Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Wpgh-N6hvlTVa-8ps_AcoFBFsRQ.roa
File: Wpgh-N6hvlTVa-8ps_AcoFBFsRQ.roa (raw, json)
Hash identifier: 8QLQUBGj0trB8gSW30VhkIY4EGb2YLuAnrlhhAC1LRQ=
Subject key identifier: 5A:98:21:F8:DE:A1:BE:54:D5:6B:EF:29:B3:F0:1C:A0:50:45:B1:14
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0189E4C935687046E346368114D4DAA69876
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Wpgh-N6hvlTVa-8ps_AcoFBFsRQ.roa
Signing time: Fri 11 Aug 2023 13:28:58 +0000
ROA not before: Fri 11 Aug 2023 13:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197706
IP address blocks: 185.233.124.0/24 maxlen: 24
185.233.125.0/24 maxlen: 24
185.233.127.0/24 maxlen: 24
185.233.126.0/24 maxlen: 24
185.53.100.0/22 maxlen: 24
31.171.152.0/21 maxlen: 21
31.171.152.0/22 maxlen: 22
31.171.159.0/24 maxlen: 24
31.171.158.0/24 maxlen: 24
31.171.156.0/24 maxlen: 24
31.171.157.0/24 maxlen: 24
45.66.252.0/22 maxlen: 22
109.74.31.0/24 maxlen: 24
109.74.29.0/24 maxlen: 24
109.74.30.0/24 maxlen: 24
109.74.28.0/24 maxlen: 24
109.104.138.0/24 maxlen: 24
109.104.139.0/24 maxlen: 24
109.104.143.0/24 maxlen: 24
109.104.140.0/22 maxlen: 22
109.104.142.0/24 maxlen: 24
109.104.140.0/24 maxlen: 24
109.104.141.0/24 maxlen: 24
109.104.159.0/24 maxlen: 24
109.104.156.0/24 maxlen: 24
45.142.26.0/24 maxlen: 24
45.142.27.0/24 maxlen: 24
45.142.25.0/24 maxlen: 24
194.113.80.0/23 maxlen: 23
194.113.94.0/24 maxlen: 24
194.113.95.0/24 maxlen: 24
45.142.24.0/24 maxlen: 24
2a0d:4a40::/29 maxlen: 29
2a0e:d4c0::/29 maxlen: 29
2a09:6e47::/48 maxlen: 48
2a04:27c0::/29 maxlen: 29
2a0d:42c0::/29 maxlen: 29
2a09:6e40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e4:c9:35:68:70:46:e3:46:36:81:14:d4:da:a6:98:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Aug 11 13:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9821f8dea1be54d56bef29b3f01ca05045b114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:1d:62:39:13:e2:c8:fa:d4:56:92:7c:f3:
f0:d4:47:7b:85:b0:fc:dc:26:79:d2:0e:3e:6e:bb:
4c:bb:44:e4:b9:1f:71:09:55:11:82:ca:cb:4a:a4:
0f:b2:93:96:3e:a4:35:9f:37:c4:1a:91:d1:1a:9a:
79:78:4f:e5:eb:ad:d1:54:30:e8:a7:74:9e:9f:9b:
0e:04:3a:a3:20:59:f3:ae:ff:5c:23:4e:8b:49:76:
c8:1b:49:f1:2c:9b:21:59:9b:72:d2:38:9c:5d:a8:
61:51:b5:6a:be:e1:0a:21:95:6b:2f:0b:66:21:71:
62:3b:a5:8f:9c:04:f2:e2:91:d8:db:91:00:70:99:
e9:73:29:ac:52:5b:3f:f6:e4:26:54:03:70:52:7f:
e8:69:9e:b0:57:8c:47:0d:a2:5c:4e:83:d0:c3:9c:
c5:02:a9:bf:e3:6c:0a:09:45:0e:80:01:b9:5e:b7:
1a:28:42:92:73:69:98:bc:50:c7:9f:99:3e:41:55:
55:1f:df:e1:9d:5c:cc:2e:24:40:f1:d6:44:52:28:
d2:a1:8c:6d:ac:fa:e1:aa:ff:69:f0:83:a9:9c:b6:
59:12:0e:f1:bd:a6:72:a8:cd:6a:45:7f:9d:1b:5c:
09:32:3d:1e:cd:81:fd:ae:57:a0:26:03:0b:80:48:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:21:F8:DE:A1:BE:54:D5:6B:EF:29:B3:F0:1C:A0:50:45:B1:14
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/Wpgh-N6hvlTVa-8ps_AcoFBFsRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.152.0/21
45.66.252.0/22
45.142.24.0/22
109.74.28.0/22
109.104.138.0-109.104.143.255
109.104.156.0/24
109.104.159.0/24
185.53.100.0/22
185.233.124.0/22
194.113.80.0/23
194.113.94.0/23
IPv6:
2a04:27c0::/29
2a09:6e40::/29
2a0d:42c0::/29
2a0d:4a40::/29
2a0e:d4c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:35:88:7a:25:ab:69:11:2b:82:3c:71:d3:e2:77:fa:16:b8:
2c:13:11:b2:2a:05:23:17:ae:6b:f8:96:40:45:15:a8:e3:08:
1a:72:f0:b6:6b:13:ea:67:34:73:0f:90:7b:b5:2d:67:60:85:
05:37:38:64:01:5d:ae:33:05:2c:e4:6e:2e:13:79:6b:c2:6b:
a2:ef:e2:ea:53:4b:88:4b:21:30:da:5c:d6:bf:f3:64:05:0a:
f2:51:3f:b1:86:59:0b:90:c6:26:18:87:56:7c:42:76:ba:3f:
64:3e:bb:a1:c2:95:52:da:e6:61:6e:0e:9e:28:1e:2a:c0:dc:
32:20:2a:92:7b:a6:28:fe:4a:e6:e6:e9:6c:30:69:f1:19:50:
97:58:9d:be:3d:22:62:88:1c:6b:c3:5d:8a:b7:35:ec:4c:92:
d7:80:ba:80:e7:15:63:bf:9b:73:bf:b8:ad:38:94:ef:3a:52:
f6:9f:b1:c5:df:3f:a7:51:6b:8d:77:a6:57:59:94:75:93:96:
91:7b:7b:65:7c:a0:72:25:a2:58:37:d9:47:00:0a:3b:21:34:
03:d7:e2:84:1b:3b:f8:ab:51:07:d5:0f:65:f8:4e:8f:35:d4:
06:19:cb:5e:f6:d3:45:bc:ae:89:f3:d6:a3:67:76:1c:cd:46:
07:e3:5e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:39 2025 by rpki-client