Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/WBc6H2ObtoRrejzYoy5PkuYuSwE.roa
File: WBc6H2ObtoRrejzYoy5PkuYuSwE.roa (raw, json)
Hash identifier: kGmZgsUznusKmIK9TAqYvs3VnWH1qn0IvogBsEomLxQ=
Subject key identifier: 58:17:3A:1F:63:9B:B6:84:6B:7A:3C:D8:A3:2E:4F:92:E6:2E:4B:01
Certificate issuer: /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial: 01856EC1F69773B5A2B88BF26E5E81671FD4
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/WBc6H2ObtoRrejzYoy5PkuYuSwE.roa
Signing time: Sun 01 Jan 2023 19:14:43 +0000
ROA not before: Sun 01 Jan 2023 19:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328867
IP address blocks: 194.62.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:f6:97:73:b5:a2:b8:8b:f2:6e:5e:81:67:1f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Validity
Not Before: Jan 1 19:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58173a1f639bb6846b7a3cd8a32e4f92e62e4b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:6c:bd:d7:a3:d8:d9:99:c1:26:bf:9d:de:
55:dc:af:a9:3b:a0:2d:65:0b:89:c4:f2:4d:16:9e:
47:8a:29:6b:a4:c0:4c:b8:6b:a1:89:96:d0:47:a3:
af:4c:ea:4f:ea:4f:cc:b0:b9:94:18:0f:99:0d:e7:
e4:41:07:52:34:1b:d4:9f:c1:3d:d9:3a:d6:e9:bb:
b2:49:0c:56:5c:54:48:25:f5:52:22:fb:07:e6:f3:
6b:cb:02:1c:66:a9:3e:ea:c5:f2:27:44:9f:ac:79:
a9:e7:5b:4b:ed:88:1f:4c:3b:da:7e:b4:b5:f3:99:
3e:18:c4:e9:2d:f4:64:a3:e1:12:a4:94:46:88:cf:
c6:e9:99:c5:7b:32:19:ca:ea:46:bd:21:58:56:09:
db:01:b7:ca:20:4c:92:89:ef:1f:6c:c5:bf:81:eb:
70:8d:84:f0:bf:0d:00:ca:3c:af:d9:6b:c7:e4:8f:
81:65:e0:18:02:d0:2a:89:ea:5a:3b:18:cc:69:14:
3d:7c:89:b4:2f:d0:78:6a:c7:f0:64:72:fa:af:5d:
d8:f5:0f:3d:0b:cc:f8:44:25:94:91:ec:4b:34:30:
3e:e5:f6:6b:fd:f7:c6:e0:a9:f5:26:64:1f:64:83:
d9:f2:87:65:ac:c0:35:65:6b:72:3b:89:0f:b6:b2:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:17:3A:1F:63:9B:B6:84:6B:7A:3C:D8:A3:2E:4F:92:E6:2E:4B:01
X509v3 Authority Key Identifier:
keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/WBc6H2ObtoRrejzYoy5PkuYuSwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.214.0/24
Signature Algorithm: sha256WithRSAEncryption
47:33:5c:b3:15:25:6b:29:b0:3e:a4:fc:26:06:8f:e1:0d:62:
d3:ec:80:81:c2:49:62:8f:d9:a4:5d:13:10:7e:cf:6b:0f:53:
32:b0:e4:7d:83:02:7d:ff:36:60:df:e8:6a:a6:70:78:a9:c2:
33:61:50:3e:de:90:93:d8:41:a4:35:09:a6:cc:26:43:77:aa:
06:c0:f1:c0:ec:ff:b4:ae:a3:53:8c:ac:8c:a2:fa:67:83:f4:
db:a5:bf:6e:ed:cb:fb:6d:e8:72:44:09:67:b4:ac:b2:31:da:
04:9a:f0:f5:f7:36:73:9a:c2:e5:b0:32:7c:7b:bc:39:58:6a:
49:d5:12:b7:83:7c:b7:ff:e1:47:69:c2:a4:14:20:38:c9:d3:
33:a7:ea:3a:58:ee:f6:e1:b4:ff:be:59:fc:69:81:3b:5b:b3:
12:8e:80:32:58:f1:a3:1b:eb:88:85:f1:3f:7d:dd:76:31:d1:
c9:83:7b:ad:74:f2:fb:71:70:18:ec:57:6f:fd:f5:25:31:06:
93:19:12:fe:3a:39:88:23:7a:c9:83:ce:67:2c:90:1e:b2:19:
a5:ba:f6:cd:fb:bd:6f:f6:c1:a9:ce:4c:b2:c2:a8:26:56:eb:
92:98:84:72:b4:7d:5f:61:10:49:c0:23:ae:8c:2f:32:9b:e9:
0f:22:82:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:09:39 2025 by rpki-client