Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/wpFf61NchR3pblzCOhFBUFMNYGM.roa
File: wpFf61NchR3pblzCOhFBUFMNYGM.roa (raw, json)
Hash identifier: NsVBIpflh3OSM1I/L/B96Aqs28pJSilu7TXMI4Kae2Q=
Subject key identifier: C2:91:5F:EB:53:5C:85:1D:E9:6E:5C:C2:3A:11:41:50:53:0D:60:63
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 0185710C3C3059CC568755BB41505AC9FDA1
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/wpFf61NchR3pblzCOhFBUFMNYGM.roa
Signing time: Mon 02 Jan 2023 05:55:05 +0000
ROA not before: Mon 02 Jan 2023 05:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202297
IP address blocks: 45.139.224.0/22 maxlen: 24
2001:678:aa8::/48 maxlen: 48
2001:678:aa4::/48 maxlen: 48
2a04:ff07::/32 maxlen: 48
2a04:ff00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3c:30:59:cc:56:87:55:bb:41:50:5a:c9:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 05:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2915feb535c851de96e5cc23a114150530d6063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:fc:f9:45:e5:e4:c8:23:fb:f5:b2:a1:c5:
14:22:f8:25:68:04:59:2d:62:70:9a:13:4a:f9:82:
c7:cf:f5:10:b8:90:52:f6:b0:8d:a5:17:92:fc:84:
dc:00:80:94:5b:eb:9a:30:41:e9:83:0d:94:c3:f3:
8a:c6:62:73:e7:43:d5:5e:76:57:bc:99:0e:50:1a:
b6:22:89:7b:1e:36:80:8d:05:05:9b:96:cd:aa:93:
d5:1f:84:90:5e:6e:a3:90:17:0d:ef:e3:28:06:40:
a0:7b:98:6a:5a:e0:25:d9:b5:44:43:99:4c:ca:35:
31:63:d6:ff:86:13:5f:82:e5:99:02:db:0c:6d:e8:
08:ff:b4:4f:5d:90:92:4e:bf:dc:11:0f:3e:6e:c5:
63:7b:05:0b:98:dd:cd:15:d6:1e:fc:48:55:1b:59:
cf:53:ab:6f:99:9c:82:7d:07:67:8a:4c:86:d7:d9:
9b:54:ff:2d:31:ec:48:5e:f5:29:99:6d:92:42:46:
13:38:64:53:9d:92:40:32:49:50:64:bf:a7:4d:86:
1b:04:cd:24:38:ff:b3:88:6e:5b:fc:9a:bd:0b:1e:
29:e3:0c:fe:c1:ec:46:39:46:41:75:9e:8b:5a:58:
99:7e:30:85:f6:8a:57:da:ea:69:9e:12:88:1b:af:
e3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:91:5F:EB:53:5C:85:1D:E9:6E:5C:C2:3A:11:41:50:53:0D:60:63
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/wpFf61NchR3pblzCOhFBUFMNYGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.224.0/22
IPv6:
2001:678:aa4::/48
2001:678:aa8::/48
2a04:ff00::/29
Signature Algorithm: sha256WithRSAEncryption
00:aa:b4:18:33:79:e1:d2:e4:d4:f2:8e:05:e0:7d:f1:49:ce:
17:c7:f3:8b:8f:5b:10:fd:90:ab:a9:5f:ec:f8:9a:9a:ac:d6:
88:2d:5a:75:93:ba:49:83:aa:d9:20:66:bf:57:71:80:a5:49:
92:fb:f9:8b:eb:db:d5:a9:12:30:29:3d:67:38:45:4b:70:d1:
0f:5f:b7:59:9d:03:63:a0:77:05:5f:de:ea:3a:0b:c2:39:1a:
64:25:76:24:6c:de:87:44:3f:83:4f:5c:b8:07:8c:e5:bc:e9:
fa:90:78:56:9a:f5:31:d9:d3:57:3b:04:9c:b0:a0:1c:61:ac:
56:b8:39:6f:9a:df:fc:4c:d4:a6:55:4a:8d:c4:7a:a1:6c:2b:
f9:ab:66:2d:dc:62:61:1d:e5:7c:3c:91:c7:88:fd:ac:f5:45:
62:4a:46:b7:77:2e:e5:65:fb:6c:a0:43:7f:1b:60:e4:ff:67:
5f:7a:65:db:65:a7:36:55:d1:8c:49:5d:88:72:09:99:27:ff:
f1:dc:cb:4a:dd:56:11:4e:b1:41:60:cd:e7:b8:8e:13:00:3a:
25:81:a4:09:1e:e1:fe:a7:58:2d:87:fd:75:d6:c8:cf:59:97:
b4:9c:59:c0:a5:c6:6f:f1:76:15:b7:42:1c:5f:57:20:ed:ae:
a2:6e:23:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:47 2025 by rpki-client