Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/wYgSIaQwBTuITHU0HBRQkglSG0E.roa
File: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (raw, json)
Hash identifier: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=
Subject key identifier: C1:88:12:21:A4:30:05:3B:88:4C:75:34:1C:14:50:92:09:52:1B:41
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 019422FBF630C79B62B2A36EBD92F0E17F0B
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/wYgSIaQwBTuITHU0HBRQkglSG0E.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198510
IP address blocks: 62.112.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f6:30:c7:9b:62:b2:a3:6e:bd:92:f0:e1:7f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1881221a430053b884c75341c14509209521b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:45:13:6b:b3:59:80:cc:c1:2c:4b:81:95:
d6:57:12:c3:45:07:8f:fd:0b:f4:8a:1a:dc:cc:72:
b2:0b:01:34:fb:ee:29:df:09:0a:20:35:e6:37:1f:
a4:63:10:bb:26:61:20:91:67:af:58:c4:c2:f8:06:
a4:88:c4:37:da:58:5e:1d:71:4f:de:6e:fe:c2:e1:
6e:86:ec:be:58:9c:eb:7f:3e:9b:a0:3c:5e:cf:73:
2d:5f:6b:80:25:09:ae:4a:ad:36:cb:45:b7:ce:a3:
57:de:54:cb:bc:43:f0:92:a6:db:09:68:a6:c8:fb:
ab:af:be:f9:d2:ec:99:35:9e:86:7f:25:81:76:03:
ca:5b:8e:db:ea:83:51:7d:01:cd:45:5a:43:33:79:
28:95:8e:e7:87:fb:12:ae:7e:a7:50:4a:59:73:b9:
75:85:58:e9:28:be:ec:a4:b7:e2:9f:f4:ca:c5:bb:
85:82:c1:53:fb:67:be:08:ae:22:20:33:1f:71:b5:
89:45:54:41:01:9e:74:28:25:af:1a:01:75:ec:f3:
19:55:12:4e:54:49:eb:47:39:d6:53:35:55:37:59:
78:c1:21:b2:05:ac:6e:01:1f:f2:d1:ba:17:ba:77:
63:c9:db:a6:d5:8f:db:85:9b:69:75:1c:fb:3e:84:
56:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:12:21:A4:30:05:3B:88:4C:75:34:1C:14:50:92:09:52:1B:41
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/wYgSIaQwBTuITHU0HBRQkglSG0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.204.0/24
Signature Algorithm: sha256WithRSAEncryption
00:79:62:30:2e:47:e5:92:af:6f:84:24:40:c3:40:0c:97:73:
b1:5f:0b:8d:be:da:ce:38:ea:07:5d:4b:0e:8f:ec:ec:f6:bc:
14:4c:9f:b4:bc:b4:d8:1f:33:27:27:da:cf:15:fb:59:19:4c:
5a:51:85:d2:2a:b4:a0:7b:ef:88:05:14:0f:67:25:d3:cc:ee:
95:9c:cb:e9:4f:1d:16:a8:88:1b:2c:b1:24:bf:9c:84:a9:82:
cf:a5:b1:2f:a6:ec:db:48:2e:8f:7c:80:6f:3b:f3:93:3e:0c:
f4:42:f6:2e:2d:40:14:76:73:b6:95:3f:97:69:d9:2c:53:d3:
d6:25:3f:e2:cc:62:3b:bf:bc:6c:79:91:44:8c:03:f1:30:6e:
97:78:f9:cf:28:32:a1:51:fd:58:82:6b:24:3e:9d:83:06:e6:
cc:55:c7:22:1c:4e:43:7d:cc:b2:c2:c3:fe:70:e6:dd:af:ed:
5a:96:22:f0:c3:0d:12:f3:3e:23:c4:26:8e:3e:25:91:6e:89:
18:bf:c6:74:82:ed:12:21:01:1a:46:d2:e1:bd:bb:cd:3d:19:
36:e6:56:26:a4:93:d2:e6:37:c0:66:16:52:76:04:da:cb:03:
c1:4e:1f:5c:1f:cd:d8:31:b7:59:5c:4b:f4:8d:34:be:d1:f1:
4c:24:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:36:13 2025 by rpki-client