Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/wz02ujMIpfYt95jo9uRu2zTZVWs.roa
File: wz02ujMIpfYt95jo9uRu2zTZVWs.roa (raw, json)
Hash identifier: P+xH2nnVuR8tGZi2nJ3gm3pk9DG+gPgY1s3yifqR2ck=
Subject key identifier: C3:3D:36:BA:33:08:A5:F6:2D:F7:98:E8:F6:E4:6E:DB:34:D9:55:6B
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA37B6DDC8BFFF74C038EEFA627D07
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/wz02ujMIpfYt95jo9uRu2zTZVWs.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60548
IP address blocks: 37.114.50.0/23 maxlen: 23
37.114.52.0/24 maxlen: 24
37.114.54.0/23 maxlen: 23
37.114.63.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:37:b6:dd:c8:bf:ff:74:c0:38:ee:fa:62:7d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c33d36ba3308a5f62df798e8f6e46edb34d9556b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:94:7e:b5:73:44:21:04:c8:7b:a8:69:6e:
45:ca:c1:6c:09:b2:12:1a:f4:2c:14:ac:fb:25:d4:
d6:25:a3:a0:0d:a1:dd:0e:5f:02:ec:36:17:c7:89:
b0:29:a7:8d:7c:5e:f0:b3:f3:ae:eb:62:97:fa:56:
1c:44:34:91:96:19:c2:1d:4a:70:cf:32:2d:3a:ed:
ba:f5:b4:bc:c7:53:22:78:5e:3d:aa:10:77:20:87:
40:e8:90:55:95:22:a4:db:d2:9e:a1:87:50:5b:42:
73:75:cf:94:20:12:92:c5:6f:9a:d0:34:3e:81:5d:
ca:93:05:68:f6:fc:97:8e:14:00:95:24:d9:22:73:
e1:4f:86:7a:03:75:b4:cd:6d:8b:64:3e:98:aa:a0:
59:dd:bb:82:aa:7d:27:3e:28:67:70:24:84:b7:71:
07:ac:f4:39:ce:e8:d7:05:02:e4:bd:fb:f7:7f:17:
a6:2f:c3:27:77:2c:5f:d7:97:90:0a:55:50:7b:fb:
c9:cd:1a:de:5b:7b:3d:e3:65:9f:40:57:74:98:ba:
02:0c:16:a5:33:99:5c:53:73:bf:d6:74:10:c1:0f:
78:17:a2:e1:e7:57:4e:c6:89:b9:ed:ce:f7:9d:dd:
75:ef:e0:fb:ce:1d:70:a2:19:05:7d:d0:06:8b:16:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:36:BA:33:08:A5:F6:2D:F7:98:E8:F6:E4:6E:DB:34:D9:55:6B
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/wz02ujMIpfYt95jo9uRu2zTZVWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.50.0-37.114.52.255
37.114.54.0/23
37.114.63.0/24
43.251.160.0/24
Signature Algorithm: sha256WithRSAEncryption
14:db:df:ba:8d:81:20:7f:70:da:ba:e8:57:92:95:c0:1b:66:
eb:68:90:c4:18:29:4f:ba:12:a0:e0:8a:03:1f:07:ad:9c:4e:
91:ca:b4:c2:99:0a:39:f8:09:9a:3a:74:e8:d4:18:7d:41:e5:
b6:72:dc:a8:37:3a:3e:ca:ec:63:f8:bd:16:b7:9f:8a:41:b8:
84:3a:37:30:99:66:56:80:4a:aa:4c:86:51:42:ae:1e:77:28:
a2:e8:16:49:70:09:25:73:23:28:ee:d8:1e:95:42:15:69:29:
4a:82:0f:b7:0a:ff:4b:0e:a2:10:05:46:7f:14:34:cd:55:d4:
c4:ed:89:5b:6f:66:f0:c9:3b:df:d5:27:59:f6:d6:33:6e:02:
76:8b:a7:39:91:02:de:2c:f9:f3:9c:c7:df:58:67:81:71:06:
ef:41:cc:4c:3d:6d:c9:f0:aa:20:62:14:b0:12:e8:55:1e:02:
8b:ef:05:31:dd:c5:5c:47:52:0b:3e:91:6b:d5:2a:65:db:a4:
88:a2:ae:7a:da:ef:8e:6a:fe:97:9a:3a:63:42:c9:f8:90:75:
ae:d2:27:90:75:c1:ec:cf:bc:9f:2a:3f:80:b1:eb:60:74:42:
20:c9:1f:1f:26:1a:7d:6c:16:76:f9:9e:6d:19:1d:e5:3d:cd:
f9:c9:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:54:34 2025 by rpki-client