Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wxcUF6b4lO3K8IThxPJ8VyUE5zQ.roa
File: wxcUF6b4lO3K8IThxPJ8VyUE5zQ.roa (raw, json)
Hash identifier: fsU8Z9YsH6nDTfEBF1Hk+PfT8guH1Rp218Yt7ojV5kk=
Subject key identifier: C3:17:14:17:A6:F8:94:ED:CA:F0:84:E1:C4:F2:7C:57:25:04:E7:34
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0194699EF938643D517C1487CE2A77DA9344
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wxcUF6b4lO3K8IThxPJ8VyUE5zQ.roa
Signing time: Wed 15 Jan 2025 11:00:13 +0000
ROA not before: Wed 15 Jan 2025 11:00:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147003
IP address blocks: 84.54.0.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:9e:f9:38:64:3d:51:7c:14:87:ce:2a:77:da:93:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 15 11:00:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3171417a6f894edcaf084e1c4f27c572504e734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:ea:a1:5d:5c:e2:3d:9c:63:66:37:b6:eb:
45:88:d0:8f:df:17:97:38:17:d9:54:e5:1e:84:e9:
00:09:12:5d:10:89:eb:a7:b1:7e:a0:71:cb:b4:e0:
6b:94:eb:7e:98:5a:43:06:09:31:18:8c:7d:40:48:
2a:5e:fe:56:04:40:85:91:b5:1f:c7:b5:1b:f8:33:
00:8c:40:b4:ca:1e:b6:c9:9f:63:aa:81:e3:b0:96:
e1:d0:79:1a:23:46:38:74:af:5f:35:8f:37:53:07:
3a:32:30:86:40:63:85:c2:41:32:a7:e1:9b:ff:a9:
36:33:bb:2b:4e:51:35:f1:1d:7c:cb:b2:09:3d:6a:
5e:9d:1f:d6:bc:f4:84:09:13:18:eb:25:85:17:b3:
56:fb:e8:5a:5d:fd:48:1b:ae:ee:dd:6c:57:09:8e:
7f:2f:1d:ec:0a:28:b2:e5:49:1f:47:ec:d2:f9:38:
f4:07:53:9f:aa:bb:61:33:85:6c:e4:c1:9d:85:74:
16:ea:a8:09:57:f1:ac:ad:02:04:8d:76:d7:80:6e:
21:4f:c4:50:37:eb:5f:8e:d0:75:b4:63:84:8a:63:
66:28:e5:2b:8f:b3:3e:e3:71:a9:60:92:f5:ae:e2:
5f:6a:3e:47:cb:7b:13:19:87:aa:75:d9:a1:b3:60:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:17:14:17:A6:F8:94:ED:CA:F0:84:E1:C4:F2:7C:57:25:04:E7:34
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/wxcUF6b4lO3K8IThxPJ8VyUE5zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/23
Signature Algorithm: sha256WithRSAEncryption
28:f4:2e:79:2b:a3:9f:45:e7:9c:4a:0d:94:29:c6:c7:db:72:
5e:36:b9:34:92:ba:39:23:4a:28:80:4a:01:0d:c4:89:ce:04:
6b:62:f2:85:ea:32:cc:43:e0:75:0a:d3:d3:e0:90:65:88:ff:
85:84:1b:ac:4b:ee:00:a5:d7:6d:6c:24:a7:c2:89:3f:d0:91:
2c:64:9a:c7:ba:f2:8e:5a:51:41:bb:5d:83:79:31:b7:93:6b:
cd:a0:56:38:52:78:c9:af:3f:06:c8:d6:35:34:cd:f6:83:04:
6c:a7:da:a7:ed:7c:61:4d:ff:53:3e:64:b8:ff:d9:06:82:a6:
be:20:a7:78:b6:ce:70:9e:60:83:09:d0:b9:20:8e:64:a1:b6:
da:3a:f2:4d:ee:2b:40:09:23:12:d9:9f:8f:79:09:76:e2:b5:
11:8e:87:43:db:e7:5b:b2:01:48:74:63:eb:70:96:de:ff:14:
f2:c8:ac:96:17:3c:f4:c7:89:91:02:37:07:1f:7e:60:33:e3:
d9:6a:21:f8:39:2c:8f:e1:3a:ad:dc:3b:b4:6d:b7:4b:e8:4d:
53:79:d9:74:5a:02:46:16:a6:bd:ad:b8:0f:8e:b3:62:fa:16:
89:a4:ae:7f:c9:4e:40:5e:98:6b:a2:91:2a:d3:c2:dd:6b:f3:
07:3e:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:53:41 2025 by rpki-client