Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/weaxMACIysGRPOx39bRJCpdcHEI.roa
File: weaxMACIysGRPOx39bRJCpdcHEI.roa (raw, json)
Hash identifier: coOLOg3eMCLKMHx7Lq6/lTx44QSsHYUGPWnve3Ptlmg=
Subject key identifier: C1:E6:B1:30:00:88:CA:C1:91:3C:EC:77:F5:B4:49:0A:97:5C:1C:42
Certificate issuer: /CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Certificate serial: 019420D61F454B9BA5A574BF91B214BFE9E3
Authority key identifier: EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/weaxMACIysGRPOx39bRJCpdcHEI.roa
Signing time: Wed 01 Jan 2025 07:48:11 +0000
ROA not before: Wed 01 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48526
IP address blocks: 31.204.88.0/21 maxlen: 24
94.252.0.0/17 maxlen: 24
185.3.44.0/22 maxlen: 24
185.40.60.0/22 maxlen: 24
212.66.64.0/19 maxlen: 24
2a00:4180::/32 maxlen: 48
2a04:81c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1f:45:4b:9b:a5:a5:74:bf:91:b2:14:bf:e9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea22f4fb955d79f093d7e87b182c3440ac4be06c
Validity
Not Before: Jan 1 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1e6b1300088cac1913cec77f5b4490a975c1c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:d4:c6:7b:21:f1:92:ab:29:1c:84:6d:c5:
2b:f3:40:e2:ee:ae:ce:17:fc:6b:90:40:98:0c:4a:
c5:10:06:7b:99:24:64:ef:87:36:2c:c7:0e:49:0a:
6b:c8:b1:5b:91:f7:be:c8:97:89:f5:87:fa:f0:38:
3d:e7:c6:2f:e2:14:44:ea:97:f6:32:96:80:d0:26:
07:1b:0b:7c:25:49:ef:0c:83:48:d2:c6:4b:e4:34:
6e:45:d5:66:c7:20:83:81:37:9d:68:b1:5b:c8:4d:
00:1d:1b:bd:07:ff:07:75:cd:d9:4d:db:69:7d:f2:
a8:3d:3b:98:14:3f:07:a1:23:f4:d8:23:a1:e0:49:
e4:a1:9d:aa:30:72:9e:23:a5:c7:f2:ca:a2:e0:fd:
e6:9d:56:6f:5a:de:1a:09:8e:e3:80:3e:99:48:06:
07:34:35:60:f0:d2:7b:80:da:1f:77:cd:2e:9a:0e:
82:e5:87:e2:bd:78:19:37:70:ae:fd:c9:47:d4:ad:
0d:30:a0:02:73:51:51:e1:7d:7d:8b:26:db:6f:85:
6c:ab:8b:92:ca:c9:0d:ce:54:39:28:58:62:0e:63:
b9:40:b0:9f:b0:a2:e4:1e:b5:d1:dc:c0:73:db:49:
de:0a:a8:68:e1:a6:34:e3:83:f5:6c:6f:bf:62:b2:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E6:B1:30:00:88:CA:C1:91:3C:EC:77:F5:B4:49:0A:97:5C:1C:42
X509v3 Authority Key Identifier:
keyid:EA:22:F4:FB:95:5D:79:F0:93:D7:E8:7B:18:2C:34:40:AC:4B:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iL0-5VdefCT1-h7GCw0QKxL4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/weaxMACIysGRPOx39bRJCpdcHEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/fc8037-2b7c-41fc-9dbf-93d1fb72d383/1/6iL0-5VdefCT1-h7GCw0QKxL4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.204.88.0/21
94.252.0.0/17
185.3.44.0/22
185.40.60.0/22
212.66.64.0/19
IPv6:
2a00:4180::/32
2a04:81c0::/29
Signature Algorithm: sha256WithRSAEncryption
10:51:03:cf:93:45:2d:7b:26:31:e5:66:43:cf:d6:b6:3f:7e:
59:de:bd:1a:d6:26:3a:33:f2:75:ed:e1:9a:af:8a:56:15:eb:
b2:a6:62:70:d8:44:0f:da:c9:de:90:13:93:7e:a7:01:0a:1e:
c3:fa:9e:2d:58:cd:6f:bb:62:1f:12:de:90:99:f8:da:7a:f8:
86:ec:60:d9:19:60:32:8b:03:a3:8f:ef:fe:cf:d7:cf:a8:39:
b8:f0:2b:3f:b3:0c:11:61:02:c6:3a:7d:da:a2:5d:fe:53:93:
b8:e4:f4:20:84:1e:93:f4:d8:d7:38:9f:89:e9:dd:19:cf:c0:
2f:d1:a3:f7:2a:37:2e:55:bd:07:a6:bc:76:40:7b:6d:74:17:
21:ad:1d:3a:75:0d:c6:ca:93:1f:6e:34:43:14:18:5c:cc:fd:
22:2d:95:4d:44:b5:5f:bf:bd:ba:0b:e6:b3:cf:81:81:94:a9:
fd:df:7e:4f:9b:21:87:91:d7:d0:ff:41:dd:cb:7a:1d:c9:fe:
ed:da:94:3d:2a:5b:7f:f0:bd:24:21:e9:31:11:c1:f4:f6:4d:
44:d0:5a:f9:2c:71:d1:0a:3c:4b:b8:57:8d:13:ae:dd:1c:ac:
32:fc:f0:9e:6e:bd:7c:ab:1a:12:3e:9b:02:93:ad:d7:5e:e6:
a4:23:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:42 2025 by rpki-client