Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/WWnUjL9xa5N7RsAiSnLThhNhQII.roa
File: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (raw, json)
Hash identifier: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=
Subject key identifier: 59:69:D4:8C:BF:71:6B:93:7B:46:C0:22:4A:72:D3:86:13:61:40:82
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 019426D9DEF454728B611F2F468F3758EB57
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/WWnUjL9xa5N7RsAiSnLThhNhQII.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8560
IP address blocks: 62.151.160.0/21 maxlen: 24
62.151.176.0/21 maxlen: 24
82.223.0.0/16 maxlen: 24
93.93.112.0/21 maxlen: 24
94.143.136.0/21 maxlen: 24
185.132.44.0/22 maxlen: 24
217.76.128.0/19 maxlen: 24
2001:ba0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:de:f4:54:72:8b:61:1f:2f:46:8f:37:58:eb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5969d48cbf716b937b46c0224a72d38613614082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:2d:c4:1c:90:66:80:ff:b3:fc:fc:1f:ee:
8d:7d:1f:8a:47:da:f5:71:2a:79:9f:e9:e0:9f:9a:
bb:91:c6:13:89:92:2c:ae:c5:a4:3e:0d:9f:19:52:
40:f7:06:c3:3f:d7:52:aa:7c:6c:3d:72:2e:76:84:
03:62:a1:71:30:ee:bd:db:4e:25:ed:03:2b:47:f8:
9b:8d:3b:05:8c:94:e1:bc:da:ba:e1:21:ba:4b:51:
03:d3:38:41:3b:01:29:eb:7f:04:22:fb:10:eb:a7:
7f:9a:9f:45:ef:5f:e3:b5:3a:01:bd:1f:84:50:05:
00:52:50:20:1d:de:58:3d:fd:b7:76:89:f8:52:54:
d8:d9:76:5f:c7:15:68:85:2f:4a:f5:ef:4c:82:d9:
00:24:1d:27:c3:aa:9c:56:b0:82:3c:ca:9d:b1:16:
e5:f3:81:ce:2a:be:7c:17:2f:bd:3b:8b:19:45:27:
7e:56:77:c1:01:ff:2d:95:14:11:ed:e1:80:73:0a:
50:8a:ea:87:63:c4:71:68:ca:db:3f:32:57:b9:a8:
14:c9:b3:af:65:f6:99:f6:aa:f4:84:55:16:54:b7:
51:e3:91:b4:da:72:e9:cb:14:3c:5a:c7:7a:58:1a:
b9:bb:18:1c:00:be:2c:ba:6e:04:bc:c9:3b:04:fd:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:D4:8C:BF:71:6B:93:7B:46:C0:22:4A:72:D3:86:13:61:40:82
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/WWnUjL9xa5N7RsAiSnLThhNhQII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.151.160.0/21
62.151.176.0/21
82.223.0.0/16
93.93.112.0/21
94.143.136.0/21
185.132.44.0/22
217.76.128.0/19
IPv6:
2001:ba0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:fa:4f:ae:04:69:c7:e7:dd:87:71:49:d8:4c:60:25:2d:95:
b3:6b:64:03:80:8e:6a:7f:fd:29:0e:62:17:38:77:4b:e9:2f:
c5:c3:7b:52:48:31:8a:3f:ac:c8:43:ea:93:d6:1a:e7:3d:06:
4e:47:32:00:65:8b:b6:21:d6:ea:ce:4c:a8:7c:a4:f5:fa:fe:
80:55:8c:3e:0b:2c:93:5a:0f:00:de:92:4d:26:37:d3:bb:d3:
70:4b:6e:0d:b7:ca:1f:b6:e9:18:d2:45:2d:34:e6:9a:83:d7:
64:3f:38:12:b4:d6:ff:81:51:e8:47:70:9e:e7:a4:3b:a0:24:
01:df:73:2b:64:69:b9:56:30:3e:8d:9e:f4:14:89:c9:14:62:
c2:83:3b:bc:b8:5e:96:a4:d9:85:57:cd:ac:56:6c:6f:31:2a:
99:2e:18:e3:2f:20:f7:96:1d:27:d3:87:e8:ea:e4:74:a2:26:
f1:cf:22:02:d2:aa:86:2e:d4:44:40:35:43:7c:2d:0b:7a:67:
c0:48:27:4a:d2:41:24:55:f7:d6:a5:6e:e8:c7:36:9c:36:f8:
ca:e9:54:8c:f2:3c:0d:5b:ff:14:ed:e0:e2:5c:cd:ba:7e:10:
ec:92:6a:25:96:70:59:98:4f:3e:3c:83:ab:80:12:46:3e:91:
6e:fd:3f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:16 2025 by rpki-client