Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/Wjq4m1AgD419YGEnPSoW8EEFOeQ.roa
File: Wjq4m1AgD419YGEnPSoW8EEFOeQ.roa (raw, json)
Hash identifier: OkXo+ESOwC6pilLN/+WCxRZ+OXBKXR2D9nrkDw8UhG4=
Subject key identifier: 5A:3A:B8:9B:50:20:0F:8D:7D:60:61:27:3D:2A:16:F0:41:05:39:E4
Certificate issuer: /CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Certificate serial: 018AD6FEA53476CABF9EE6C13BC77F6BBB82
Authority key identifier: 5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/Wjq4m1AgD419YGEnPSoW8EEFOeQ.roa
Signing time: Wed 27 Sep 2023 14:15:27 +0000
ROA not before: Wed 27 Sep 2023 14:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25310
IP address blocks: 83.146.0.0/18 maxlen: 18
87.74.0.0/15 maxlen: 15
212.158.192.0/18 maxlen: 18
84.9.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:fe:a5:34:76:ca:bf:9e:e6:c1:3b:c7:7f:6b:bb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Validity
Not Before: Sep 27 14:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a3ab89b50200f8d7d6061273d2a16f0410539e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:f2:f3:25:20:03:f3:e9:10:c8:67:32:5e:
ef:67:88:ca:fc:b7:2e:c7:55:a1:f9:c3:90:ee:b0:
ec:f6:32:72:fd:35:22:fd:5f:8a:35:f0:22:ff:2d:
f4:d2:fd:48:b4:df:31:c4:0f:8b:21:b0:0a:81:a1:
7c:53:a1:05:4f:57:ef:44:d8:ce:a8:73:68:0c:ad:
ae:d5:bf:30:1b:a2:fb:c4:c4:1f:fd:1c:6f:69:48:
07:fb:17:0a:c8:60:f3:14:f9:95:9f:68:5c:ec:b2:
be:30:d0:dd:48:8d:e2:a0:cf:7d:41:f8:2b:27:be:
7d:f3:62:68:64:54:82:a1:5a:61:d0:8d:7b:da:45:
55:3e:b1:f1:f1:6a:cd:bd:66:39:cb:f7:58:aa:9a:
6b:a0:cc:cd:12:c5:25:2c:50:37:66:c4:71:a2:f1:
a3:93:de:d5:90:0a:e2:9e:1c:e0:81:6d:cc:14:d3:
89:76:85:09:ad:1b:55:b9:17:87:b9:e6:c6:cc:9e:
44:2a:a4:bf:a9:aa:f7:4f:c5:32:fb:11:fd:0f:85:
e5:23:e0:d6:b4:b5:61:fc:b4:a2:5d:cb:c6:2a:8f:
4f:5b:ba:72:d3:1c:1a:ea:81:82:8b:e1:8b:db:ad:
87:85:00:15:bf:4c:1a:6e:44:38:0f:bd:2e:f0:c8:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:B8:9B:50:20:0F:8D:7D:60:61:27:3D:2A:16:F0:41:05:39:E4
X509v3 Authority Key Identifier:
keyid:5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/Wjq4m1AgD419YGEnPSoW8EEFOeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.146.0.0/18
84.9.0.0/16
87.74.0.0/15
212.158.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a9:fb:b2:a7:50:df:e2:c7:da:7f:8e:db:06:dc:6b:4d:7d:ba:
81:d0:dc:98:84:5e:14:7c:ce:e2:7b:a3:63:1c:26:9c:e6:31:
ef:63:14:96:7b:f1:17:01:39:af:ac:f8:97:e6:89:2a:7d:04:
6f:00:15:be:ac:b2:00:d1:d5:24:18:0e:41:23:bf:7d:46:61:
5e:3b:a3:db:28:f6:31:3f:28:29:23:88:5d:ce:51:f7:2e:82:
30:95:57:2b:1d:fe:bc:5d:de:5e:10:12:b8:fd:7f:f6:07:89:
c4:36:f8:05:37:aa:70:7f:71:29:93:18:49:d7:d2:94:80:bc:
90:e1:10:8b:28:f8:5e:8a:30:44:57:be:2b:96:73:41:b8:ef:
88:2e:29:3a:7a:e4:1d:8e:58:89:86:34:45:d5:d3:17:52:76:
8a:9d:66:d5:f3:4c:97:e6:0e:10:36:66:b2:b9:86:4f:6d:da:
84:b6:36:0e:e9:a2:5f:48:31:8e:22:2d:10:6f:4d:a4:4c:42:
f3:9d:02:10:7c:66:bd:e8:00:8b:a4:b5:03:cc:8c:b5:9d:d6:
99:3e:f0:30:a7:78:12:46:73:a1:55:1e:06:8d:9c:c7:c3:ec:
db:b7:a6:65:4a:62:56:8a:81:4c:06:78:cf:0e:c4:1c:2a:18:
aa:05:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:29:49 2025 by rpki-client