Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/WqoENP8a21ujexkNVT4Eg1GQQMk.roa
File: WqoENP8a21ujexkNVT4Eg1GQQMk.roa (raw, json)
Hash identifier: iJauVepFoe5xAOjChoH0qBIMxtYc29tmFDeFfKkb65A=
Subject key identifier: 5A:AA:04:34:FF:1A:DB:5B:A3:7B:19:0D:55:3E:04:83:51:90:40:C9
Certificate issuer: /CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
Certificate serial: 018CC5DBEA3F8658B30A1E41B940BE1EAD80
Authority key identifier: 82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/WqoENP8a21ujexkNVT4Eg1GQQMk.roa
Signing time: Mon 01 Jan 2024 16:29:33 +0000
ROA not before: Mon 01 Jan 2024 16:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 178.212.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ea:3f:86:58:b3:0a:1e:41:b9:40:be:1e:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e1aba6e8947f9238abccbeea09ba38a59d6f5c
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aaa0434ff1adb5ba37b190d553e0483519040c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:b9:e3:f2:c7:44:45:08:75:2e:96:53:0d:
77:d7:5c:0c:80:78:af:c3:bd:2d:4e:5e:65:16:b8:
ec:c4:d6:16:2b:4e:0e:34:29:ed:78:ac:40:cc:aa:
72:00:74:5e:7b:80:5b:cf:6b:7b:7d:16:d4:4c:ed:
8d:2b:55:18:a0:03:ee:88:0f:1c:f8:58:de:6c:70:
de:77:6d:cd:1b:fa:c1:a6:64:7b:93:09:ac:4c:46:
98:18:83:58:ce:d0:8e:b4:57:da:21:03:4f:b9:c8:
4b:f4:7e:eb:61:58:3f:01:84:54:20:08:68:97:4b:
74:b4:44:9b:5d:e5:ae:f8:1e:37:15:a7:69:a9:dc:
1d:7b:46:b8:15:44:ba:ae:8c:74:ce:cc:aa:fb:62:
16:8a:44:a9:38:b6:46:0d:16:19:71:4d:0d:b2:0e:
dd:af:7d:61:14:c2:d7:9c:33:35:ef:0a:25:8c:3d:
d9:c8:cc:1e:43:39:1f:9a:e6:67:1c:c6:34:73:ca:
30:76:10:43:40:3f:76:b0:b2:3d:16:6f:6e:8a:16:
aa:2c:7e:ae:77:11:30:01:ac:e1:a1:09:4f:6a:e9:
0c:03:ba:be:95:ac:27:e7:44:c6:71:df:c7:d6:8f:
74:bb:06:70:d5:80:1d:08:75:ba:a3:82:8b:18:f5:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AA:04:34:FF:1A:DB:5B:A3:7B:19:0D:55:3E:04:83:51:90:40:C9
X509v3 Authority Key Identifier:
keyid:82:E1:AB:A6:E8:94:7F:92:38:AB:CC:BE:EA:09:BA:38:A5:9D:6F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guGrpuiUf5I4q8y-6gm6OKWdb1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/WqoENP8a21ujexkNVT4Eg1GQQMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea1380-bd6a-46d3-981e-9f7043759acc/1/guGrpuiUf5I4q8y-6gm6OKWdb1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.141.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:15:6c:c3:ab:f0:5c:91:41:4a:6c:3f:3a:89:b6:c1:b7:75:
f3:e3:e5:cc:c2:94:04:8b:ca:0d:b5:2c:20:d0:43:7e:c0:97:
4c:df:23:a2:da:6b:6b:bf:dd:d0:77:ce:55:ea:6d:11:85:30:
2f:ac:de:c6:89:57:89:2d:b3:f2:67:ce:e0:d4:7c:21:fd:37:
84:1e:9f:8c:73:73:25:b9:f0:89:70:5e:c4:a3:f5:55:61:18:
f5:a2:bf:f5:b0:04:1a:ef:03:2e:3b:39:63:f6:73:17:21:ae:
a5:c6:0e:4d:dd:d9:35:3d:88:39:d0:e7:dd:28:5f:42:94:15:
5e:28:d5:59:a3:60:42:92:e9:2f:dc:d0:c1:a2:b4:f1:82:cb:
1d:af:51:87:bf:fe:9c:24:6d:b7:c9:70:32:b7:f7:82:11:be:
6f:7b:dd:05:33:98:22:07:65:a0:09:08:ca:11:ea:eb:1f:3a:
b4:1c:a6:b8:06:d7:66:04:16:f4:e1:d5:3b:50:44:dd:01:d9:
d5:43:48:c7:d2:bc:e7:f8:a5:79:77:91:86:55:a3:02:ef:82:
3e:9a:d3:61:8b:df:69:a4:67:e8:f4:cb:ab:ee:58:2b:d3:e7:
2a:c7:b3:bc:c5:9a:6e:80:d3:1d:89:2f:d0:af:5e:78:bb:51:
f2:b7:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:52:46 2025 by rpki-client