Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/WrznMHjZ-TWido1gLYI1bfVUCu0.roa
File: WrznMHjZ-TWido1gLYI1bfVUCu0.roa (raw, json)
Hash identifier: ihQrw9/7rFTMBQ43NuItjX9UIXKmTvOZATZckZMKMRU=
Subject key identifier: 5A:BC:E7:30:78:D9:F9:35:A2:76:8D:60:2D:82:35:6D:F5:54:0A:ED
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0194266B55697DE5FA207BCFC189F8B82FB4
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/WrznMHjZ-TWido1gLYI1bfVUCu0.roa
Signing time: Thu 02 Jan 2025 09:49:15 +0000
ROA not before: Thu 02 Jan 2025 09:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 91.235.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:55:69:7d:e5:fa:20:7b:cf:c1:89:f8:b8:2f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5abce73078d9f935a2768d602d82356df5540aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c6:5e:84:3f:ef:44:d2:f3:c9:b8:6e:d8:be:
32:b2:97:a5:3d:60:0e:20:a7:b7:73:d2:ac:00:bb:
ce:8c:07:d4:3c:6e:2e:55:20:e5:b6:e5:9e:f0:15:
39:64:8a:6d:01:56:15:88:ce:ae:df:dd:f7:3a:d8:
d7:f8:57:fb:86:8f:84:1b:7a:3e:99:9d:f5:e6:18:
a7:c9:c7:61:38:23:b5:a9:3b:a9:bd:84:26:61:f9:
4f:83:14:d7:6c:c0:bd:ff:6a:12:3b:52:a1:f1:78:
16:7b:35:10:93:d5:23:1d:83:b2:59:aa:6a:3d:6d:
77:82:80:ea:c7:b7:1c:5f:65:81:cd:05:c8:f7:6b:
3d:3b:a6:ea:73:88:52:67:5b:79:94:d8:0e:7f:94:
13:aa:1e:91:0c:5b:4c:2d:d3:a1:8d:86:97:f9:fa:
8a:1c:14:2b:98:40:95:d6:77:ab:0a:63:c0:bc:e7:
d7:69:02:b2:b1:2b:3d:4f:03:56:92:b0:45:f5:78:
d8:40:e9:df:c0:4f:08:f4:6e:2b:61:4e:42:63:ab:
0b:81:9c:5c:80:6f:b6:92:05:47:c0:30:5f:f5:b2:
81:5c:e8:00:f4:f2:8b:2e:8a:16:53:dd:ee:57:a4:
ce:9a:ec:4a:27:88:cf:63:73:ce:c2:26:9a:a2:f7:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BC:E7:30:78:D9:F9:35:A2:76:8D:60:2D:82:35:6D:F5:54:0A:ED
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/WrznMHjZ-TWido1gLYI1bfVUCu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:f3:f6:62:2b:41:09:21:b7:8c:08:49:89:8c:7b:15:7f:98:
96:fc:67:2e:5e:7c:b5:e3:fd:45:4f:30:bc:67:63:6a:3c:a8:
d1:ab:52:2d:f2:9e:5b:ee:9a:73:7d:ff:9d:72:4c:93:cc:47:
ef:ab:34:94:f5:3c:45:4d:88:57:c3:9a:26:94:4b:76:a0:42:
aa:f0:ca:13:a5:5c:ff:a9:a5:4e:f2:35:6f:92:4f:ab:f2:23:
ee:c2:08:c7:8a:27:03:1d:93:e8:c4:11:a3:6c:23:d7:00:12:
d6:46:a0:1c:2e:62:b7:a1:85:cf:7c:9e:9a:d9:81:6c:4e:bc:
69:08:05:8d:cb:5f:3b:5f:da:6e:6f:9c:59:8e:b4:01:47:f1:
8a:d4:67:97:4c:71:0c:3b:be:97:c4:99:6f:05:a5:c3:40:43:
e6:56:cc:d0:eb:b4:0a:c5:cf:93:6e:75:01:df:a9:0e:ee:cf:
b6:42:be:ad:2f:03:4d:19:e8:1c:d9:75:64:da:76:25:d0:75:
44:c9:6b:19:cc:89:93:2a:9d:32:62:bb:dd:0b:2b:6d:3f:0d:
ee:1d:7f:d7:7b:d8:4b:df:38:37:0f:3e:80:f1:5e:fe:a3:8e:
9a:10:0a:c1:bf:30:d4:1d:3d:d4:43:4e:04:d0:f2:3e:71:55:
55:7b:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:23 2025 by rpki-client