Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/WNJuWEXBIip_f5G2ObX5HLas-6I.roa
File: WNJuWEXBIip_f5G2ObX5HLas-6I.roa (raw, json)
Hash identifier: boUS884QFMK9V7SQvxUAnalpgEFhwVVzKbrcjkzFqDQ=
Subject key identifier: 58:D2:6E:58:45:C1:22:2A:7F:7F:91:B6:39:B5:F9:1C:B6:AC:FB:A2
Certificate issuer: /CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Certificate serial: 01942522113474697954BA7D126AB3B79DA4
Authority key identifier: 3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/WNJuWEXBIip_f5G2ObX5HLas-6I.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213333
IP address blocks: 85.209.36.0/23 maxlen: 23
85.209.36.0/24 maxlen: 24
85.209.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:11:34:74:69:79:54:ba:7d:12:6a:b3:b7:9d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2c854011140a10947da7b53bbb350f3c54b33e
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58d26e5845c1222a7f7f91b639b5f91cb6acfba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:bc:56:eb:54:88:24:d0:cd:ba:87:2b:94:
87:c8:44:ae:68:e0:af:c4:68:ff:00:d2:51:34:b1:
a7:89:d8:44:61:60:51:97:79:10:5f:7f:0b:f0:11:
79:ca:68:0e:83:b1:a0:98:c4:79:58:b7:09:7e:55:
05:73:6e:db:a6:72:f3:b3:39:d0:f2:86:dd:fd:c3:
02:69:46:a8:48:71:41:5b:4d:4a:e7:2e:be:ee:2a:
bb:2c:aa:2d:86:60:45:2a:75:d7:05:95:24:df:b5:
c0:cf:96:01:1e:20:41:78:9d:05:ed:41:71:3c:b5:
b9:c4:49:37:75:e0:04:74:01:5e:8d:ce:3e:7c:ea:
25:21:d3:c4:d7:a5:c8:12:6a:fa:9c:00:b2:b2:ff:
24:c6:16:00:60:f4:aa:bb:9f:5d:4d:9a:fa:cf:f0:
01:c2:22:ec:73:5f:39:11:d1:16:95:93:8b:8a:33:
0b:f1:d8:0b:ab:3c:54:86:fd:47:a7:b7:86:bf:36:
fe:f1:c3:e8:38:a1:dd:96:76:42:f0:0c:e5:74:7d:
87:f5:5b:0a:28:20:38:81:96:97:3e:06:99:3e:11:
e1:92:d2:cc:a2:23:74:73:fb:7f:e7:80:f4:ae:35:
97:c6:a9:0c:ac:d5:af:ec:37:25:ab:17:dd:06:bc:
b7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D2:6E:58:45:C1:22:2A:7F:7F:91:B6:39:B5:F9:1C:B6:AC:FB:A2
X509v3 Authority Key Identifier:
keyid:3C:2C:85:40:11:14:0A:10:94:7D:A7:B5:3B:BB:35:0F:3C:54:B3:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCyFQBEUChCUfae1O7s1DzxUsz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/WNJuWEXBIip_f5G2ObX5HLas-6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e0580d-048a-4e6d-bec6-b5bbd0b5e0aa/1/PCyFQBEUChCUfae1O7s1DzxUsz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.36.0/23
Signature Algorithm: sha256WithRSAEncryption
79:f4:7f:23:0c:70:99:60:5e:b6:f0:df:95:2e:cd:1f:1e:ff:
ec:24:d5:3c:06:d8:f1:ec:5b:11:33:d1:c3:6b:9c:7a:ae:41:
96:75:6f:ff:b0:03:b4:14:ca:2a:6e:51:4d:da:c5:94:66:ce:
16:c5:39:b1:86:e1:9c:92:4c:f8:2a:1c:ca:25:6d:7d:fd:ee:
16:4c:5e:16:b8:7d:f5:a2:6a:d7:eb:27:6d:fb:aa:80:82:4e:
8a:65:f8:9f:7a:b5:2a:aa:82:87:9d:03:6e:48:b0:e4:70:b5:
ee:cb:b1:4a:11:46:d9:db:95:f4:2b:b5:5e:f0:bc:77:60:71:
43:2a:cf:b9:6c:10:ed:d7:d2:0e:70:4d:55:e5:da:f1:90:2a:
2a:7e:78:b7:e2:40:f9:3a:60:bd:47:80:58:39:f4:a6:31:8d:
ff:c6:2c:13:dd:a3:ba:db:cd:c7:3d:20:9c:81:ba:60:a4:f8:
3d:ef:c4:1e:96:ad:34:70:ad:ad:b4:2a:f4:be:17:75:c2:04:
29:20:d9:e6:12:57:bd:68:1e:5d:34:52:ad:33:28:50:0d:f4:
1e:66:e3:c7:0d:de:4f:65:76:cb:28:d5:e4:d0:b7:65:19:7f:
cb:46:20:4b:f7:19:74:f9:df:ea:c5:95:64:d4:99:80:bd:63:
a7:fd:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:55 2025 by rpki-client