Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa
File: WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa (raw, json)
Hash identifier: cwVGAvm4ISTc3hrZPIqP9LBQXHGGf2V0XCAeWNsC/Qc=
Subject key identifier: 58:1E:15:14:9B:4C:75:14:3C:2C:F0:FE:A4:F4:82:1F:3A:D7:1A:6B
Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial: 019420D64F42F3CF18B017F6770455EA1E0D
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 212.46.57.0/24 maxlen: 24
2a12:fc0::/48 maxlen: 48
2a12:fc0:20::/48 maxlen: 48
2a12:fc7:ffef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4f:42:f3:cf:18:b0:17:f6:77:04:55:ea:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=581e15149b4c75143c2cf0fea4f4821f3ad71a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:c4:7f:66:df:38:a7:de:e8:e1:68:b6:a2:
8f:76:c1:8f:c5:12:d9:ba:58:7c:ea:ed:bc:ad:ff:
de:2a:a6:23:c0:9f:ae:33:d8:01:96:f2:b3:e7:3b:
eb:5c:af:8f:70:66:5a:c6:ef:75:23:69:07:1b:bc:
83:4b:64:22:75:9b:2f:be:23:38:0e:a8:88:98:dc:
35:9c:2f:f2:e3:f3:1b:2e:98:0b:8c:a8:8e:86:dc:
30:05:e2:bb:60:6a:d1:86:7b:01:5a:3c:dd:cd:17:
c6:7b:60:52:a3:3e:46:30:ae:99:d2:c1:be:42:2b:
d6:43:d6:a8:15:c0:45:29:b4:e5:ed:bc:e4:4c:29:
f9:d0:4f:56:4a:f9:b9:96:a3:93:26:61:e4:47:ab:
ab:5b:7a:3e:ec:cc:32:00:ea:53:c3:ad:42:b1:18:
9d:84:48:50:9f:49:0b:4f:71:fb:94:eb:be:b0:8e:
30:46:4d:76:58:f4:f1:f6:f8:ce:91:c1:76:b4:77:
06:b6:6a:65:1c:4b:82:b0:6a:d8:4b:62:a6:3d:5b:
26:37:d5:b5:46:7a:ae:14:f6:07:7c:f0:a9:d8:0f:
44:dc:69:05:ce:51:35:19:f2:a3:d5:ed:82:56:a3:
58:46:a4:43:46:4e:b9:65:cd:5d:6c:28:9f:b2:b8:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1E:15:14:9B:4C:75:14:3C:2C:F0:FE:A4:F4:82:1F:3A:D7:1A:6B
X509v3 Authority Key Identifier:
keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/WB4VFJtMdRQ8LPD-pPSCHzrXGms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.57.0/24
IPv6:
2a12:fc0::/48
2a12:fc0:20::/48
2a12:fc7:ffef::/48
Signature Algorithm: sha256WithRSAEncryption
6a:4e:9d:92:2a:17:1f:2d:4b:ae:74:bb:6b:82:2f:a0:9a:14:
f7:c3:a0:3e:7b:9e:30:ec:6f:fe:2a:c7:6f:74:e4:8a:e1:d9:
9c:5e:0f:24:54:9f:00:66:ef:e4:b8:9f:2b:77:57:18:a9:04:
99:33:5a:16:2d:55:e5:3a:62:a7:29:29:99:56:5c:dc:74:86:
47:5b:f6:75:5d:d0:e7:07:24:e7:91:30:9c:2c:9c:cd:1a:33:
e2:6f:a5:3e:e4:9b:79:ad:8e:c4:c1:fb:71:e8:03:f1:71:36:
bf:ca:5b:33:3e:e6:89:66:ef:79:39:bb:bc:ca:1f:ba:96:c7:
8d:32:1e:d3:fb:23:e7:e7:14:5e:0d:8b:58:3f:49:fa:93:b2:
a9:9b:fb:9b:ca:bc:25:bf:af:5e:24:8f:bd:9e:66:c2:1e:72:
88:85:d9:c5:67:65:c5:56:c1:f4:26:e0:36:4e:5c:66:f2:b8:
a9:d9:28:34:7b:d0:d9:f4:f4:63:e5:d3:de:13:50:e4:4d:90:
1f:94:55:7a:1f:a4:3e:14:d6:5a:ba:5d:ff:50:6f:f8:a0:30:
a4:b9:e1:a4:a7:5f:64:3a:45:fb:49:a8:a6:bd:44:38:34:e6:
f0:35:4a:4a:8b:7a:79:5a:9b:95:24:22:42:2f:b3:aa:f6:fc:
e2:df:b9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:13:51 2025 by rpki-client