Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/wbsu-F9aDLpOh1E-iGGerHKMETE.roa
File: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (raw, json)
Hash identifier: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=
Subject key identifier: C1:BB:2E:F8:5F:5A:0C:BA:4E:87:51:3E:88:61:9E:AC:72:8C:11:31
Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial: 0194244486EFF662A478B13ABD1E798771DC
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/wbsu-F9aDLpOh1E-iGGerHKMETE.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 91.208.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:86:ef:f6:62:a4:78:b1:3a:bd:1e:79:87:71:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1bb2ef85f5a0cba4e87513e88619eac728c1131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:1a:2a:fa:91:35:6e:a3:53:30:a4:34:78:
c3:ba:48:fd:ed:22:0f:5a:a5:f7:fd:c7:81:2c:bf:
30:ec:36:b1:7e:73:6d:f4:97:7b:2b:f0:84:1e:4c:
c7:e8:3f:8b:e6:06:95:62:63:28:2b:a8:0e:f1:aa:
c0:30:78:8c:db:c6:20:80:ca:ab:e6:c7:cd:a4:41:
a3:ff:52:d1:44:fc:a1:e7:84:e1:71:23:1d:fa:e6:
ae:d9:09:ed:22:7a:dc:40:c1:07:cf:cd:83:a4:66:
37:bf:db:8d:d8:14:30:c6:ce:26:02:7a:54:26:90:
0f:14:97:74:07:f7:fb:db:98:7c:cc:2e:29:10:06:
13:43:df:5f:69:76:61:51:06:fa:43:55:67:54:f6:
ea:65:fb:07:eb:34:19:c8:17:50:58:97:01:6a:05:
86:78:bf:d7:fd:27:3e:7d:58:fc:81:5b:43:e4:cd:
fc:c0:1e:61:38:17:52:ca:a2:7e:be:17:7c:8b:63:
ec:97:91:40:4b:82:b6:bb:1e:8c:79:93:d4:93:0c:
f6:d1:1b:f6:22:a3:95:32:f8:5d:ca:71:8b:42:54:
a6:41:ea:f6:68:42:fe:02:08:86:2f:18:a9:53:53:
16:8e:d0:a0:08:fd:1d:2c:68:23:02:da:8e:04:e5:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BB:2E:F8:5F:5A:0C:BA:4E:87:51:3E:88:61:9E:AC:72:8C:11:31
X509v3 Authority Key Identifier:
keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/wbsu-F9aDLpOh1E-iGGerHKMETE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bc:b8:c0:8e:bc:36:4a:11:af:c7:b2:19:61:a1:fc:6c:a0:
05:62:81:22:c0:1d:f9:c5:8e:55:e3:86:bc:3d:d4:ca:42:04:
7e:09:dc:11:c2:e7:fd:d5:3d:b9:2a:a6:5d:d2:ab:7d:60:b2:
eb:ab:c9:bc:9a:2a:a3:e0:cc:38:27:ba:19:e4:1b:93:c6:ec:
01:3f:8a:40:e6:8e:31:84:61:49:37:f7:b8:0e:c8:85:c3:bc:
88:42:4b:ba:b7:bb:0d:c8:94:69:88:02:0b:ac:02:c7:20:56:
11:18:99:87:b9:c7:d9:2e:02:bd:db:f9:89:13:8e:5c:ff:77:
51:01:d1:98:7a:ae:5a:e6:d0:75:69:45:98:f0:5c:72:53:5e:
84:a0:0a:7a:87:8f:4e:75:66:f7:97:1d:83:53:c6:38:f7:1a:
4a:0b:be:97:0c:d0:99:3c:4f:f9:30:a0:b8:33:20:2c:ab:79:
b0:b3:a4:c4:a1:14:51:1d:b8:89:18:04:07:bc:57:48:4a:bb:
3a:da:f3:dd:0e:3b:54:af:9c:da:7e:f8:d9:0d:b5:e9:01:b1:
da:60:74:94:85:88:07:71:9b:49:e9:e7:d2:e8:30:78:3a:d2:
7d:e0:64:1e:d9:bc:6b:60:30:99:9b:9f:f6:07:70:da:c5:aa:
a1:bc:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:01:14 2025 by rpki-client