Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/WNGpyE-QlAuojjykEd9ncI4Wczg.roa
File: WNGpyE-QlAuojjykEd9ncI4Wczg.roa (raw, json)
Hash identifier: z5yH+peKZd8an2K9lT7Q5vFRDAL1X94yp8XjD73BIP8=
Subject key identifier: 58:D1:A9:C8:4F:90:94:0B:A8:8E:3C:A4:11:DF:67:70:8E:16:73:38
Certificate issuer: /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial: 019353B28C401A9881B7870A513134813DA7
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/WNGpyE-QlAuojjykEd9ncI4Wczg.roa
Signing time: Fri 22 Nov 2024 11:47:10 +0000
ROA not before: Fri 22 Nov 2024 11:47:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 62.171.228.0/24 maxlen: 24
62.171.229.0/24 maxlen: 24
62.171.231.0/24 maxlen: 24
62.171.248.0/24 maxlen: 24
62.171.251.0/24 maxlen: 24
217.177.32.0/24 maxlen: 24
217.177.35.0/24 maxlen: 24
217.180.12.0/24 maxlen: 24
217.180.13.0/24 maxlen: 24
217.180.14.0/24 maxlen: 24
217.180.16.0/24 maxlen: 24
217.180.17.0/24 maxlen: 24
217.180.18.0/24 maxlen: 24
217.180.19.0/24 maxlen: 24
217.180.20.0/24 maxlen: 24
217.180.38.0/24 maxlen: 24
217.180.45.0/24 maxlen: 24
217.180.58.0/24 maxlen: 24
217.180.59.0/24 maxlen: 24
217.180.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:b2:8c:40:1a:98:81:b7:87:0a:51:31:34:81:3d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Validity
Not Before: Nov 22 11:47:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58d1a9c84f90940ba88e3ca411df67708e167338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:f2:2a:a8:dd:da:b5:1e:69:44:cc:0c:3e:
45:97:97:80:57:a1:b5:70:39:be:1f:6e:f7:b0:90:
b3:72:ea:55:8b:32:4f:5b:f8:7c:a4:6b:88:99:9f:
2e:46:70:97:c6:bf:30:bb:03:b6:94:ae:e0:df:3d:
3b:29:ba:b7:46:67:7c:8f:b2:5d:8f:0f:30:7e:90:
72:5f:90:ec:56:51:aa:c7:b3:13:b3:28:38:00:17:
e5:f7:aa:83:74:46:d6:2f:69:a6:1b:7a:d9:63:f1:
94:dc:a6:bb:4d:03:68:9a:5c:53:02:e3:49:a7:72:
94:78:b0:d5:fe:ed:20:81:1c:17:c2:7c:23:6a:19:
56:b8:33:5a:01:7e:bd:4e:9d:4a:c3:39:bd:a9:f4:
a6:39:2a:13:24:9e:79:ee:38:a8:04:91:ed:c7:10:
45:63:9d:13:9b:d7:16:71:67:33:b2:6e:73:34:fd:
76:7a:84:8c:27:12:d4:74:da:a7:89:d2:75:5c:40:
32:b9:bf:bd:70:4d:aa:25:84:5e:96:b2:08:19:4b:
df:4c:c3:08:b2:38:61:29:83:4e:33:35:ed:9f:ff:
6e:08:d2:53:49:e9:2c:4f:21:c4:6f:3f:0a:58:be:
ae:25:7a:bb:83:5a:a5:9b:e6:c3:04:bd:04:ef:12:
8e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:A9:C8:4F:90:94:0B:A8:8E:3C:A4:11:DF:67:70:8E:16:73:38
X509v3 Authority Key Identifier:
keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/WNGpyE-QlAuojjykEd9ncI4Wczg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.171.228.0/23
62.171.231.0/24
62.171.248.0/24
62.171.251.0/24
217.177.32.0/24
217.177.35.0/24
217.180.12.0-217.180.14.255
217.180.16.0-217.180.20.255
217.180.38.0/24
217.180.45.0/24
217.180.58.0/23
217.180.61.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:f1:b1:f6:db:be:69:e4:71:59:74:79:87:dc:b7:6d:2f:9e:
44:e7:69:72:08:6b:5b:e7:07:0e:36:13:ba:2a:24:2a:81:b2:
28:da:b1:1d:1b:6b:28:d0:79:c1:31:82:bd:dd:13:fd:33:9c:
88:e8:76:a3:12:2e:d5:1a:cd:a4:f1:14:e9:48:ad:be:78:2b:
66:ff:31:59:27:7c:8b:a1:b0:35:43:2e:bb:b0:01:0b:61:41:
19:46:6c:ee:8f:9a:0c:96:ba:9b:ca:4e:41:de:04:d3:0d:f3:
4e:ca:02:dc:b5:29:2f:4a:11:52:33:54:73:16:5e:0a:78:55:
ce:92:e9:39:2f:3c:81:10:3b:3d:36:9d:eb:8f:b1:87:f4:d1:
81:c2:14:20:c7:fe:81:d5:81:ba:a9:51:e2:2b:0a:10:03:70:
8d:50:7f:21:99:e3:0b:ee:d6:e4:44:f5:d2:9b:c6:85:1e:b4:
a8:08:27:3e:6e:4c:a2:bd:3a:43:a7:97:5d:77:19:24:22:71:
6b:6a:71:ca:04:58:ad:82:b1:6b:23:eb:8d:7e:c7:8d:32:da:
18:a8:85:ae:83:25:e8:50:f3:3a:08:89:ef:4f:ee:31:fe:fd:
c0:d5:18:48:6a:48:be:2a:1d:70:69:ba:d7:97:db:1e:b3:86:
dd:17:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:35 2025 by rpki-client