Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WVFvY3ZWfa36v710DEp0uV29-9c.roa
File: WVFvY3ZWfa36v710DEp0uV29-9c.roa (raw, json)
Hash identifier: XQZ8VRX726XdacC7f4o6+kdY9Z03hPZUpDbkG51GRF0=
Subject key identifier: 59:51:6F:63:76:56:7D:AD:FA:BF:BD:74:0C:4A:74:B9:5D:BD:FB:D7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01867420E3E1AECFAADFF6B07EE422A36C72
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WVFvY3ZWfa36v710DEp0uV29-9c.roa
Signing time: Tue 21 Feb 2023 13:19:17 +0000
ROA not before: Tue 21 Feb 2023 13:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61429
IP address blocks: 62.41.20.0/24 maxlen: 24
62.41.21.0/24 maxlen: 24
62.41.60.0/24 maxlen: 24
62.41.59.0/24 maxlen: 24
62.41.2.0/24 maxlen: 24
62.41.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:20:e3:e1:ae:cf:aa:df:f6:b0:7e:e4:22:a3:6c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Feb 21 13:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59516f6376567dadfabfbd740c4a74b95dbdfbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:1f:b2:e2:61:43:e5:7a:67:d5:09:d8:cb:
e9:6e:a7:47:8f:e1:99:22:91:e1:9f:b7:8e:bb:a7:
e6:d1:bf:93:4e:ee:9f:29:88:80:de:b4:ea:28:6b:
6f:83:48:b9:3d:4a:d8:8a:e6:3a:96:7b:0a:5d:ec:
ea:da:6e:b7:d3:26:fa:4a:fb:16:2c:86:60:f2:91:
22:19:58:f9:66:9a:42:fd:a9:1f:03:62:d0:a1:b2:
7c:b1:12:a3:e4:bd:a1:9c:df:55:b6:9b:9e:4e:8f:
12:07:e5:fd:15:a7:a3:5b:f8:bd:0e:11:63:a2:9e:
48:9e:2d:54:ce:22:62:28:7d:d5:97:96:fb:bb:cd:
23:55:4c:cf:7d:5c:2b:b4:1a:41:57:7a:53:07:e0:
1d:5c:05:3a:d7:8c:b7:cc:51:f1:72:6b:b7:2c:d1:
46:46:54:00:bc:57:19:73:e2:87:06:7e:37:bf:85:
b6:71:ec:de:6a:a6:0b:f5:9c:63:fa:59:86:b2:12:
d7:2f:6b:17:9b:a0:ee:8a:8f:1d:73:39:e4:c8:d7:
e1:fe:c4:d4:05:0a:d3:48:bd:1b:65:53:95:92:d0:
12:7b:76:58:4b:13:b4:a2:a7:3c:56:0c:f3:84:ac:
64:a0:0a:ee:a6:c9:ff:c9:04:c3:83:02:9f:bb:d8:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:51:6F:63:76:56:7D:AD:FA:BF:BD:74:0C:4A:74:B9:5D:BD:FB:D7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/WVFvY3ZWfa36v710DEp0uV29-9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.2.0/24
62.41.10.0/24
62.41.20.0/23
62.41.59.0-62.41.60.255
Signature Algorithm: sha256WithRSAEncryption
5e:e4:11:ce:5c:aa:5f:44:da:01:a2:30:8d:36:28:f2:63:1a:
a1:ec:7b:2a:cb:3a:f5:4d:62:e9:9b:b7:f7:65:70:c4:56:d1:
fa:71:c3:e3:0b:71:99:d9:12:e0:26:2c:ff:d7:1a:9a:4d:34:
33:06:91:cb:73:f2:c7:fc:80:c3:22:d2:45:31:24:39:81:95:
c5:b3:6e:3b:f2:dc:4c:b4:25:61:22:1d:91:c4:54:8c:82:a0:
53:d4:cc:13:48:72:18:40:4e:14:5b:9c:a5:9b:e4:d4:7d:99:
f4:7f:1f:c6:d4:3c:35:5f:f2:2e:d5:4a:49:60:c8:0e:16:1a:
85:d4:09:c1:21:4c:94:5f:a5:7b:41:5c:f2:0b:12:cb:b6:0b:
30:fb:6b:01:2d:4a:df:b5:ec:c3:f4:73:d6:1a:bc:0d:e8:00:
8d:25:b3:39:d0:5e:69:76:a1:ee:24:ac:f9:4e:73:41:b0:49:
ad:ba:37:56:13:35:c9:f2:cc:f2:d8:8d:2b:05:61:75:00:71:
39:b4:5e:f8:53:a8:8f:05:e2:54:9b:f2:6c:1b:7b:82:28:1f:
b2:e5:54:07:24:2a:e7:05:74:c3:be:b5:d7:07:86:eb:6e:bb:
54:58:31:e2:e4:7c:22:a0:7b:fb:1f:a0:6f:fb:c8:cd:c0:89:
65:cb:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:07 2025 by rpki-client