Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/WpZtB4xD0Usp75w2QW9OAn-4rHQ.roa
File: WpZtB4xD0Usp75w2QW9OAn-4rHQ.roa (raw, json)
Hash identifier: m6IynW8CZa51zaSisbmJxtCciM04/zmgRb326SiF0VA=
Subject key identifier: 5A:96:6D:07:8C:43:D1:4B:29:EF:9C:36:41:6F:4E:02:7F:B8:AC:74
Certificate issuer: /CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Certificate serial: 0189BD065C268AD1FD235004A20B98C0514E
Authority key identifier: 53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/WpZtB4xD0Usp75w2QW9OAn-4rHQ.roa
Signing time: Thu 03 Aug 2023 20:10:57 +0000
ROA not before: Thu 03 Aug 2023 20:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208261
IP address blocks: 62.204.43.0/24 maxlen: 24
193.58.43.0/24 maxlen: 24
2a0f:ce00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:06:5c:26:8a:d1:fd:23:50:04:a2:0b:98:c0:51:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537192cc8fcf52e81e8d0530466fe99a56aaf3d1
Validity
Not Before: Aug 3 20:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a966d078c43d14b29ef9c36416f4e027fb8ac74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:09:8d:6b:60:ef:ab:71:7d:0f:9d:ff:fe:
b2:76:ee:37:c5:63:e7:0d:59:ef:f5:2d:a1:0a:1a:
68:c7:5d:8b:f5:59:07:29:3a:dc:8a:ec:db:8f:b5:
af:dd:42:8e:1d:30:8b:ff:a4:74:7e:39:32:7d:d3:
80:d0:f8:79:33:20:5a:87:18:d1:e8:c2:fd:eb:26:
af:42:6c:f1:33:f8:07:4f:c5:9a:2d:92:17:66:68:
50:f9:69:a5:96:28:93:b2:79:4f:22:2a:cd:82:4b:
13:69:9b:31:af:85:98:5e:d1:18:76:69:9e:6d:3c:
8b:8b:cf:81:40:17:9d:c1:08:13:62:7a:9e:40:9b:
4a:86:f7:d0:cd:51:d8:79:18:ad:78:02:f5:fe:91:
ca:14:cd:c9:67:93:7c:8b:4c:37:b5:a0:8c:8c:06:
5f:a4:4b:ce:94:4f:2b:be:36:c1:45:6a:20:69:dc:
a9:77:ac:45:25:f8:a3:d4:aa:b6:8c:c9:26:2e:6a:
c1:63:d7:29:34:10:29:05:29:c0:53:85:5f:1c:5c:
9d:b6:c1:a7:75:90:24:b6:36:0e:0f:5d:8c:fc:35:
70:f6:67:eb:e8:3d:6c:ad:df:ee:ef:9f:2c:0d:31:
8d:28:80:7e:d5:45:7d:0f:88:0b:76:e6:0c:56:70:
2b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:96:6D:07:8C:43:D1:4B:29:EF:9C:36:41:6F:4E:02:7F:B8:AC:74
X509v3 Authority Key Identifier:
keyid:53:71:92:CC:8F:CF:52:E8:1E:8D:05:30:46:6F:E9:9A:56:AA:F3:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3GSzI_PUugejQUwRm_pmlaq89E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/WpZtB4xD0Usp75w2QW9OAn-4rHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c702c3-1f1e-41c5-8b08-c7d379b3f22c/1/U3GSzI_PUugejQUwRm_pmlaq89E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.204.43.0/24
193.58.43.0/24
IPv6:
2a0f:ce00::/29
Signature Algorithm: sha256WithRSAEncryption
58:da:87:a7:12:a6:09:b5:f6:e8:6f:8e:f6:fc:01:87:bd:75:
36:f2:49:36:ab:ae:45:bd:7f:5f:9d:3c:2d:5f:46:10:4a:34:
fd:79:c8:ef:24:ce:33:f6:b0:51:32:a4:2e:e9:bd:b6:39:84:
3c:51:9b:02:88:a3:5d:4a:8c:47:32:20:ed:f4:00:46:ef:f2:
1e:2a:77:cf:7e:2a:24:11:7f:01:48:3c:bf:7e:cb:9c:28:70:
67:cb:11:99:58:a9:70:11:86:5f:1e:62:1c:01:f7:01:b0:00:
c4:94:4d:b6:f8:23:d1:ef:4c:aa:42:8b:05:2b:41:b7:91:7b:
ac:76:b6:8b:7f:ca:32:70:04:26:2a:e3:ce:74:07:70:58:2f:
02:b7:c7:e7:99:b1:46:89:a7:f2:92:08:9b:d7:d0:c5:5b:5f:
b3:73:ea:2d:9e:2f:3e:1b:13:d5:15:3e:7f:4c:23:63:60:99:
d8:6a:ae:b2:b3:01:db:95:e8:8a:23:85:d2:7c:4e:7b:b3:7a:
25:3c:34:f9:58:e8:30:8c:29:1a:16:da:90:dc:4f:64:1c:6e:
fb:95:05:02:e9:55:00:c0:3f:28:ad:63:59:e0:25:dc:38:dc:
34:78:9d:fc:09:7b:5e:f9:ec:2c:c5:85:f6:31:aa:ff:5a:32:
f8:4a:8b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:15 2025 by rpki-client