Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/9eaa79-cbf3-4689-be3f-fe9994c7b95f/1/WA38c98gZDwuZ-jmgFIKkEQ3ge0.roa
File: WA38c98gZDwuZ-jmgFIKkEQ3ge0.roa (raw, json)
Hash identifier: 7Nz0yAWLF1oVLnG6ctzmqMbA6ZMvFtBKh5Q0zC+0R3E=
Subject key identifier: 58:0D:FC:73:DF:20:64:3C:2E:67:E8:E6:80:52:0A:90:44:37:81:ED
Certificate issuer: /CN=47d661e683a28910b93704dea3493dc9f8ef3f17
Certificate serial: 0183179B17255EB1E98942F6071DB4DC70FA
Authority key identifier: 47:D6:61:E6:83:A2:89:10:B9:37:04:DE:A3:49:3D:C9:F8:EF:3F:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Zh5oOiiRC5NwTeo0k9yfjvPxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/9eaa79-cbf3-4689-be3f-fe9994c7b95f/1/WA38c98gZDwuZ-jmgFIKkEQ3ge0.roa
Signing time: Wed 07 Sep 2022 10:59:43 +0000
ROA not before: Wed 07 Sep 2022 10:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62313
IP address blocks: 91.233.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:17:9b:17:25:5e:b1:e9:89:42:f6:07:1d:b4:dc:70:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d661e683a28910b93704dea3493dc9f8ef3f17
Validity
Not Before: Sep 7 10:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=580dfc73df20643c2e67e8e680520a90443781ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:fb:fc:8e:8c:23:a6:f2:27:88:51:e5:c6:
ae:61:92:f2:01:b6:d7:d0:4b:87:53:bf:da:c4:47:
77:25:3c:e3:2a:6f:30:74:0a:a3:83:47:dd:e6:f0:
ee:0d:95:7a:5c:a4:b5:dd:d5:bf:38:82:a3:d1:27:
e0:38:f2:ef:bd:1b:80:4d:87:a7:b3:20:46:46:93:
2f:e4:b3:24:83:86:1b:2a:19:21:64:a4:c0:5f:c6:
41:40:9d:52:9b:c6:8a:7e:3b:92:4d:a7:c7:1b:34:
97:36:01:df:a1:4e:12:60:74:7c:6a:cb:bf:09:e8:
a0:49:73:d5:c9:3f:74:5d:c1:72:62:81:87:8e:f6:
bf:36:e0:33:1d:90:65:c8:9d:3d:c0:0c:4b:df:2b:
dd:f0:e2:1b:ca:13:2e:f2:c7:9e:eb:f8:a1:10:8e:
08:d6:0b:a0:8b:80:46:0f:a4:a1:83:64:2e:53:8e:
18:22:c4:ac:91:e0:18:27:b2:b7:1e:db:a5:9b:7f:
7f:de:a5:01:8b:07:08:6e:d7:74:86:bd:dd:e5:ec:
bc:61:b3:9e:5c:d4:45:11:4d:76:1b:37:d9:36:e3:
8b:67:e9:35:9c:d7:69:b0:c0:d5:07:15:06:f7:cc:
cb:1e:0f:e9:43:87:15:81:f1:a6:3c:f7:37:95:6d:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0D:FC:73:DF:20:64:3C:2E:67:E8:E6:80:52:0A:90:44:37:81:ED
X509v3 Authority Key Identifier:
keyid:47:D6:61:E6:83:A2:89:10:B9:37:04:DE:A3:49:3D:C9:F8:EF:3F:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Zh5oOiiRC5NwTeo0k9yfjvPxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/9eaa79-cbf3-4689-be3f-fe9994c7b95f/1/WA38c98gZDwuZ-jmgFIKkEQ3ge0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/9eaa79-cbf3-4689-be3f-fe9994c7b95f/1/R9Zh5oOiiRC5NwTeo0k9yfjvPxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.35.0/24
Signature Algorithm: sha256WithRSAEncryption
94:82:2a:8b:c9:4e:fe:f6:5a:b5:08:45:13:ef:26:8e:2e:bf:
7b:73:0f:fe:67:f2:cf:d1:e9:d6:06:90:33:18:a3:73:f2:c6:
8d:4c:1e:b2:31:bb:68:14:de:82:b3:18:f8:4d:cb:43:80:f2:
d9:df:2f:8b:66:46:42:38:ec:ff:0a:37:70:ca:f2:ab:01:0a:
59:8a:b1:ba:7c:7e:75:2d:ab:e9:e0:88:6b:ae:c5:6e:11:2b:
43:dc:15:11:79:33:e9:f1:68:1f:ee:d8:55:73:2b:59:81:9d:
35:29:92:f8:cc:89:42:34:55:3c:7c:3b:41:3c:ee:42:0a:0a:
6e:28:9f:96:f5:ae:b4:c9:47:ee:8d:9e:be:c4:19:29:63:88:
05:c1:6f:9e:d3:3c:33:2c:bf:47:6e:83:1e:0a:ff:13:80:ac:
50:18:3c:2f:c4:f1:8a:0b:a5:7d:3a:22:67:5b:68:4a:19:44:
92:66:dc:2e:cb:22:d1:c6:24:7a:55:7a:93:0c:9c:34:6a:a2:
01:6d:38:43:de:4c:69:70:2c:3d:b1:f7:64:4b:7d:0e:a9:4a:
dc:c3:f8:2a:96:22:e4:b5:6b:0c:ae:ef:d8:ea:76:c6:05:0a:
e5:57:0a:1d:47:ca:20:b4:01:74:96:db:5a:5f:ab:ed:2a:72:
86:6a:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:04:20 2025 by rpki-client