Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/WVEl02tR4FpSWGE0ahJdvTx1Yno.roa
File: WVEl02tR4FpSWGE0ahJdvTx1Yno.roa (raw, json)
Hash identifier: 5NNyoAtIIwqGJh3NNq7YS6x3xdzErX6ICXLZ0eVA/9g=
Subject key identifier: 59:51:25:D3:6B:51:E0:5A:52:58:61:34:6A:12:5D:BD:3C:75:62:7A
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 019425FDAB89D6DF4FE3018876861A596754
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/WVEl02tR4FpSWGE0ahJdvTx1Yno.roa
Signing time: Thu 02 Jan 2025 07:49:29 +0000
ROA not before: Thu 02 Jan 2025 07:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21180
IP address blocks: 149.234.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ab:89:d6:df:4f:e3:01:88:76:86:1a:59:67:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595125d36b51e05a525861346a125dbd3c75627a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:96:c8:4f:52:ef:cb:77:02:d9:e7:9b:2e:
e9:ee:4b:6f:bf:8b:fe:78:0f:f7:3c:0d:0a:91:1a:
96:ed:23:5e:c7:66:d6:d2:90:7f:bb:1b:8b:8c:30:
cd:4f:8a:f4:d7:ce:e4:32:ce:77:44:d8:af:30:41:
37:fe:f1:69:cc:94:aa:d9:43:51:b6:44:63:b0:2e:
2f:a2:d6:93:f8:9f:d7:68:83:73:8b:61:ec:c0:f8:
ab:0b:e6:65:96:7f:07:cc:77:12:9a:98:46:a6:ee:
59:94:2d:32:4e:c8:4d:2b:f0:d1:9d:0d:7b:34:70:
38:56:8c:90:74:be:5d:e0:e1:a9:a3:47:ae:ff:b1:
ab:83:67:d7:08:0e:85:36:9f:44:e1:02:cb:f5:90:
ee:ff:fd:81:6b:22:18:9e:db:d2:2e:2b:d3:16:7a:
f2:f6:e7:ce:28:5e:2c:23:62:d7:a8:09:5a:15:f8:
73:22:73:43:95:86:98:4d:a6:30:43:04:52:5b:f4:
89:3d:dc:c7:89:f8:c4:1e:15:d6:b2:ec:57:3c:59:
2b:ab:96:7a:ed:60:7c:3d:cd:72:4e:d0:7c:a5:90:
e5:31:b7:8f:07:39:e9:d1:c7:d9:84:1f:e0:20:0a:
d6:4a:26:b0:eb:6b:cb:00:a1:4e:03:8a:47:87:d8:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:25:D3:6B:51:E0:5A:52:58:61:34:6A:12:5D:BD:3C:75:62:7A
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/WVEl02tR4FpSWGE0ahJdvTx1Yno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.234.124.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:30:fa:3f:49:c1:f1:52:f3:5e:7e:ea:2b:19:59:9d:58:28:
38:31:76:f7:e5:8a:56:2d:a6:e1:a3:63:f6:d8:37:20:8b:52:
ac:1b:45:65:fe:be:98:58:96:9a:24:5e:de:92:98:d1:6f:5f:
11:ea:e4:d5:14:82:97:34:59:3a:3d:00:a0:86:95:05:24:9f:
b3:e0:42:9f:42:3c:0d:8c:2c:58:6b:59:cb:4f:95:28:f4:35:
1f:28:63:34:3d:11:a6:a6:f3:ad:fc:7e:be:82:a8:c8:c1:fa:
cd:6b:26:0d:45:a4:32:56:d7:72:c4:95:08:53:46:b2:47:d8:
fa:04:a9:de:3e:5d:7b:91:16:4d:2c:11:e7:10:55:aa:9b:d5:
32:d5:27:52:ad:ea:35:7a:b2:7c:3e:dd:3e:76:85:0d:32:b4:
c1:f6:cc:5d:2f:e9:72:dd:f7:b8:68:0e:04:21:ac:d5:f5:f6:
f9:ba:22:5d:fc:2c:f8:1c:7b:1e:d7:1e:99:e4:e6:f0:57:59:
18:5c:33:03:e2:bf:f6:15:1d:f1:e6:04:b8:77:e8:23:5b:0f:
90:8e:58:75:1c:33:3b:6a:87:b2:aa:c3:a2:9c:e1:ad:6d:bc:
6c:bd:87:f9:c2:ce:ab:32:54:35:22:ee:f1:0b:d4:8a:2f:32:
5e:24:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:20 2025 by rpki-client on console.sobornost.net