Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/W6-NRqk5OsopG9w8tKbuQZ56zF0.roa
File: W6-NRqk5OsopG9w8tKbuQZ56zF0.roa (raw, json)
Hash identifier: bCxd+UGCV62QHJMaRzCAsS5tcJ4n2K1R31FV2CWZS0M=
Subject key identifier: 5B:AF:8D:46:A9:39:3A:CA:29:1B:DC:3C:B4:A6:EE:41:9E:7A:CC:5D
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0195D1B190B31493A64CACFBA8F4AE700AB9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/W6-NRqk5OsopG9w8tKbuQZ56zF0.roa
Signing time: Wed 26 Mar 2025 09:03:49 +0000
ROA not before: Wed 26 Mar 2025 09:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60446
IP address blocks: 31.210.37.0/24 maxlen: 24
31.210.38.0/24 maxlen: 24
31.210.39.0/24 maxlen: 24
31.210.40.0/24 maxlen: 24
77.92.147.0/24 maxlen: 24
78.135.75.0/24 maxlen: 24
78.135.76.0/24 maxlen: 24
188.132.223.0/24 maxlen: 24
188.132.224.0/24 maxlen: 24
188.132.226.0/24 maxlen: 24
188.132.230.0/24 maxlen: 24
188.132.239.0/24 maxlen: 24
188.132.241.0/24 maxlen: 24
188.132.242.0/24 maxlen: 24
188.132.243.0/24 maxlen: 24
188.132.250.0/24 maxlen: 24
188.132.251.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:b1:90:b3:14:93:a6:4c:ac:fb:a8:f4:ae:70:0a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Mar 26 09:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5baf8d46a9393aca291bdc3cb4a6ee419e7acc5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:18:76:35:45:d4:9e:ce:4b:bc:96:60:fc:
00:f3:d1:d1:4f:9a:34:85:58:f8:1d:69:e3:46:f8:
d0:cc:b5:31:be:49:3c:ee:ed:2d:91:ff:27:f1:a8:
2b:d5:aa:8b:1a:d9:4b:5f:67:6e:bb:20:f0:ba:22:
4e:dc:a7:0a:89:3a:bc:dd:18:cc:32:a7:38:69:98:
38:47:85:4f:a9:df:8c:ee:07:33:15:ab:9e:0f:6b:
77:db:c1:5b:7d:8f:d7:9d:a0:5c:e7:bb:e9:17:62:
97:f6:c3:c0:73:7b:ab:51:0b:bc:e0:47:93:71:26:
3d:3f:85:71:67:34:20:17:c4:7e:e7:a7:73:b4:22:
13:c9:4c:bb:d8:db:8c:6e:43:01:7c:94:7d:f4:ce:
27:0d:0f:9b:85:50:c1:49:9c:52:b4:b6:dd:06:c3:
67:cb:37:79:3c:b0:b0:dc:c7:c0:72:b4:89:b3:dc:
dc:28:52:37:9e:67:27:32:0a:cb:e5:db:22:5f:be:
70:33:3e:6c:03:60:1a:7e:d2:76:31:c6:d0:25:d3:
4b:d9:b8:c7:2d:4b:cd:0c:32:3e:7b:e2:be:35:95:
9f:8f:77:7e:fe:f2:5d:0c:15:4e:f3:eb:fa:1f:b5:
a1:c5:d2:69:1f:bd:f8:f7:53:8d:5a:3d:18:cc:a3:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AF:8D:46:A9:39:3A:CA:29:1B:DC:3C:B4:A6:EE:41:9E:7A:CC:5D
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/W6-NRqk5OsopG9w8tKbuQZ56zF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.37.0-31.210.40.255
77.92.147.0/24
78.135.75.0-78.135.76.255
188.132.223.0-188.132.224.255
188.132.226.0/24
188.132.230.0/24
188.132.239.0/24
188.132.241.0-188.132.243.255
188.132.250.0/23
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
03:5d:36:c2:59:d7:70:1e:a7:c1:28:84:8a:bb:9a:4d:12:6f:
b5:19:75:e1:60:93:4e:8b:87:0e:33:14:63:5c:23:76:7e:b2:
f0:c3:86:dd:cc:b6:ca:b5:3f:d6:36:38:7f:be:7a:0c:7f:58:
2a:8d:25:72:2c:d2:d2:3b:62:ce:aa:7b:b6:7b:5d:6a:e6:be:
21:2c:6a:eb:bb:ff:7c:31:bb:d1:d2:20:8d:d1:ba:a0:36:59:
5a:2d:e9:1b:68:25:fc:ac:e4:91:a4:a7:4b:a7:31:21:fe:f5:
b4:21:0e:bc:83:b5:2f:4f:3c:0c:7b:73:3d:77:ac:e3:a2:6c:
d0:63:ae:67:b6:66:3f:b8:73:66:c4:fd:81:31:bc:86:de:94:
07:a6:3b:1b:ec:15:96:d2:7e:12:49:c9:de:2c:27:db:54:bd:
9b:a5:62:b6:5e:40:59:0c:b3:19:18:8c:dd:22:fb:21:da:1c:
31:47:6e:37:b3:cd:4f:01:ca:2b:63:24:52:5c:de:b8:0b:7b:
2a:c7:19:85:e7:e5:29:cd:da:43:7f:f1:ad:cd:88:7f:1d:5d:
71:d5:48:e1:e9:4c:93:06:6b:a3:e3:36:b5:6b:ef:87:17:3e:
0f:eb:82:0f:66:9f:4d:98:6c:e4:a3:da:28:46:c8:48:27:44:
65:86:54:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:08 2025 by rpki-client