Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WclbZXzoRolOPnP1txTGa2N2wfw.roa
File: WclbZXzoRolOPnP1txTGa2N2wfw.roa (raw, json)
Hash identifier: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=
Subject key identifier: 59:C9:5B:65:7C:E8:46:89:4E:3E:73:F5:B7:14:C6:6B:63:76:C1:FC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F26D1A7801996F130D8265FE8A9C1
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WclbZXzoRolOPnP1txTGa2N2wfw.roa
Signing time: Thu 02 Jan 2025 05:48:45 +0000
ROA not before: Thu 02 Jan 2025 05:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211376
IP address blocks: 45.131.1.114/32 maxlen: 32
194.116.228.174/32 maxlen: 32
2a0f:b700::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:26:d1:a7:80:19:96:f1:30:d8:26:5f:e8:a9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59c95b657ce846894e3e73f5b714c66b6376c1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:78:03:69:fc:7c:07:fe:29:c8:18:a8:c3:
ce:e1:50:ad:eb:9e:67:f7:6a:aa:2c:3a:6b:6d:2b:
58:dc:9a:1e:c3:0e:d7:f8:de:c3:99:1f:10:a9:05:
9b:14:b4:fe:a2:e2:8e:d6:81:a2:b8:60:92:88:0e:
8e:7a:54:ff:d8:25:aa:6b:33:f5:af:09:89:24:1e:
9c:f3:f4:8e:33:70:fd:4c:a6:d1:62:fb:9e:f6:b6:
b7:83:08:18:df:ec:60:9e:b4:f3:1a:58:99:7e:3f:
49:34:7f:6f:7b:8c:54:2a:78:fe:0a:92:8c:16:f5:
32:1b:02:01:1a:58:4a:78:32:6c:95:9f:ab:c4:42:
24:69:9f:a2:b2:11:5a:6b:8b:f0:56:6e:1f:64:81:
ba:34:56:14:6c:60:3c:28:ce:0a:84:50:ac:5e:96:
42:21:83:4d:ba:75:de:32:9b:b8:1d:a6:e5:21:ae:
71:f7:92:67:be:b1:6f:f6:aa:03:6c:c6:20:bf:80:
9a:3a:cc:06:54:a1:0e:c6:dc:b8:a1:8a:1f:34:60:
ce:c3:6f:ab:81:ff:58:bc:6a:d8:6b:67:ae:cf:d7:
8d:3a:33:a9:cb:22:0f:0a:7e:8e:d3:f9:35:54:6e:
05:f1:24:a9:00:7d:1e:df:de:0b:4b:50:2a:9b:a7:
fa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C9:5B:65:7C:E8:46:89:4E:3E:73:F5:B7:14:C6:6B:63:76:C1:FC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WclbZXzoRolOPnP1txTGa2N2wfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.1.114/32
194.116.228.174/32
IPv6:
2a0f:b700::/29
Signature Algorithm: sha256WithRSAEncryption
8f:ee:43:7e:d5:52:1e:be:43:e6:06:df:9d:8a:99:e2:86:76:
8e:49:a6:e9:5a:76:a3:dd:a4:e0:eb:4f:58:ad:e9:4a:ea:83:
7b:be:38:4b:22:e8:69:13:1d:19:be:b9:c4:e6:92:ec:a6:b9:
e0:70:36:9f:22:55:bd:12:31:cd:f0:fb:b8:58:e9:4f:50:0f:
6e:b1:ab:a6:88:12:6b:52:3f:7e:b9:da:ac:2e:06:3d:63:fb:
dc:12:75:0b:21:21:e9:5c:f7:72:cf:95:a3:a8:bb:5e:6c:61:
88:b8:9c:0a:9a:84:fa:92:6e:0b:50:af:cd:2c:6c:7b:8a:56:
89:83:72:15:8c:b8:f3:c0:8b:8f:08:ea:4b:f6:bc:c5:df:39:
2e:65:e2:db:3f:a0:57:1f:54:b1:50:02:b2:46:35:51:b2:2f:
78:7d:45:3b:4e:7e:2b:c2:6c:e8:6d:5e:b7:42:b9:20:76:4b:
ee:75:54:96:f2:8b:f3:c1:45:23:4c:c8:08:e5:f4:a9:d7:35:
7c:38:95:ff:cf:cf:ac:4b:d9:70:4f:3c:7e:54:a9:b3:06:83:
2c:60:2f:a4:63:f1:c4:73:e5:91:51:cc:65:72:49:02:68:28:
43:3e:00:18:4f:93:d3:06:9f:70:7b:69:f9:cd:a4:17:fd:8c:
94:e7:fe:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:02 2025 by rpki-client