Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae2f85-8770-4123-a21f-eaefb99fcbf8/1/WPoRXgr-myCA8i_JnH8HUvVxzGg.roa
File: WPoRXgr-myCA8i_JnH8HUvVxzGg.roa (raw, json)
Hash identifier: JkUelAV3aNH9RkZaUXXHm7hsH70OKHYvi5vZYqGFyo4=
Subject key identifier: 58:FA:11:5E:0A:FE:9B:20:80:F2:2F:C9:9C:7F:07:52:F5:71:CC:68
Certificate issuer: /CN=c28acb8dedbf078ec3ca59e8071030968bc8170c
Certificate serial: 08C0ECEA
Authority key identifier: C2:8A:CB:8D:ED:BF:07:8E:C3:CA:59:E8:07:10:30:96:8B:C8:17:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/worLje2_B47DylnoBxAwlovIFww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae2f85-8770-4123-a21f-eaefb99fcbf8/1/WPoRXgr-myCA8i_JnH8HUvVxzGg.roa
Signing time: Sat 01 Jan 2022 15:03:08 +0000
ROA not before: Sat 01 Jan 2022 15:03:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206894
IP address blocks: 45.8.80.0/22 maxlen: 22
2a0e:1a00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146861290 (0x8c0ecea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28acb8dedbf078ec3ca59e8071030968bc8170c
Validity
Not Before: Jan 1 15:03:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=58fa115e0afe9b2080f22fc99c7f0752f571cc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:7a:d5:20:73:6c:15:62:2a:e7:1e:f6:a7:
b4:2a:7f:03:62:7c:9a:36:e1:27:d3:e4:ac:58:c2:
53:18:23:cd:a3:da:32:c7:de:5b:18:5e:dd:ae:ca:
78:cd:a4:4a:c9:96:0e:68:e1:e5:75:13:91:64:00:
6b:1c:27:7e:12:67:5d:98:c4:c5:6b:39:77:ba:a2:
ed:61:10:36:1b:10:4f:12:c4:00:c4:fd:64:88:1d:
fb:79:0f:99:3a:75:fa:d7:51:02:50:2d:e4:c2:c6:
16:16:f3:1c:f9:19:2f:61:45:3f:05:99:84:85:ac:
71:d5:8b:f4:1c:6d:b3:81:f5:80:c7:47:5d:07:79:
bf:e6:ca:52:69:89:e4:26:89:0b:b0:11:f8:c6:87:
4d:6f:92:5f:44:65:df:a6:65:14:dc:a7:6e:61:b6:
dc:71:1b:cf:8c:0f:bf:ff:90:50:d7:1c:78:83:e9:
68:dd:3b:84:ab:33:d7:62:81:72:ef:78:3a:e8:7a:
ad:69:be:12:15:06:e5:53:c6:53:88:5a:08:50:c2:
5e:44:f1:8d:0e:c0:b4:d2:8b:22:8f:fb:be:81:13:
57:55:cd:11:3b:28:17:79:ea:02:4b:cb:de:60:6e:
27:cc:17:0d:b4:a5:35:f2:45:1b:eb:41:3f:69:87:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FA:11:5E:0A:FE:9B:20:80:F2:2F:C9:9C:7F:07:52:F5:71:CC:68
X509v3 Authority Key Identifier:
keyid:C2:8A:CB:8D:ED:BF:07:8E:C3:CA:59:E8:07:10:30:96:8B:C8:17:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/worLje2_B47DylnoBxAwlovIFww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae2f85-8770-4123-a21f-eaefb99fcbf8/1/WPoRXgr-myCA8i_JnH8HUvVxzGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae2f85-8770-4123-a21f-eaefb99fcbf8/1/worLje2_B47DylnoBxAwlovIFww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.80.0/22
