Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/wWWnVYfT4DiwOYnGXsa9mJ4A2a8.roa
File: wWWnVYfT4DiwOYnGXsa9mJ4A2a8.roa (raw, json)
Hash identifier: CPjhTeH9IgCiZ5C6Ah1idUmnExILRDViqNe4nwiWYQk=
Subject key identifier: C1:65:A7:55:87:D3:E0:38:B0:39:89:C6:5E:C6:BD:98:9E:00:D9:AF
Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Certificate serial: 0194266BD92C34F64377DE1993375FBC3E95
Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/wWWnVYfT4DiwOYnGXsa9mJ4A2a8.roa
Signing time: Thu 02 Jan 2025 09:49:49 +0000
ROA not before: Thu 02 Jan 2025 09:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 89.38.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d9:2c:34:f6:43:77:de:19:93:37:5f:bc:3e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770
Validity
Not Before: Jan 2 09:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c165a75587d3e038b03989c65ec6bd989e00d9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:70:2c:6f:0a:dc:c3:b7:f2:15:47:db:f7:
bc:ae:97:2f:6f:ad:74:ef:e7:f5:22:4e:0a:57:a9:
4c:a6:80:68:fc:1f:ce:c3:89:6c:72:81:25:28:14:
70:4a:3e:e2:87:53:23:93:e5:51:33:cc:aa:41:af:
c3:b9:c2:b9:33:b4:dc:9d:38:96:2c:06:f5:b2:6d:
ff:ff:ba:17:ac:9f:c0:01:b2:e3:91:9e:45:07:7e:
fd:cc:2f:41:31:8c:01:18:eb:4d:a9:ad:da:d6:29:
16:38:2a:10:d3:3b:f7:4d:bb:5a:fd:3e:f6:6e:a9:
a2:e0:b8:37:a8:cf:d4:48:62:c7:fe:a6:03:37:9d:
6c:08:98:53:0d:fd:d2:95:ca:09:9f:39:0d:34:2a:
d0:6b:6a:28:63:4d:7e:b6:fa:15:a6:09:5c:c5:86:
e8:35:c2:f0:69:b6:8c:10:0e:b4:a6:e5:50:41:39:
5f:27:90:1f:5d:0d:95:f7:04:41:3a:ad:7b:64:5e:
7d:55:7e:82:cb:0b:36:c8:ad:f0:08:4f:97:a4:85:
63:bf:79:f9:2b:07:a4:f7:a6:7d:fd:8f:d5:03:f0:
7c:85:0c:d7:a8:5d:47:4f:a7:1d:da:5d:93:2e:7e:
04:83:1e:00:8c:75:ed:bb:1f:9e:3c:11:30:67:42:
8e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:A7:55:87:D3:E0:38:B0:39:89:C6:5E:C6:BD:98:9E:00:D9:AF
X509v3 Authority Key Identifier:
keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/wWWnVYfT4DiwOYnGXsa9mJ4A2a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.38.28.0/22
Signature Algorithm: sha256WithRSAEncryption
79:b0:73:3c:81:6f:42:e0:f4:37:7d:d4:81:3f:9f:c8:3d:91:
5f:4b:df:d8:ac:b6:9a:39:ff:80:4f:ff:6c:cc:c4:10:71:1a:
4d:48:2b:e7:14:bf:ac:22:7e:df:2f:b9:6c:7f:6b:ef:4b:cf:
dc:83:af:ad:d3:97:e8:ba:cb:93:2c:c9:53:b3:bd:48:29:3e:
c5:60:c4:74:31:97:cd:35:00:b1:3f:54:cf:09:25:84:69:12:
29:28:d8:b4:94:f1:9b:e6:1f:e8:9a:d4:3f:9a:b5:e1:4e:27:
d6:2e:e1:92:c6:1c:8e:57:e6:6e:52:be:08:90:c9:3d:90:82:
88:2e:3d:b8:46:fe:6d:ee:c6:03:75:76:cc:c4:5a:c6:33:35:
81:51:7a:3e:76:40:2b:69:08:ac:2a:29:4f:c1:6b:89:f2:e9:
3d:d3:63:c0:3a:73:dc:39:76:e0:92:e8:45:60:8c:af:77:af:
86:e3:9b:09:a2:10:93:36:8a:27:f9:2b:29:6a:a4:bb:16:15:
ca:2d:19:b2:e2:00:78:51:9f:f8:19:83:82:47:91:ea:13:58:
6f:30:3c:3c:be:0f:42:99:93:e4:f7:75:25:33:58:4a:06:ef:
89:ac:f3:d6:90:3f:b4:7c:7b:44:92:7c:f7:9b:cd:e4:fb:6e:
86:ce:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:21:14 2025 by rpki-client