Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/WTVR86vnYs7BPStSbSDyoGuvJtI.roa
File: WTVR86vnYs7BPStSbSDyoGuvJtI.roa (raw, json)
Hash identifier: +qhM9WKUBA3B9KCtQwGX3HjXjyrEypbbBCjk+fK/rjY=
Subject key identifier: 59:35:51:F3:AB:E7:62:CE:C1:3D:2B:52:6D:20:F2:A0:6B:AF:26:D2
Certificate issuer: /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial: 0194244537E463F2F66611DDD5AE8E594441
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/WTVR86vnYs7BPStSbSDyoGuvJtI.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56787
IP address blocks: 31.223.176.0/24 maxlen: 24
31.223.177.0/24 maxlen: 24
31.223.178.0/24 maxlen: 24
31.223.179.0/24 maxlen: 24
31.223.180.0/24 maxlen: 24
31.223.181.0/24 maxlen: 24
31.223.182.0/24 maxlen: 24
31.223.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:37:e4:63:f2:f6:66:11:dd:d5:ae:8e:59:44:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=593551f3abe762cec13d2b526d20f2a06baf26d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:33:3f:81:7f:ef:88:2a:c9:27:59:3c:02:
dc:74:ce:7b:2f:d5:d3:eb:6f:6d:4a:12:b3:c9:a2:
84:47:9a:4f:37:26:8c:cd:3b:3a:91:75:6e:3e:1b:
73:b9:3a:5b:a8:d1:b9:62:f4:56:6f:49:f1:98:f6:
03:9c:97:1d:fa:ec:e7:d9:48:44:ee:ed:2b:2d:c4:
47:17:c8:0e:b2:a7:1e:ec:26:db:27:ec:22:f4:72:
7c:76:eb:2a:23:78:5f:74:4c:2f:13:4e:85:65:55:
6a:e9:95:ae:3a:2d:68:00:36:e3:be:6c:1b:bc:1b:
c0:98:5b:77:dd:bf:1b:ed:5d:87:8c:9f:e8:53:9d:
85:37:37:02:d7:f3:70:9d:19:b6:e7:7b:0c:62:a7:
a2:6c:1e:f7:e7:fc:f2:9f:e3:c0:6d:79:7a:c6:f9:
e6:1c:ba:a2:98:25:8e:68:a9:8c:8f:9a:34:62:d7:
4d:fc:2e:ac:06:17:51:f1:58:70:64:f2:bf:b3:26:
8a:25:fe:5f:42:d0:a0:77:de:2f:2c:5f:24:eb:21:
fc:20:f0:52:05:b1:27:41:99:1a:fc:1f:98:e9:5c:
bf:f0:cf:2c:b2:4e:c5:f4:41:24:c1:f9:4d:b4:4b:
b5:f2:bb:9c:3d:f6:06:9e:c3:7e:f7:a0:72:60:78:
08:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:51:F3:AB:E7:62:CE:C1:3D:2B:52:6D:20:F2:A0:6B:AF:26:D2
X509v3 Authority Key Identifier:
keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/WTVR86vnYs7BPStSbSDyoGuvJtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.223.176.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:4a:0d:0d:40:44:b0:80:8a:53:63:05:71:b7:1e:a9:c7:0e:
08:74:25:12:76:57:b2:99:89:e4:19:91:97:eb:13:e2:07:89:
ce:5f:4c:9a:19:a3:1c:71:9e:95:1a:04:76:c0:85:4e:84:13:
f1:85:80:80:1f:a1:3c:43:0e:3f:9a:88:5e:08:86:d7:0c:f7:
98:0d:f9:02:82:57:c4:46:ab:e4:89:5b:7d:11:b5:10:fc:ca:
d2:c5:85:af:b2:ab:d8:8a:d4:2e:2d:c0:49:57:33:f9:72:03:
51:f9:b8:66:77:a3:c1:47:c7:fd:04:b2:9f:de:f1:d5:ab:54:
d3:64:8d:68:be:a5:cd:b9:11:45:b0:fa:90:81:8f:84:d1:72:
45:a0:59:1b:60:a4:e5:7a:68:0a:4f:1e:7f:82:c7:55:08:52:
d4:cd:1a:c7:6f:58:05:6f:58:1c:55:ab:8b:38:68:38:93:57:
34:5d:18:68:3d:8a:a4:99:71:8e:61:ff:02:03:76:7b:ab:59:
85:16:20:5c:48:a9:5e:2e:20:8d:07:84:48:3d:41:bd:47:c9:
f2:34:b1:c7:aa:a7:1e:ec:6f:c3:40:9b:b9:21:5d:ea:63:01:
13:d6:ae:83:da:d6:55:8a:3f:f1:88:61:c0:ca:3b:5d:af:d4:
56:39:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:22 2025 by rpki-client