Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WCK5_Nh3yOEIIW6IymDE2A3C-yc.roa
File: WCK5_Nh3yOEIIW6IymDE2A3C-yc.roa (raw, json)
Hash identifier: MiJhjYwa5PonQBx6xus6QE0kWxXRx63L9b4WrHqxnqU=
Subject key identifier: 58:22:B9:FC:D8:77:C8:E1:08:21:6E:88:CA:60:C4:D8:0D:C2:FB:27
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0194AF03C1937D666B66994FFC8662D41526
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WCK5_Nh3yOEIIW6IymDE2A3C-yc.roa
Signing time: Tue 28 Jan 2025 22:24:06 +0000
ROA not before: Tue 28 Jan 2025 22:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212703
IP address blocks: 45.8.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:af:03:c1:93:7d:66:6b:66:99:4f:fc:86:62:d4:15:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 28 22:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5822b9fcd877c8e108216e88ca60c4d80dc2fb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:81:d1:ad:8a:93:ac:d3:59:2c:73:f9:2e:
29:07:9b:47:31:ee:32:1d:93:7b:f1:ab:32:6e:6e:
64:d0:6a:5b:fd:f4:aa:1c:a4:8e:06:f1:b2:cd:f3:
d1:2d:78:db:69:a3:5d:fd:0d:44:d2:c5:9c:7d:0d:
9d:85:d0:ed:48:fa:80:a7:9e:aa:bf:e4:1d:8f:69:
73:4f:38:9d:4f:7a:e8:bf:b9:d2:c3:9f:f3:0a:e6:
16:5a:e3:70:55:af:65:ca:e1:70:aa:f8:d2:c9:a2:
ee:e1:bd:6f:01:56:8b:b6:e1:ed:13:aa:e9:f1:46:
55:a9:68:47:00:39:84:f9:71:98:7d:fb:70:06:c9:
fd:57:32:c3:db:d8:11:49:02:44:81:83:3d:a4:1b:
d7:ec:49:39:dc:a2:ad:70:96:c5:57:52:d6:53:47:
c3:93:8d:e3:d7:38:04:bf:1e:2a:58:25:1c:8f:08:
bb:1f:89:61:93:fb:28:62:31:6a:b5:69:b9:72:f9:
da:bb:25:f3:63:fe:8e:74:b4:2b:61:03:af:a6:26:
00:fe:a3:b1:e0:97:0f:dc:f6:e3:b1:9a:15:f1:90:
9a:79:f4:d5:68:18:5e:b7:58:50:94:90:40:81:8e:
c9:c9:43:ca:56:fe:8e:92:60:38:63:24:79:72:b8:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:22:B9:FC:D8:77:C8:E1:08:21:6E:88:CA:60:C4:D8:0D:C2:FB:27
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/WCK5_Nh3yOEIIW6IymDE2A3C-yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.203.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5c:1b:de:08:73:ae:62:94:7c:72:e7:48:6a:5d:6b:b3:d0:
81:f5:3d:61:6f:99:88:5f:f9:01:1e:7b:a3:a1:c4:3e:7e:9d:
c9:82:dc:f5:33:43:0a:54:88:e7:7e:dc:8b:e5:79:33:fd:05:
7b:b4:f6:28:6d:c8:33:85:e8:2c:dd:13:f0:fb:2d:4b:4e:62:
f3:b6:d6:7a:0f:a4:db:a0:f8:72:42:d8:c7:ac:7d:44:e2:0b:
8d:a8:69:ca:f7:67:66:54:42:a7:ca:47:10:4b:f1:fb:8e:9e:
45:d1:5b:ba:11:83:da:5d:3f:97:35:8d:41:58:b7:26:41:45:
9b:7a:11:55:46:da:1f:cc:e1:35:f4:e6:c3:c9:9a:0b:d4:1a:
f1:3d:93:23:14:58:3b:2e:1d:74:24:2d:86:e1:26:c3:55:5d:
9f:04:29:23:3c:f9:84:30:66:f0:3a:5b:d6:e2:e1:87:1e:ee:
47:a9:ad:9e:91:13:78:f1:af:c3:08:cd:b2:76:19:9f:f7:23:
84:7d:a7:f8:61:ad:b8:80:88:03:90:c7:ce:31:e3:36:3a:e1:
6d:d9:8f:bc:a6:40:ba:dc:73:79:3b:1b:d9:6f:2c:a8:32:53:
35:0f:e1:d0:93:46:58:8b:64:c4:f7:fd:90:fe:8d:87:48:0b:
8b:0f:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:01:05 2025 by rpki-client