Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/WiwlEjCaJLiMqxhtYC1N0Na8jrg.roa
File: WiwlEjCaJLiMqxhtYC1N0Na8jrg.roa (raw, json)
Hash identifier: yqdLZSCzlf6e026r9zcyKHs9efo1b8EYrTj/25kgYk4=
Subject key identifier: 5A:2C:25:12:30:9A:24:B8:8C:AB:18:6D:60:2D:4D:D0:D6:BC:8E:B8
Certificate issuer: /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial: 01875689C31FE3F71CAC518730D679BB405A
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/WiwlEjCaJLiMqxhtYC1N0Na8jrg.roa
Signing time: Thu 06 Apr 2023 12:28:01 +0000
ROA not before: Thu 06 Apr 2023 12:28:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34136
IP address blocks: 212.110.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:89:c3:1f:e3:f7:1c:ac:51:87:30:d6:79:bb:40:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Validity
Not Before: Apr 6 12:28:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a2c2512309a24b88cab186d602d4dd0d6bc8eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e8:ba:7d:4e:67:22:08:d7:db:5e:e1:a1:46:
a6:c5:18:40:ad:37:e2:57:50:47:66:2a:30:55:3c:
59:b1:cf:8b:29:0f:31:25:98:ee:77:7b:b7:90:3d:
5b:85:a0:a6:56:fd:19:b6:de:03:b7:66:c5:cf:16:
62:5c:10:3a:d1:58:b5:22:94:c0:ae:97:75:20:90:
0e:01:3c:29:1c:c6:21:a7:fd:91:9b:e7:6d:88:b0:
44:fb:cb:8a:65:26:e4:91:c3:c3:e4:3f:7f:71:da:
7f:16:1d:f3:06:54:b6:16:be:52:d9:48:16:6d:41:
63:b4:14:0c:25:2d:46:09:4b:9a:10:c7:4a:27:fa:
7a:25:4a:3c:dc:60:41:a5:08:36:6c:92:91:b1:2e:
08:6a:7d:3d:88:61:16:0d:d3:b6:95:dd:50:65:55:
a0:2f:3c:ef:bb:c0:1d:07:53:7e:29:ba:71:89:a2:
ca:4f:3c:d1:76:2c:cc:3d:53:f8:53:b9:a8:df:04:
4c:ea:4f:ff:9a:bc:f0:4f:93:14:bd:68:13:2d:b8:
df:20:f9:ab:1c:2d:e0:88:72:08:54:19:42:93:1b:
ba:b7:3b:82:cd:86:f7:ad:68:9f:f9:61:60:67:53:
ed:82:2e:5f:20:a3:ae:3b:84:da:81:5c:03:e4:d8:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:25:12:30:9A:24:B8:8C:AB:18:6D:60:2D:4D:D0:D6:BC:8E:B8
X509v3 Authority Key Identifier:
keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/WiwlEjCaJLiMqxhtYC1N0Na8jrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.110.138.0/23
Signature Algorithm: sha256WithRSAEncryption
10:7c:c7:03:5a:4d:1a:cb:9e:cd:58:88:e4:b5:4f:7d:b1:b0:
c3:15:64:75:70:b8:b6:7d:d9:e1:b0:5a:1a:27:67:a3:5b:f7:
35:46:c1:ad:57:26:e9:3e:b1:0f:a6:c4:e8:2c:f8:fc:cb:ae:
15:a5:07:63:0f:41:4b:ea:ba:1b:2e:ce:67:85:10:de:8d:d9:
61:08:8c:a9:c5:d2:54:4e:fd:82:ec:4d:56:87:55:d4:66:cd:
f7:9c:d1:11:51:45:56:93:ef:2a:ad:4b:0f:2c:17:bf:37:63:
91:c1:30:7d:d4:65:a5:26:e2:62:be:74:45:e4:36:8c:80:b2:
61:0f:93:56:4b:d4:0c:90:90:5c:09:2a:7f:08:05:05:a2:8a:
d5:70:61:db:9c:b9:dd:c2:01:d1:6d:66:88:95:63:44:08:14:
3a:90:b8:95:4c:5f:0a:99:d9:a9:3b:e3:49:18:a6:a1:17:e3:
36:ce:5a:40:25:e5:a6:7b:da:6c:b1:00:33:78:dc:d3:97:60:
c1:66:bc:6d:c7:e0:f1:dd:15:c2:5e:c5:e4:07:21:47:59:f4:
bf:01:14:f7:33:61:55:f3:0e:52:e4:fb:05:49:c9:bb:3e:2d:
ff:37:60:3b:75:0b:91:7c:0e:0d:f2:11:2d:af:c1:b7:47:0d:
7f:55:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:38:52 2025 by rpki-client