Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/WyTF8eT-_-Vm_e-WXxB2PR0a00M.roa
File: WyTF8eT-_-Vm_e-WXxB2PR0a00M.roa (raw, json)
Hash identifier: mm5GAEyt7R+fFOvusgE8akIxgm4JMnS+6Ysgbb8PLQ4=
Subject key identifier: 5B:24:C5:F1:E4:FE:FF:E5:66:FD:EF:96:5F:10:76:3D:1D:1A:D3:43
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 0445F1FC
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/WyTF8eT-_-Vm_e-WXxB2PR0a00M.roa
Signing time: Sun 26 Jun 2022 08:18:21 +0000
ROA not before: Sun 26 Jun 2022 08:18:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 31.11.40.0/21 maxlen: 24
46.231.104.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
37.251.200.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
141.136.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71692796 (0x445f1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jun 26 08:18:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b24c5f1e4feffe566fdef965f10763d1d1ad343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:9f:02:65:ca:11:eb:d5:64:ea:66:c9:1d:
09:dc:b9:bd:d8:a7:d4:5c:52:5e:a5:0e:83:0c:8d:
97:61:0a:f9:15:8a:97:f7:7c:63:95:8e:ff:ca:73:
2b:ac:3c:35:f1:ac:86:64:f8:f0:1e:d2:52:4e:36:
6e:43:6c:20:bd:0a:9f:a7:4f:c0:f0:20:3f:5e:d0:
29:bb:9b:4c:83:54:4d:7b:1a:b4:73:19:dd:a3:ac:
c5:f2:8f:bb:ae:2d:e7:50:18:a2:44:c9:5e:61:76:
b7:9a:c1:6e:5e:5b:98:a2:58:10:8b:e6:0c:f1:c9:
5b:ab:06:1a:f1:b9:16:94:75:8a:5d:93:fc:45:17:
bc:df:d6:3a:79:17:b6:8b:0b:b8:e7:2d:53:a3:6b:
52:4c:34:bc:55:96:ff:19:9a:62:ee:88:18:3e:81:
d4:46:e0:7f:80:69:5b:f5:a0:a9:98:1f:eb:2c:5a:
94:64:55:fc:6b:81:2e:85:a8:24:78:18:bb:29:85:
d0:65:78:2f:4b:c3:30:f9:fa:de:f0:79:25:4c:4f:
13:31:a6:ae:28:db:96:06:ac:70:10:3c:60:5c:69:
82:38:26:32:ae:35:71:a6:98:24:ad:01:e4:10:d6:
dc:1f:69:92:43:06:d3:99:b2:55:6f:fb:1b:98:35:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:24:C5:F1:E4:FE:FF:E5:66:FD:EF:96:5F:10:76:3D:1D:1A:D3:43
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/WyTF8eT-_-Vm_e-WXxB2PR0a00M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
37.251.176.0/20
37.251.200.0/21
46.231.104.0/21
62.122.40.0/21
141.136.16.0/20
Signature Algorithm: sha256WithRSAEncryption
04:50:05:e1:3c:3b:7a:f3:1a:6b:15:c3:44:2f:ff:89:c0:0e:
94:7d:0c:c0:bf:49:c7:47:b2:65:d9:c6:c2:6e:3e:e5:aa:9b:
3c:58:a3:af:40:58:2c:52:09:69:b8:88:50:3d:ea:d0:a2:b1:
b4:1c:44:f6:3f:14:d5:48:eb:a1:f4:5e:d0:69:69:0b:4d:a0:
a1:b6:13:ed:82:12:51:c2:c9:36:7d:99:23:27:7f:61:2a:75:
fd:60:eb:a7:b6:ff:f4:46:53:06:11:69:f6:3a:62:76:f2:c6:
34:2f:22:d6:d6:d9:9c:d8:96:16:43:0f:44:77:5f:ec:15:ac:
0f:62:ae:a8:ff:af:44:c2:92:41:7b:78:b0:5d:82:57:90:0e:
c7:2f:a5:23:49:3d:1f:ca:cd:3f:55:d3:ed:a9:d2:99:3e:44:
55:37:71:c6:3c:11:e4:61:0b:c5:df:17:95:df:fe:66:be:69:
1c:c0:97:ad:76:d7:2d:c0:c2:a2:72:f9:92:b8:85:f7:d6:49:
bb:86:a1:90:79:2d:74:6b:c9:58:69:2f:9a:d1:a1:be:94:8b:
1c:30:04:6b:28:fd:4d:da:82:49:ac:4d:71:07:3d:89:02:d7:
e1:f0:36:06:29:68:ac:fb:1f:b5:2a:9c:9b:85:a0:59:63:93:
8e:80:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 07:02:10 2025 by rpki-client