Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/W6_yDJ2wdzgrjPtWNyvBRPzUOGA.roa
File: W6_yDJ2wdzgrjPtWNyvBRPzUOGA.roa (raw, json)
Hash identifier: QQlwZOhThfJmaraqCwY6uwuNqm1i5n4HX5nV6idck0I=
Subject key identifier: 5B:AF:F2:0C:9D:B0:77:38:2B:8C:FB:56:37:2B:C1:44:FC:D4:38:60
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B235D9CEDC4C1CA38F4732E07DDD61
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/W6_yDJ2wdzgrjPtWNyvBRPzUOGA.roa
Signing time: Wed 01 Jan 2025 11:48:34 +0000
ROA not before: Wed 01 Jan 2025 11:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35409
IP address blocks: 45.8.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:35:d9:ce:dc:4c:1c:a3:8f:47:32:e0:7d:dd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5baff20c9db077382b8cfb56372bc144fcd43860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:db:2d:52:f5:09:b3:f5:28:1d:c6:1c:bb:30:
a1:bf:db:48:7e:8f:7e:42:69:e7:bc:4e:b4:8b:c8:
f2:61:9c:4c:f2:51:06:6e:80:08:fc:9e:87:ea:6a:
fb:4b:b9:d4:26:74:98:fa:17:4f:3c:2b:16:ab:f2:
d0:ce:20:2c:43:d8:d6:21:66:fe:88:aa:13:b8:26:
5e:88:83:89:f7:04:19:ef:25:d7:13:cd:c5:c0:05:
2d:a9:26:e0:ce:c9:dc:15:1a:f4:62:d0:10:f0:87:
06:ef:d8:23:6f:5f:08:83:f0:64:5b:41:5e:2e:20:
64:a3:dd:65:9f:b9:6a:5a:83:21:67:ce:cd:82:b7:
f7:60:55:c8:87:6f:25:4d:06:13:0e:77:2e:3c:f0:
90:74:20:b2:e2:f8:fd:60:f7:4a:18:10:e0:d6:25:
5a:d8:4c:d3:5c:0f:b9:17:83:1b:ae:17:9a:6f:d6:
6c:9d:37:d1:91:ac:bd:f0:db:20:92:0c:88:cf:f2:
3f:1b:f2:30:a4:ae:da:32:62:d4:65:7c:20:e1:5d:
21:86:9f:12:b1:dd:ae:3b:ec:ae:bc:ae:68:a7:b3:
da:4c:7d:85:da:9b:16:9d:28:19:3e:2a:43:d5:9d:
f3:fb:df:58:f7:71:f4:6e:48:8f:19:95:6d:28:87:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AF:F2:0C:9D:B0:77:38:2B:8C:FB:56:37:2B:C1:44:FC:D4:38:60
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/W6_yDJ2wdzgrjPtWNyvBRPzUOGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4c:a8:00:f5:a7:e6:3f:2a:b9:73:08:ab:44:46:b1:22:5e:
c0:c0:47:35:e0:bd:e4:55:5c:4d:5c:11:06:12:60:ad:e7:37:
28:c2:96:44:cc:ee:d2:74:f6:fe:ad:7e:a3:a9:77:5f:3b:d8:
58:0e:5c:de:5e:d8:78:ce:9c:7a:cf:98:df:45:be:47:14:5b:
5e:ee:42:9e:5c:7a:2a:25:b5:dc:bd:72:f7:af:7c:89:9b:7f:
7e:94:b6:b6:e9:25:1b:1a:50:8c:e1:97:9c:4e:6d:ed:13:15:
e6:e1:20:c3:12:58:2d:68:b0:7e:78:41:76:6f:d2:0c:45:31:
1e:4e:de:37:18:94:88:6e:22:7b:a0:1d:10:b5:57:0a:e6:c3:
5d:4e:67:56:24:e1:fd:96:f6:2e:18:12:68:ba:ff:b3:2c:98:
f7:73:0e:14:50:21:7a:2c:4c:0e:13:8b:91:5d:18:41:9d:4e:
5c:7b:6e:40:94:6c:fc:7e:d2:fb:0b:37:54:fd:cc:f3:85:ee:
c0:6f:03:07:5e:07:9c:49:50:66:9b:cc:36:11:9b:7a:94:96:
64:76:e7:ce:3a:27:4b:67:b9:99:88:d6:2f:8b:2b:bf:a3:03:
fe:b0:86:a2:e5:e1:f0:6d:b7:ad:e2:44:77:2e:7d:7d:6f:a0:
a0:17:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:36:51 2025 by rpki-client