Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/WtAp0tL-l96y_gbMlR5puzdruQc.roa
File: WtAp0tL-l96y_gbMlR5puzdruQc.roa (raw, json)
Hash identifier: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=
Subject key identifier: 5A:D0:29:D2:D2:FE:97:DE:B2:FE:06:CC:95:1E:69:BB:37:6B:B9:07
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 019421B23ED68BE828A145669DF767623968
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/WtAp0tL-l96y_gbMlR5puzdruQc.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201754
IP address blocks: 91.198.56.0/24 maxlen: 24
193.42.218.0/24 maxlen: 24
2001:678:fec::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3e:d6:8b:e8:28:a1:45:66:9d:f7:67:62:39:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ad029d2d2fe97deb2fe06cc951e69bb376bb907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:91:1f:b2:d1:b1:8e:1f:5e:ce:61:0d:6f:
77:f6:b6:27:69:f1:6a:ad:36:1f:0f:ac:c1:4a:a8:
fa:1d:54:78:4f:79:09:0e:1d:8e:eb:8a:53:ce:96:
d3:71:c2:8f:e7:a0:05:d3:a0:da:cc:aa:52:b8:ad:
cd:7e:33:ce:ab:85:77:89:bb:5a:7c:3b:71:6c:16:
65:7d:f9:46:80:0e:82:9a:9c:d9:6d:aa:1e:9e:d4:
33:31:3a:17:11:c2:fa:08:55:65:90:c4:c6:3b:c7:
16:3e:ba:ab:90:42:ce:1f:bf:ab:33:dc:98:44:70:
f7:12:ba:87:f2:7c:e1:a3:c5:62:30:1f:ed:de:77:
94:24:0f:ad:67:bb:41:49:17:fd:f5:5a:da:fb:ff:
c8:ca:6c:1a:ca:bf:0a:aa:12:88:65:55:25:c9:14:
d2:8b:f8:33:d2:03:dd:74:99:ff:4f:63:47:58:99:
e8:66:53:36:19:5c:8b:8a:6e:27:eb:3d:68:e9:8a:
69:3e:c7:d9:7d:75:73:26:fc:7e:59:ac:90:73:35:
4a:ba:4a:18:aa:1e:d1:70:41:c8:c2:62:38:72:6d:
f7:1e:39:81:d3:cd:32:c9:e5:83:07:5e:52:2a:c6:
6b:50:b7:7e:eb:2a:08:a8:f7:7e:8f:37:30:66:9b:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D0:29:D2:D2:FE:97:DE:B2:FE:06:CC:95:1E:69:BB:37:6B:B9:07
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/WtAp0tL-l96y_gbMlR5puzdruQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.56.0/24
193.42.218.0/24
IPv6:
2001:678:fec::/48
Signature Algorithm: sha256WithRSAEncryption
4c:46:8b:55:1d:22:56:bf:25:a1:83:25:05:18:9a:21:cd:83:
70:08:9d:c4:a7:46:5d:89:3e:49:61:25:df:6a:72:b5:9c:18:
f5:96:e0:47:4c:25:22:90:04:5f:ae:eb:0d:46:c5:f5:3d:dd:
cf:43:e8:55:ea:50:90:09:27:27:2c:cc:e2:66:35:d4:0a:9c:
2a:76:39:87:a1:ab:a3:50:8c:f9:5b:a7:2d:7f:f6:0f:1d:2f:
5e:52:fb:99:45:67:e2:40:50:c6:6f:31:a8:b3:74:38:b6:87:
0d:52:eb:fa:c6:a4:0c:cd:db:ad:b1:7a:4b:d1:90:7b:2e:26:
7e:2a:83:14:0d:1a:a4:81:7e:d4:a3:2b:32:2b:eb:be:9e:78:
3c:42:37:20:2f:6b:dd:9c:1d:a9:a5:d6:56:8e:8c:e3:cc:67:
7d:16:f6:81:f4:73:ef:64:d3:6c:12:2f:a4:ab:51:87:9d:72:
12:2d:ca:0d:d1:8a:18:bd:2a:55:b5:52:fb:3a:d9:21:20:6c:
40:ac:89:19:be:3f:17:e2:1a:61:2e:b4:2e:55:e7:29:e2:0f:
a7:59:4d:0c:49:14:36:e0:c7:90:48:c7:df:2b:6a:db:f7:2f:
6f:f6:84:fe:11:56:21:79:c8:49:f7:5b:71:7a:36:51:b4:52:
ab:e2:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net