:3c:de:2c:1d:84:11:60:39:74:
45:e3:e4:19:d2:9e:bd:c1:a5:ed:b9:bd:b0:3e:52:
47:2b:1d:7d:72:9b:22:e5:fe:50:b9:b1:8f:df:e1:
a3:18:f2:4e:d6:80:97:17:87:11:b2:eb:bb:76:0e:
e0:40:d7:00:c4:13:4e:eb:53:ad:f8:6a:43:f6:ff:
65:cf:ba:54:3a:8f:7c:1d:d4:c9:8b:8d:7f:7e:aa:
ce:69:d0:6e:1a:2e:4b:8e:db:e1:13:26:cc:e0:2a:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:9D:05:6E:01:4B:AA:9B:4D:C3:A2:D0:89:AA:D3:0E:E0:F1:B4
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/WoudBW4BS6qbTcOi0Imq0w7g8bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c7:af:6e:39:80:2c:ec:ba:3b:7c:39:67:f5:5d:30:61:c8:
fb:e2:0b:79:f1:05:b4:57:34:51:79:f4:f6:b2:4e:d0:e6:19:
5b:a5:3c:c2:97:c3:60:94:5b:b3:8a:09:67:bb:0c:6e:34:22:
dc:9f:08:53:c0:8b:90:1a:81:26:2d:3e:99:50:22:36:ac:83:
34:93:8d:33:67:d3:79:89:34:ab:0c:00:42:6b:90:bb:ae:fd:
81:b2:0b:2f:b0:21:f6:83:59:2a:00:b0:7d:88:9f:cb:3f:d2:
1f:5a:46:8e:82:f3:e9:2d:b8:4d:82:a8:c0:da:21:fc:be:d2:
7a:61:4d:d5:df:a1:39:a8:97:a0:9f:fe:64:78:aa:fd:89:62:
da:8a:d5:a3:f7:0e:3b:cb:ac:cf:84:69:87:ca:ca:d4:48:15:
46:30:f9:d3:59:e2:ee:b7:7d:db:2c:68:a6:e9:9d:12:7a:ad:
a0:06:41:ee:89:b6:20:e1:48:80:8f:83:7e:d0:be:f7:9f:d4:
57:48:fd:2a:77:1b:fd:cb:da:f6:cf:ff:c0:f9:48:c8:19:46:
6e:f5:4d:28:1c:95:15:ff:d0:c1:e5:e8:9b:d6:9c:42:6e:08:
cd:21:44:cd:06:9c:5d:7c:2b:fd:ee:0f:44:c9:ff:5f:b6:31:
5c:aa:b6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:46:00 2025 by rpki-client