Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/WB5IR-rncEh5erhRHuCyer1roLg.roa
File: WB5IR-rncEh5erhRHuCyer1roLg.roa (raw, json)
Hash identifier: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=
Subject key identifier: 58:1E:48:47:EA:E7:70:48:79:7A:B8:51:1E:E0:B2:7A:BD:6B:A0:B8
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01941F8C520653D4503AA42BC18FBC35ABAA
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/WB5IR-rncEh5erhRHuCyer1roLg.roa
Signing time: Wed 01 Jan 2025 01:47:57 +0000
ROA not before: Wed 01 Jan 2025 01:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.193.240.0/22 maxlen: 24
31.193.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:52:06:53:d4:50:3a:a4:2b:c1:8f:bc:35:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=581e4847eae77048797ab8511ee0b27abd6ba0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3a:29:0e:43:fe:89:16:7f:13:cd:35:55:1c:
b9:d8:3d:ac:80:dc:2c:48:38:50:10:80:d7:3b:ec:
3e:66:3a:59:4d:05:51:7c:d5:ad:9e:3c:b3:bd:3c:
02:63:3b:0b:b0:59:95:5e:51:7b:99:a8:66:aa:20:
8a:8e:15:0e:58:51:ab:f1:14:85:94:2e:b9:1c:de:
48:78:ac:de:06:c2:80:9b:da:38:bf:0f:c3:21:9d:
c5:f6:0c:24:65:91:d9:ce:16:e2:cd:24:a9:03:32:
c0:da:b6:5f:12:f8:fe:0e:4a:62:55:36:95:6b:47:
93:7d:38:b1:81:15:d8:ea:2e:8a:2e:6a:d3:e8:7f:
54:eb:d4:82:04:ff:6e:8c:7b:26:00:1d:1b:bc:bf:
87:fb:b0:7a:12:f9:41:a0:13:cc:ee:83:f8:8e:ca:
54:7a:3c:51:4f:a7:4e:7f:1a:ea:f4:39:1f:58:9a:
d2:bc:d6:8e:24:59:b8:1c:7f:dc:37:86:f3:e7:31:
80:1a:1b:19:5b:37:05:c0:38:64:e5:64:e1:a1:28:
8c:88:ce:33:5a:bc:ec:36:13:4b:a8:79:a5:89:7f:
6e:d5:3d:7e:7f:6c:6a:3f:93:10:4c:6d:47:64:55:
5c:65:68:4f:0e:ad:30:38:65:b1:b8:56:6b:58:81:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:48:47:EA:E7:70:48:79:7A:B8:51:1E:E0:B2:7A:BD:6B:A0:B8
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/WB5IR-rncEh5erhRHuCyer1roLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:fa:e9:b2:35:5b:b5:47:58:22:a4:ec:49:89:d8:70:6f:90:
cf:c9:3d:34:c1:38:44:68:a2:19:51:82:90:c1:22:19:41:de:
a4:11:18:f3:2d:fe:36:b1:ed:f4:b4:ac:d1:de:4e:2d:c6:9c:
45:ce:bb:58:82:88:51:c8:95:3c:a3:c0:89:c8:79:7e:0e:01:
37:58:80:ce:25:c9:6e:76:bc:ba:f9:53:76:ac:2a:9a:50:3a:
8e:b0:a9:96:59:2c:0f:23:3f:0f:08:e4:58:12:d4:eb:2c:da:
0b:9e:3e:23:14:4d:e7:57:91:4e:e7:6a:66:e8:83:6d:0c:9e:
63:b0:e9:eb:60:67:e1:c4:97:02:cb:5b:53:f7:73:dd:24:5c:
ba:77:2a:b4:e9:d6:f5:8b:6d:ef:0e:c2:df:c2:d5:fd:c8:cc:
44:d3:a9:69:18:95:f5:c0:92:bd:a2:d4:44:ac:8e:0d:be:b3:
54:04:b1:36:b4:ef:03:1c:c1:e1:83:e0:4c:7a:97:6b:16:ca:
ef:a2:d4:10:59:05:31:71:21:69:fa:69:48:02:2c:8d:73:50:
d3:6c:ca:97:e3:83:02:0a:51:9a:6c:23:88:bb:e6:95:95:e2:
ee:96:bd:92:53:a0:96:90:58:cf:92:e6:aa:a5:ee:6c:c3:5f:
d1:8c:79:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:54:03 2025 by rpki-client