Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Wi_PdWVDjGTQg2__dbDBSDlx7xc.roa
File: Wi_PdWVDjGTQg2__dbDBSDlx7xc.roa (raw, json)
Hash identifier: rqvXt2CssSw6L3PQ9/nqjpjhgnLM7ZB7CTFTgI4c5Qs=
Subject key identifier: 5A:2F:CF:75:65:43:8C:64:D0:83:6F:FF:75:B0:C1:48:39:71:EF:17
Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial: 01942143C4487EA10589C7C1A774076000E3
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Wi_PdWVDjGTQg2__dbDBSDlx7xc.roa
Signing time: Wed 01 Jan 2025 09:47:56 +0000
ROA not before: Wed 01 Jan 2025 09:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 31.210.62.0/23 maxlen: 24
78.135.112.0/24 maxlen: 24
95.214.72.0/22 maxlen: 22
212.68.47.0/24 maxlen: 24
2a09:da80::/29 maxlen: 29
2a09:da80::/32 maxlen: 48
2a09:da81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c4:48:7e:a1:05:89:c7:c1:a7:74:07:60:00:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a2fcf7565438c64d0836fff75b0c1483971ef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:51:5f:2a:a3:84:51:24:90:75:11:22:a8:
32:29:81:63:da:f2:d4:8f:e9:8c:52:43:52:f5:c3:
bf:3c:54:be:1c:35:bd:bc:7f:0b:8e:c5:d0:c5:93:
e7:50:65:ab:3f:7c:12:b2:ca:88:fa:f6:de:dd:e1:
c6:f9:5d:f7:8b:33:00:1f:2e:69:4e:04:7e:1c:23:
b8:4c:56:60:ee:5b:cb:a8:e0:b0:aa:0c:22:d9:f1:
fe:9b:32:24:8b:03:28:04:d0:8d:53:be:6d:e3:a8:
a4:57:16:32:82:74:16:37:f2:3c:02:ea:c6:b1:ec:
f7:49:c6:50:00:cc:d0:87:95:11:36:db:54:17:69:
9a:f4:fb:ad:fd:2e:69:2e:2a:fb:86:ac:c0:78:63:
af:3c:b4:ff:1a:ea:a9:46:eb:45:06:4e:5d:f7:65:
bd:ef:c4:0d:dc:c1:3c:76:f0:36:59:f0:47:74:68:
70:7e:81:e4:6b:9f:35:d3:a1:6a:21:9b:6a:84:a3:
eb:cb:0e:3d:0f:80:7a:b2:23:35:52:df:8f:51:4e:
e7:97:bc:a6:27:80:03:25:17:21:18:63:4b:e2:4b:
69:7a:a7:66:06:a9:eb:29:35:8d:86:0a:cb:dd:62:
0e:ec:b4:9a:84:8f:7c:09:75:93:7d:dc:18:6d:ad:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2F:CF:75:65:43:8C:64:D0:83:6F:FF:75:B0:C1:48:39:71:EF:17
X509v3 Authority Key Identifier:
keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/Wi_PdWVDjGTQg2__dbDBSDlx7xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.62.0/23
78.135.112.0/24
95.214.72.0/22
212.68.47.0/24
IPv6:
2a09:da80::/29
Signature Algorithm: sha256WithRSAEncryption
8d:05:d3:37:44:be:37:6d:05:80:a2:15:a2:cb:12:09:1c:37:
10:bf:d7:52:ef:3a:26:d4:b5:f8:17:d9:f8:1f:e9:9f:27:f1:
32:30:e3:37:65:3f:06:0a:ac:83:78:b4:ff:86:c3:93:da:09:
4a:02:28:90:fa:d2:1a:89:f2:da:61:aa:39:a0:8c:93:43:b7:
8a:00:9b:af:0d:a2:b2:75:47:a2:29:c2:47:3a:ba:b4:d2:93:
a3:03:9c:84:17:c7:b1:81:3b:71:99:79:66:30:94:7a:3e:5d:
99:87:e5:41:ab:5d:23:ae:5c:4c:00:d9:28:f8:9d:d4:8d:d0:
72:dc:ff:b0:60:de:cf:05:5a:27:9a:1b:38:e4:7f:28:cb:66:
12:df:9d:6f:22:e0:8f:cd:eb:22:13:1d:90:88:3f:f3:e7:74:
59:c4:db:41:8f:cf:00:db:36:0b:64:2d:cc:14:25:b0:a1:db:
11:4c:e7:91:a1:f4:52:e0:af:93:bb:31:9d:4b:a6:33:8e:b4:
d2:ab:7f:46:31:9e:b8:2c:21:69:f4:26:2e:4a:b6:3e:54:08:
5d:a6:b9:55:e8:43:51:d4:a3:0b:50:2a:27:7a:19:17:9f:37:
cc:19:a1:c2:8e:20:ea:2c:79:d2:2f:17:c7:f9:a2:eb:09:77:
6e:d6:37:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:27 2025 by rpki-client