Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/WDpImeyPjqMFTq9ZY_GbORAHjbU.roa
File: WDpImeyPjqMFTq9ZY_GbORAHjbU.roa (raw, json)
Hash identifier: +COM9Uy0Q0g3FQyHEs/443IxurqzxbKmmDF68eZyVRI=
Subject key identifier: 58:3A:48:99:EC:8F:8E:A3:05:4E:AF:59:63:F1:9B:39:10:07:8D:B5
Certificate issuer: /CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Certificate serial: 0187937B4C8BF3449441534388E249C72963
Authority key identifier: 9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/WDpImeyPjqMFTq9ZY_GbORAHjbU.roa
Signing time: Tue 18 Apr 2023 08:29:03 +0000
ROA not before: Tue 18 Apr 2023 08:29:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15517
IP address blocks: 62.65.128.0/19 maxlen: 19
62.65.137.0/24 maxlen: 24
62.65.144.0/21 maxlen: 21
62.65.143.0/24 maxlen: 24
62.65.142.0/24 maxlen: 24
62.65.141.0/24 maxlen: 24
62.65.158.0/24 maxlen: 24
62.65.153.0/24 maxlen: 24
62.65.154.0/23 maxlen: 23
62.65.156.0/23 maxlen: 23
94.78.3.0/24 maxlen: 24
94.78.0.0/18 maxlen: 18
94.78.2.0/24 maxlen: 24
2a01:330::/32 maxlen: 32
2a01:330::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:7b:4c:8b:f3:44:94:41:53:43:88:e2:49:c7:29:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f662b3cfa8b9059068c29d46b99263ba2de50c1
Validity
Not Before: Apr 18 08:29:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=583a4899ec8f8ea3054eaf5963f19b3910078db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:6a:17:69:39:2a:98:c7:ed:1b:14:e4:ca:
17:af:4d:ff:e7:c3:ce:cd:0c:bc:a9:55:71:15:6f:
6b:b8:ce:15:c7:c3:0f:ec:a0:9e:3c:a4:f7:f3:3a:
66:70:4c:2e:72:cb:0c:e9:bd:84:56:c2:d6:9b:e9:
de:1b:72:75:e9:bc:d0:08:42:bd:be:61:96:c1:47:
94:ee:f0:ee:3d:0f:9c:5f:63:6e:30:30:89:4d:a7:
e7:48:cd:88:f1:08:db:6e:91:5b:58:b2:6f:38:ab:
f8:f0:7a:71:4d:f4:0a:f0:c7:a7:5f:81:23:08:21:
78:51:86:dc:b8:79:58:e9:37:38:97:be:98:56:fc:
05:a7:73:9b:ca:de:06:c4:61:7e:d7:c1:c5:90:b8:
04:b4:be:30:e5:ad:30:11:bc:b8:c8:1f:e6:bd:9c:
f5:ae:2a:87:15:ac:5b:bc:63:f2:29:5c:4d:12:92:
32:b2:f0:ba:a8:60:63:fc:bd:23:ad:b7:38:b1:4c:
2c:ed:cb:bb:76:1f:2b:4d:0e:45:67:f3:81:cd:f9:
5e:c0:cb:eb:03:57:d3:40:89:d9:50:17:c6:ca:a1:
50:0a:9f:f6:93:d9:4e:d4:e5:fc:08:c4:25:ae:4c:
6b:f1:8f:da:9b:dd:8a:0a:c2:9e:76:33:b6:cb:8d:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3A:48:99:EC:8F:8E:A3:05:4E:AF:59:63:F1:9B:39:10:07:8D:B5
X509v3 Authority Key Identifier:
keyid:9F:66:2B:3C:FA:8B:90:59:06:8C:29:D4:6B:99:26:3B:A2:DE:50:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2YrPPqLkFkGjCnUa5kmO6LeUME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/WDpImeyPjqMFTq9ZY_GbORAHjbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2512c5-252b-4967-89a7-6a1f97ff8d34/1/n2YrPPqLkFkGjCnUa5kmO6LeUME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.128.0/19
94.78.0.0/18
IPv6:
2a01:330::/29
Signature Algorithm: sha256WithRSAEncryption
34:da:74:2a:8b:3b:6b:44:bf:5b:ce:79:88:7b:15:67:cc:b8:
97:a6:64:e3:c5:4b:fc:3c:cc:89:4c:dc:81:49:84:60:db:9d:
26:b8:2d:23:0a:0d:21:6e:67:03:31:e4:0a:84:cd:f7:79:52:
44:0a:81:66:b3:89:a8:0c:fa:0a:5f:39:87:88:9c:3a:8a:af:
13:cc:b9:8b:a9:bf:b8:89:41:12:6d:a4:43:7d:75:0d:71:22:
8e:dd:7b:47:37:4d:43:3e:4c:74:81:47:c3:85:5c:75:78:f4:
71:ae:c8:92:ee:fd:38:9b:3b:78:8a:00:d1:c0:3e:a5:2b:a2:
93:57:6d:59:2a:08:0e:a1:9a:42:a8:c0:da:19:c5:13:1d:41:
b5:33:29:bb:86:d4:a6:43:85:23:3f:f3:3d:27:2a:15:c6:41:
6a:92:17:cd:61:d8:61:5b:79:b4:2b:58:6c:d6:7b:73:79:75:
c7:23:6a:25:83:b8:d9:c7:52:75:2a:7e:a1:56:6c:84:47:b3:
df:5d:a7:90:91:34:52:4d:5b:85:28:09:43:52:af:b4:8c:39:
75:6c:a3:26:b7:76:ab:7c:41:3e:49:32:65:e9:47:20:72:0a:
86:9e:6c:1f:3d:f1:00:4d:57:dd:a5:e9:ff:1b:92:d0:fd:58:
e4:6c:d5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:16 2025 by rpki-client