IPv6:
2a0e:1a00::/29
Signature Algorithm: sha256WithRSAEncryption
0b:80:2c:e0:38:ea:7e:dc:6a:bb:f3:81:12:dc:8d:06:f3:5e:
a2:cb:5f:fa:70:bc:5c:0b:fd:2d:f3:41:8e:6d:43:6a:e2:58:
c5:da:ae:e9:c4:7d:ce:25:2d:e7:ec:e3:d9:c5:07:af:c3:5e:
71:56:d7:06:ce:2f:48:5a:b9:d6:18:dd:bf:bf:4f:d7:8d:61:
1c:aa:f4:80:94:fb:cf:e2:20:69:57:6f:6a:8a:05:b8:f4:a2:
bf:2e:a5:58:ad:48:0f:b1:2f:15:e0:21:7b:37:82:14:3b:ad:
30:71:97:4e:fb:98:b1:18:1e:11:ec:72:47:8b:7c:5b:1a:03:
50:e7:f6:23:1e:b4:02:10:b5:aa:6d:f0:68:0d:67:3b:c2:58:
f0:b6:25:32:5d:a5:6c:90:45:05:3c:40:77:1c:05:be:a1:06:
e1:70:cc:e0:bf:b1:fe:35:07:e5:b3:96:a0:f1:2e:14:db:8c:
d8:cd:98:a6:2a:21:2e:04:af:28:0d:f6:6e:ef:b7:84:2a:ea:
fb:80:c5:5e:d7:62:07:85:ba:54:32:e3:fc:37:31:e9:8d:04:
b1:a4:43:19:2d:59:aa:5b:da:2e:76:60:0b:a0:f4:54:41:3f:
b8:21:33:47:68:b3:39:7f:7c:3f:c3:a0:86:09:30:c9:84:73:
ad:3d:d5:d1
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIECMDs6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MjhhY2I4ZGVkYmYwNzhlYzNjYTU5ZTgwNzEwMzA5NjhiYzgxNzBjMB4XDTIyMDEw
MTE1MDMwOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNThmYTExNWUwYWZl
OWIyMDgwZjIyZmM5OWM3ZjA3NTJmNTcxY2M2ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOeetUgc2wVYirnHvantCp/A2J8mjbhJ9PkrFjCUxgjzaPa
MsfeWxhe3a7KeM2kSsmWDmjh5XUTkWQAaxwnfhJnXZjExWs5d7qi7WEQNhsQTxLE
AMT9ZIgd+3kPmTp1+tdRAlAt5MLGFhbzHPkZL2FFPwWZhIWscdWL9Bxts4H1gMdH
XQd5v+bKUmmJ5CaJC7AR+MaHTW+SX0Rl36ZlFNynbmG23HEbz4wPv/+QUNcceIPp
aN07hKsz12KBcu94Ouh6rWm+EhUG5VPGU4haCFDCXkTxjQ7AtNKLIo/7voETV1XN
ETsoF3nqAkvL3mBuJ8wXDbSlNfJFG+tBP2mHH0sCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRY+hFeCv6bIIDyL8mcfwdS9XHMaDAfBgNVHSMEGDAWgBTCisuN7b8HjsPK
WegHEDCWi8gXDDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3dvckxqZTJfQjQ3RHlsbm9CeEF3bG92SUZ3dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjAvYWUyZjg1LTg3NzAtNDEyMy1hMjFmLWVhZWZiOTlmY2JmOC8x
L1dQb1JYZ3ItbXlDQThpX0puSDhIVXZWeHpHZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjAv
YWUyZjg1LTg3NzAtNDEyMy1hMjFmLWVhZWZiOTlmY2JmOC8xL3dvckxqZTJfQjQ3
RHlsbm9CeEF3bG92SUZ3dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi0IUDANBAIAAjAHAwUDKg4aADAN
BgkqhkiG9w0BAQsFAAOCAQEAC4As4Djqftxqu/OBEtyNBvNeostf+nC8XAv9LfNB
jm1DauJYxdqu6cR9ziUt5+zj2cUHr8NecVbXBs4vSFq51hjdv79P141hHKr0gJT7
z+IgaVdvaooFuPSivy6lWK1ID7EvFeAhezeCFDutMHGXTvuYsRgeEexyR4t8WxoD
UOf2Ix60AhC1qm3waA1nO8JY8LYlMl2lbJBFBTxAdxwFvqEG4XDM4L+x/jUH5bOW
oPEuFNuM2M2YpiohLgSvKA32bu+3hCrq+4DFXtdiB4W6VDLj/Dcx6Y0EsaRDGS1Z
qlvaLnZgC6D0VEE/uCEzR2izOX98P8OghgkwyYRzrT3V0Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:27 2025 by rpki-client