Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/WF5dYmMLtN5r8bTraACFnUllCm0.roa
File: WF5dYmMLtN5r8bTraACFnUllCm0.roa (raw, json)
Hash identifier: spK0WtoYLGT5CRBSmN9W87iFmcb+6LTNpROxPO3KWjs=
Subject key identifier: 58:5E:5D:62:63:0B:B4:DE:6B:F1:B4:EB:68:00:85:9D:49:65:0A:6D
Certificate issuer: /CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Certificate serial: 0183EF8F570D52F7B475F26A3D633ED46819
Authority key identifier: 53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/WF5dYmMLtN5r8bTraACFnUllCm0.roa
Signing time: Wed 19 Oct 2022 09:24:52 +0000
ROA not before: Wed 19 Oct 2022 09:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208261
IP address blocks: 62.204.43.0/24 maxlen: 24
193.58.43.0/24 maxlen: 24
45.149.56.0/22 maxlen: 22
2a0f:ce00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:8f:57:0d:52:f7:b4:75:f2:6a:3d:63:3e:d4:68:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Validity
Not Before: Oct 19 09:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=585e5d62630bb4de6bf1b4eb6800859d49650a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:c0:9c:00:c7:69:6f:6e:de:20:9e:cb:09:
42:4a:91:6f:7c:0f:95:3a:fa:12:50:0a:99:2b:90:
39:7b:ec:6a:bd:87:8d:dd:57:8b:7c:6f:fc:7f:45:
ba:67:86:34:90:5e:d8:76:0e:61:7b:2a:3f:bd:0e:
cf:8e:74:5d:e7:80:eb:6b:78:22:3b:2d:71:67:5b:
7a:ee:de:a2:2f:b5:8c:b2:bf:31:7b:3d:25:0f:c9:
7b:22:44:a4:46:40:31:ef:00:ec:79:74:46:c8:b3:
85:74:6d:cb:2a:dc:92:ce:c6:37:b5:47:3b:3c:4a:
35:4b:1b:0a:87:01:7e:f3:26:ee:f1:71:f0:d6:86:
83:50:ea:72:50:20:16:ee:fa:dd:32:80:b0:6a:bf:
12:4c:43:14:81:89:b1:22:31:07:b6:7f:ac:9f:0e:
23:b5:af:1b:7b:2a:cc:ea:6f:9d:e0:40:81:9d:95:
97:95:06:38:fc:e4:f5:cd:3b:ab:c1:c2:20:43:52:
bf:ff:66:87:dd:2c:a9:75:e6:be:a2:8f:1c:65:c2:
7a:38:3a:4d:c5:31:93:8c:a7:7c:27:e4:2b:1c:86:
ea:4f:c8:f8:0a:ab:6e:4d:33:cf:db:32:0e:78:81:
da:6c:1b:f1:ba:26:6d:de:2e:14:6f:05:4c:ff:00:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5E:5D:62:63:0B:B4:DE:6B:F1:B4:EB:68:00:85:9D:49:65:0A:6D
X509v3 Authority Key Identifier:
keyid:53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/WF5dYmMLtN5r8bTraACFnUllCm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/U3GSzI_PUugejQUwRm_pmlaq89E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.56.0/22
62.204.43.0/24
193.58.43.0/24
IPv6:
2a0f:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:08:34:78:7e:90:e0:59:02:d5:40:5b:ee:a5:97:7b:4c:54:
61:d6:32:1d:59:41:63:66:4e:cf:be:ab:6f:4a:b9:a8:4e:d6:
6f:81:f4:bc:85:fa:35:62:cf:24:11:0c:7e:58:d8:dd:2e:97:
7a:ae:00:24:04:54:90:ed:90:bb:de:6c:88:8c:d9:c4:d7:a3:
6e:27:4c:7e:42:4c:e1:52:50:88:63:cd:18:3c:b9:29:a3:be:
19:1f:a2:8c:ba:89:4c:87:11:03:ac:12:a4:06:69:04:f5:1a:
e8:41:e0:cb:a2:b1:56:92:31:d5:20:a5:7a:69:f6:e0:14:7e:
d6:7c:a2:b3:d9:6f:a4:19:04:40:4d:61:31:ab:e9:65:85:e1:
f7:d4:48:78:b9:ab:65:3c:9f:72:2c:f7:1d:75:93:c7:04:bc:
02:b2:01:55:51:36:7b:fc:03:9b:d5:59:31:26:28:37:9d:84:
72:ed:a5:b2:68:25:07:71:02:f7:77:74:cb:7c:ae:ad:a8:dd:
3f:bf:be:1a:25:92:8a:21:57:32:7d:10:18:ba:9b:de:7d:23:
66:31:5d:2a:96:f9:96:1a:f1:3e:cd:2f:21:a8:a7:1e:f2:31:
0b:4e:c2:0c:07:20:f2:98:df:b2:1e:63:43:9e:98:3e:12:84:
ba:f9:3a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:02 2025 by rpki-client