Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa
File: wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa (raw, json)
Hash identifier: hApFysPixMC2EBljVd1zm9U6jkNX4gLFQUXs9uZSHu4=
Subject key identifier: C2:95:49:6A:4F:B8:61:8B:83:6C:9F:D9:EF:F5:64:63:EC:BE:2C:0D
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01942826433761E672D4466BF4D55C364442
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa
Signing time: Thu 02 Jan 2025 17:53:03 +0000
ROA not before: Thu 02 Jan 2025 17:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 217.28.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:43:37:61:e6:72:d4:46:6b:f4:d5:5c:36:44:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c295496a4fb8618b836c9fd9eff56463ecbe2c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:c6:c7:ad:d4:fa:32:4e:88:a6:66:30:e0:
78:bd:5c:be:8f:a4:95:59:bb:1f:2e:d0:3a:84:cf:
a8:99:a0:8a:6a:d0:c8:de:1d:aa:7f:11:f5:65:3e:
b9:a1:8d:25:b0:f4:ea:b8:b7:31:f1:61:4e:15:e5:
f9:75:4c:8f:ab:ba:7e:ac:81:7c:d2:5f:4d:29:9a:
7d:65:38:20:12:63:c0:6b:61:91:bd:00:24:b2:23:
d3:9c:41:55:51:93:db:34:21:6b:3f:fb:9a:92:52:
47:23:df:f7:6f:88:8d:ab:a5:dd:71:38:0e:0d:75:
1c:f1:83:16:ac:e1:c2:b0:e8:7a:88:c4:14:14:6d:
cb:8e:9b:73:f4:aa:89:5e:9a:93:ee:8b:13:de:4b:
e6:90:9b:ed:76:e0:29:ba:5b:d0:12:70:3b:f0:9f:
9c:7c:f0:a3:75:9c:06:fd:4a:3d:9a:77:9f:4a:4a:
b1:dc:b6:f1:57:a7:d4:93:47:9d:f4:8d:ef:bf:65:
e6:b9:e0:3d:c4:07:f0:2d:ef:25:66:80:7e:e5:61:
0d:17:50:42:a3:80:10:ab:53:50:87:d8:5d:21:a0:
e5:13:75:1d:ba:03:c8:01:0d:0b:51:3e:6f:32:8f:
d3:f2:70:65:ef:32:c8:9f:30:df:e1:e4:4e:9b:28:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:49:6A:4F:B8:61:8B:83:6C:9F:D9:EF:F5:64:63:EC:BE:2C:0D
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/wpVJak-4YYuDbJ_Z7_VkY-y-LA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.129.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e6:6c:6e:e7:5f:d7:3c:20:5c:7a:7f:b3:c3:26:30:00:53:
19:78:92:bf:03:29:c0:5c:67:e7:65:92:42:10:1a:0d:0f:55:
e0:12:ed:02:4c:7f:3d:2d:20:b2:b7:a0:97:df:90:29:03:0e:
88:10:61:94:6d:04:f7:94:0f:ff:ef:2b:a1:b1:f0:41:cf:37:
14:dd:5f:4d:b3:f4:8c:4a:6f:ab:68:99:4b:23:13:9d:7e:d9:
97:cf:1b:87:66:56:75:05:84:8b:c7:08:f1:10:a3:68:ca:cc:
d3:d9:1e:4e:b6:17:3d:65:bc:31:c3:73:36:24:74:d4:ad:99:
b0:61:46:d1:58:4e:25:b2:71:53:1a:26:65:28:25:69:30:88:
8d:b0:09:cf:a3:b2:45:ed:7d:de:53:4e:d5:9c:7e:0b:56:24:
e8:30:18:16:46:42:75:aa:7d:52:e5:3b:ff:5d:fd:02:42:14:
06:ad:0e:a0:f4:8c:92:eb:96:28:fb:44:2a:60:60:f1:89:32:
e3:01:58:db:64:b0:5f:61:9e:b6:10:78:da:e3:3a:00:32:b0:
c1:2c:38:79:b4:46:da:10:24:0f:9d:d7:36:b0:5e:3b:6d:7b:
fc:cf:95:3e:ec:8b:b3:6c:48:04:f8:3f:a2:5d:fc:c1:d3:fe:
fc:4f:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:12:23 2025 by rpki-client