Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WuXqh59QG49gg6QPdRYeOm9-g9s.roa
File: WuXqh59QG49gg6QPdRYeOm9-g9s.roa (raw, json)
Hash identifier: LUTIVCZvGTACTDpbJSb3CiMEimiY34jxorq5/GqwRw8=
Subject key identifier: 5A:E5:EA:87:9F:50:1B:8F:60:83:A4:0F:75:16:1E:3A:6F:7E:83:DB
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0194274888BC1150C8455BA74DC605AE7150
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WuXqh59QG49gg6QPdRYeOm9-g9s.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 2.56.247.0/24 maxlen: 24
5.253.246.0/24 maxlen: 24
37.221.92.0/24 maxlen: 24
37.221.94.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
45.84.196.0/24 maxlen: 24
45.84.198.0/24 maxlen: 24
45.131.108.0/24 maxlen: 24
45.131.111.0/24 maxlen: 24
45.137.201.0/24 maxlen: 24
45.137.203.0/24 maxlen: 24
45.142.104.0/24 maxlen: 24
45.142.107.0/24 maxlen: 24
45.147.7.0/24 maxlen: 24
92.118.207.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:88:bc:11:50:c8:45:5b:a7:4d:c6:05:ae:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ae5ea879f501b8f6083a40f75161e3a6f7e83db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:36:e0:e9:c8:31:ca:85:54:58:41:38:40:
ac:fa:43:37:52:e8:7b:73:8a:38:37:64:ea:1a:04:
f5:96:1b:47:2d:44:1d:ef:dc:5f:89:ca:52:63:8f:
28:05:04:b7:2c:a2:76:3c:2a:b7:ab:1d:95:d5:52:
b9:7b:38:21:1b:41:c5:10:ed:0d:06:11:e7:f3:73:
6d:a5:6c:63:8d:7c:4d:41:18:38:73:70:29:1a:48:
9f:d9:f7:8b:00:d2:5d:bf:ae:02:14:36:b4:cf:a2:
f4:a2:7b:52:38:2f:12:42:17:a7:82:ff:19:45:85:
8e:98:b1:f9:5a:2f:56:f6:6b:bb:ad:f7:94:0d:3b:
c6:d9:71:a9:3a:ff:0f:72:ce:fe:df:78:6e:b3:e7:
a0:4c:6c:25:0f:53:cd:0c:12:60:8b:42:a1:88:8a:
fc:bc:89:4b:c0:56:1b:0c:4d:6a:8a:6a:06:e6:dc:
38:69:fd:91:44:d5:a5:34:e2:af:b4:8a:37:19:bb:
33:e1:71:b6:67:71:29:dc:c7:62:9a:e6:97:0e:cb:
4b:76:69:ef:7f:bd:53:37:04:95:ed:33:07:e2:84:
ee:fd:f1:71:2f:5b:12:2f:9d:d0:36:41:ad:11:b6:
a5:b1:53:55:53:69:24:c0:93:39:18:f9:ed:c6:fa:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:EA:87:9F:50:1B:8F:60:83:A4:0F:75:16:1E:3A:6F:7E:83:DB
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WuXqh59QG49gg6QPdRYeOm9-g9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.247.0/24
5.253.246.0/24
37.221.92.0/24
37.221.94.0/24
45.13.227.0/24
45.84.196.0/24
45.84.198.0/24
45.131.108.0/24
45.131.111.0/24
45.137.201.0/24
45.137.203.0/24
45.142.104.0/24
45.142.107.0/24
45.147.7.0/24
92.118.207.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:8c:c5:63:95:74:ae:65:90:c5:69:67:6a:01:5e:c2:98:13:
c2:74:79:c2:8e:0e:92:7f:46:4a:a6:6a:7d:7b:4c:d2:e3:fa:
5d:18:48:db:f9:1f:1e:5a:94:2a:62:32:42:0d:0e:42:85:65:
58:72:02:90:4b:27:78:4f:e7:af:24:17:36:08:7a:0f:31:d7:
4e:b7:a2:df:1d:4c:58:a3:eb:a6:b8:81:f1:48:79:eb:37:49:
21:8b:ef:65:53:26:81:a0:c7:e4:dd:b7:4c:e1:1d:25:6f:85:
dc:8e:cd:2d:38:a2:e5:e4:e6:5e:95:9f:a9:98:89:1b:47:68:
04:73:13:83:27:7f:8b:8a:39:3f:8e:0a:9f:f6:f9:bf:dc:5f:
cd:e3:18:de:2f:12:0b:66:ad:92:8d:6f:af:be:71:4e:ea:58:
d7:97:14:a7:03:26:19:46:c4:b3:8c:a5:4a:07:71:d1:55:67:
c3:c2:e6:ea:c0:a6:7b:ab:3b:cc:09:0f:86:f1:d7:de:32:5f:
99:e1:02:98:e4:df:20:2d:0f:5e:84:8f:9e:b6:58:5e:de:a5:
cb:1d:db:c2:9a:05:b8:58:cf:98:94:2a:79:56:11:d5:a6:69:
91:45:73:36:6e:29:46:6b:5b:19:b8:da:ab:5e:35:4d:a0:a0:
d5:01:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:45:21 2025 by rpki-client