Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/wco6lby84EFuFZVsD3YJ6jjZJjg.roa
File: wco6lby84EFuFZVsD3YJ6jjZJjg.roa (raw, json)
Hash identifier: OvjwNT1Vaz0Q8soeoNZqB9D75gw6QRvYDSS5yJ4IFyk=
Subject key identifier: C1:CA:3A:95:BC:BC:E0:41:6E:15:95:6C:0F:76:09:EA:38:D9:26:38
Certificate issuer: /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial: 019423D6E0E87FF7FE358DA16DD870FF9584
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/wco6lby84EFuFZVsD3YJ6jjZJjg.roa
Signing time: Wed 01 Jan 2025 21:47:52 +0000
ROA not before: Wed 01 Jan 2025 21:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12912
IP address blocks: 37.30.0.0/15 maxlen: 17
37.30.0.0/19 maxlen: 19
37.30.32.0/19 maxlen: 19
37.30.96.0/19 maxlen: 19
46.204.0.0/15 maxlen: 15
46.204.0.0/19 maxlen: 19
46.204.32.0/19 maxlen: 19
46.204.64.0/19 maxlen: 19
46.204.96.0/19 maxlen: 19
46.205.128.0/19 maxlen: 19
46.205.192.0/20 maxlen: 20
46.205.208.0/20 maxlen: 20
46.205.240.0/21 maxlen: 21
62.152.128.0/19 maxlen: 19
83.220.96.0/19 maxlen: 19
83.220.101.0/24 maxlen: 24
178.180.0.0/14 maxlen: 14
178.182.0.0/18 maxlen: 18
178.183.0.0/18 maxlen: 18
178.183.32.0/24 maxlen: 24
188.146.0.0/15 maxlen: 15
188.146.0.0/16 maxlen: 17
188.146.0.0/18 maxlen: 18
188.146.0.0/19 maxlen: 19
188.146.32.0/19 maxlen: 19
188.146.64.0/19 maxlen: 19
188.146.128.0/19 maxlen: 19
188.146.192.0/19 maxlen: 19
188.147.0.0/19 maxlen: 19
188.147.0.0/22 maxlen: 22
188.147.64.0/18 maxlen: 18
188.147.64.0/19 maxlen: 19
188.147.96.0/19 maxlen: 19
188.147.192.0/19 maxlen: 19
213.158.192.0/19 maxlen: 19
2001:1b80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:e0:e8:7f:f7:fe:35:8d:a1:6d:d8:70:ff:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1ca3a95bcbce0416e15956c0f7609ea38d92638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:4c:61:e0:bd:d6:ee:0c:9e:73:78:f0:c1:
a6:1b:5c:2f:ee:d3:f3:6b:f1:de:dd:7b:19:93:41:
9c:23:9e:a7:dc:9a:f8:08:69:19:06:83:f6:51:05:
0e:23:5d:65:c4:17:cc:6b:0e:6b:c1:ca:8f:40:28:
0a:ff:ce:55:ca:4f:f0:52:38:84:f4:0e:d0:73:5b:
f3:03:76:0b:af:48:f4:04:89:f0:8f:cd:95:0f:27:
e7:2e:00:08:f0:e6:68:f8:f2:58:c4:e4:3d:9d:83:
82:89:09:a8:91:b9:d7:19:8d:c7:0d:18:6a:a5:d3:
7d:25:1b:bc:0b:1e:fa:9c:ea:eb:5d:63:e9:4a:9d:
6e:48:a9:a0:e4:88:9b:48:f4:00:b9:5e:94:ba:d9:
9f:f2:5d:e8:76:e6:cb:54:3f:9b:e7:ea:32:df:b5:
42:b1:97:55:5e:51:50:07:39:59:51:aa:5d:e3:14:
9c:c8:1e:66:30:f7:78:c3:df:83:59:15:de:f8:72:
30:4a:74:3e:1e:5d:80:b5:c9:ff:70:af:63:23:f0:
69:69:b5:94:70:a3:74:b4:dc:82:69:17:cc:a1:0e:
c0:81:10:74:76:be:1b:1d:ce:41:7d:c3:e3:09:83:
2f:82:e0:47:61:48:fb:47:f5:4d:07:9f:81:28:9c:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:3A:95:BC:BC:E0:41:6E:15:95:6C:0F:76:09:EA:38:D9:26:38
X509v3 Authority Key Identifier:
keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/wco6lby84EFuFZVsD3YJ6jjZJjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.30.0.0/15
46.204.0.0/15
62.152.128.0/19
83.220.96.0/19
178.180.0.0/14
188.146.0.0/15
213.158.192.0/19
IPv6:
2001:1b80::/29
Signature Algorithm: sha256WithRSAEncryption
2c:1d:06:60:ef:d8:bd:f2:73:80:1b:a6:ab:58:3e:e0:21:1a:
12:ef:4e:be:b1:42:94:7a:8b:e2:f5:03:1d:14:0a:eb:ac:21:
7f:d9:5a:87:e9:1c:82:9c:c4:ce:ae:88:df:26:2e:38:85:9a:
cf:fc:90:11:5c:de:44:8e:5b:9e:13:4f:1a:87:51:71:40:58:
d3:7f:b0:92:cb:16:df:0b:97:58:93:43:15:c5:47:29:80:3d:
dc:4c:c5:4e:44:74:8e:d5:b7:40:6f:97:5f:04:4e:02:9e:ca:
63:01:aa:29:1b:df:9a:02:6e:92:05:d9:b2:59:78:c9:3e:2a:
b8:59:67:5e:00:23:ab:dd:4f:4a:49:58:23:29:ab:78:a6:af:
c7:ee:19:60:37:03:67:ff:f7:19:af:71:67:b8:26:44:29:48:
c8:97:75:e5:25:94:9b:61:2f:5a:38:93:51:87:a4:85:41:35:
e1:93:59:0b:ea:54:cd:3a:1d:ca:a0:c6:e0:c8:f9:78:fe:7a:
01:23:74:40:fb:9b:ec:47:33:aa:6c:e4:2a:24:61:db:47:0b:
a0:d6:5f:67:c0:69:7f:1d:5b:8f:09:7a:14:e9:c4:ba:5a:1b:
0a:c9:fc:4d:c3:1b:9a:ac:19:42:0b:c5:af:e6:da:a3:22:c8:
6f:51:41:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:53:04 2025 by rpki-client