Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/W6ghqpNXbOriVf_Rv-XtTdFNIDM.roa
File: W6ghqpNXbOriVf_Rv-XtTdFNIDM.roa (raw, json)
Hash identifier: Bk/xYoubI9/o7OFN/+2tYUvigC8/aknaabZaegzCBMY=
Subject key identifier: 5B:A8:21:AA:93:57:6C:EA:E2:55:FF:D1:BF:E5:ED:4D:D1:4D:20:33
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0194940CAF0A97F1E5F2F94C45EE05471866
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/W6ghqpNXbOriVf_Rv-XtTdFNIDM.roa
Signing time: Thu 23 Jan 2025 16:44:06 +0000
ROA not before: Thu 23 Jan 2025 16:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 147.45.49.0/24 maxlen: 24
147.45.50.0/24 maxlen: 24
147.45.51.0/24 maxlen: 24
147.45.60.0/24 maxlen: 24
147.45.84.0/24 maxlen: 24
147.45.85.0/24 maxlen: 24
147.45.86.0/24 maxlen: 24
147.45.87.0/24 maxlen: 24
147.45.116.0/24 maxlen: 24
147.45.126.0/24 maxlen: 24
147.45.177.0/24 maxlen: 24
147.45.178.0/24 maxlen: 24
147.45.179.0/24 maxlen: 24
147.45.200.0/23 maxlen: 23
147.45.202.0/23 maxlen: 23
147.45.204.0/24 maxlen: 24
147.45.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:0c:af:0a:97:f1:e5:f2:f9:4c:45:ee:05:47:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 23 16:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ba821aa93576ceae255ffd1bfe5ed4dd14d2033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:e5:fd:fd:5a:a8:59:89:60:6e:a4:46:df:
ce:93:50:e6:92:51:89:7a:44:d1:af:a9:6f:52:2e:
48:26:87:84:86:73:bb:4d:6e:78:32:b9:49:aa:91:
f8:fd:ca:94:63:7e:78:16:c9:f0:a8:70:34:e7:ce:
ad:ec:2e:53:d8:77:1e:01:16:21:72:fe:4b:46:dd:
55:61:c5:7b:d9:ca:49:ff:fd:ca:ac:30:49:60:1e:
6a:cf:06:82:81:1d:40:96:d1:2d:fb:55:47:ff:79:
e2:2e:1c:1b:d4:53:64:3d:85:c1:88:94:4c:fa:99:
63:fc:6c:82:40:ba:37:15:1b:66:f1:b3:2f:d7:94:
b8:48:8a:81:a2:c5:d8:4e:f2:6a:58:d7:16:ac:15:
76:e9:56:a7:08:95:ed:20:ee:c5:a3:a5:fc:60:9e:
bc:8b:b2:41:65:10:bd:6f:04:f3:7a:9e:09:b6:22:
7a:5b:de:0a:7e:9e:4e:fe:ac:62:14:9f:a2:00:da:
12:69:bf:da:47:06:39:bc:c6:01:c9:a6:ec:aa:e6:
c6:88:c1:8c:cc:09:a2:4a:2d:ee:d9:75:a5:ed:dd:
04:e6:85:90:6e:0b:84:e5:15:66:91:6d:a8:ee:93:
f5:fe:c1:80:00:d8:34:9e:40:bc:a0:b0:c6:3a:6b:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:21:AA:93:57:6C:EA:E2:55:FF:D1:BF:E5:ED:4D:D1:4D:20:33
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/W6ghqpNXbOriVf_Rv-XtTdFNIDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.49.0-147.45.51.255
147.45.60.0/24
147.45.84.0/22
147.45.116.0/24
147.45.126.0/24
147.45.177.0-147.45.179.255
147.45.200.0-147.45.204.255
147.45.221.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:6a:16:9d:47:d1:7b:d4:eb:58:af:e5:e3:7a:89:9c:09:4f:
5a:e9:0f:1e:c6:4a:8d:f3:34:82:22:84:41:2c:46:56:eb:78:
24:7f:d1:41:d4:65:e5:66:ab:ae:f0:e1:11:d3:64:c9:26:61:
9e:8f:74:a6:d0:d9:e4:15:3f:5f:87:1c:25:18:1d:46:43:dd:
54:b5:ed:2a:47:84:c9:22:5a:90:7a:86:3c:bc:ff:67:43:bd:
5d:36:f5:22:c3:04:27:a7:8d:66:12:ee:0e:fa:4f:87:e3:16:
b2:28:fc:5d:5a:cd:a5:92:79:a6:66:0a:fb:dd:bf:9a:ed:af:
f0:e0:35:e4:0d:e6:d5:c7:52:cf:7a:21:60:df:e2:61:bb:ae:
0a:aa:d0:0a:15:ae:4c:fe:5e:5c:d3:b8:a3:bb:51:09:b3:db:
2f:57:6f:c6:a7:6f:47:38:c6:fc:be:f6:b2:6a:3c:58:81:c2:
54:e2:db:dd:b4:e6:50:45:9e:66:aa:60:07:8a:86:91:b0:62:
51:2b:85:2e:74:b5:89:22:e4:fc:b3:11:6c:e9:74:a1:f7:6a:
e2:14:02:45:30:2d:d2:7f:54:ff:62:8b:e9:33:e4:d2:02:d3:
52:30:e4:15:7a:87:32:f7:26:6a:6b:51:fa:1b:08:a8:dd:b0:
1a:16:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:44 2025 by rpki-client