Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/WePWXi4BVJvCbK70G_Bl8LvCy1A.roa
File: WePWXi4BVJvCbK70G_Bl8LvCy1A.roa (raw, json)
Hash identifier: KcxOlT86bPrqOuZYUTgExqyOPNUmMSnB0pr0K4kluRk=
Subject key identifier: 59:E3:D6:5E:2E:01:54:9B:C2:6C:AE:F4:1B:F0:65:F0:BB:C2:CB:50
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 0195D57CF0BE77609B19B6C499F4EFD007B2
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/WePWXi4BVJvCbK70G_Bl8LvCy1A.roa
Signing time: Thu 27 Mar 2025 02:44:49 +0000
ROA not before: Thu 27 Mar 2025 02:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202602
IP address blocks: 213.170.133.0/24 maxlen: 24
2a0c:b847:ffff::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d5:7c:f0:be:77:60:9b:19:b6:c4:99:f4:ef:d0:07:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Mar 27 02:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59e3d65e2e01549bc26caef41bf065f0bbc2cb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ea:25:54:51:d2:0d:13:48:6c:4f:90:77:5f:
98:cd:85:9f:e0:59:ab:6d:18:92:cf:ab:a8:25:b6:
08:74:95:40:51:33:bb:ea:e6:ef:a5:68:b0:6d:88:
48:57:5c:ea:c1:7c:6c:88:1d:02:9d:d1:11:f0:bd:
9f:98:89:34:68:99:ba:e2:1c:3c:e0:f0:06:3b:cb:
d2:07:14:38:d4:3a:58:4b:7b:26:b1:ba:16:41:05:
7e:e1:f8:d3:bb:83:0b:bc:47:03:59:2d:5c:8f:9b:
ad:bc:86:64:2a:b8:96:9d:ee:9d:dd:08:89:9c:7b:
66:13:3c:9b:99:ca:c7:56:0a:33:38:1b:b4:72:71:
d6:68:9b:1e:9b:3a:82:58:a3:1e:7c:42:16:3a:e5:
e3:36:f8:e8:ae:c3:bd:92:bf:af:f1:37:27:a0:55:
91:21:6a:3d:4a:06:ce:e5:c4:9f:d7:91:6a:7e:c7:
1f:c8:68:e2:48:5a:2c:4d:d6:01:e0:eb:ec:fa:04:
23:eb:4d:48:52:86:76:44:cf:31:6c:58:7e:fb:80:
66:1b:8d:b0:3f:13:2f:d7:d1:33:9e:dc:e5:0b:e1:
99:02:57:60:c0:b3:33:df:88:29:55:e7:96:e4:47:
07:3a:b5:8e:47:3d:05:7a:c8:31:bc:25:ae:24:97:
86:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E3:D6:5E:2E:01:54:9B:C2:6C:AE:F4:1B:F0:65:F0:BB:C2:CB:50
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/WePWXi4BVJvCbK70G_Bl8LvCy1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.170.133.0/24
IPv6:
2a0c:b847:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
07:fd:22:0f:b9:f1:ae:2c:10:5a:fe:3c:fa:1e:7c:e1:75:5d:
f0:fd:45:fe:f1:d1:c9:2e:6b:76:1d:00:e9:89:ac:d9:d0:43:
d0:c2:c9:71:fa:ea:48:a2:d7:ae:55:b7:5a:8d:7a:b1:33:82:
30:4f:5c:dd:64:eb:21:5a:ca:3a:ab:17:71:a4:4b:52:e6:5f:
62:44:f7:8e:69:b1:27:d9:2f:30:29:bc:c8:c2:72:55:69:bb:
7e:b9:f3:7d:15:e7:07:0f:4b:dd:96:6a:58:71:54:97:c6:e7:
0f:17:bc:84:a7:cd:26:66:66:ea:1e:4b:0b:aa:70:07:20:d9:
db:f4:b7:a4:32:85:ad:fd:36:17:0b:ed:43:94:2b:a0:9b:6a:
c3:5f:eb:39:1f:ea:c0:1b:a2:46:b3:72:f1:14:de:c4:a2:e4:
b4:2d:4e:2b:eb:c2:2f:f3:e3:f7:50:27:79:70:69:41:a1:be:
a4:dd:2e:9c:f1:bc:53:4b:31:74:39:7e:3d:61:43:22:f9:4d:
f7:b7:01:e4:f5:05:c8:35:94:d0:f3:57:b7:88:78:fe:bc:77:
cd:75:8c:0b:fa:f4:51:84:fd:64:36:5b:11:6d:b2:c2:6a:e3:
ef:ce:37:89:b3:a3:28:c8:03:bc:f6:b4:ce:5d:66:83:08:00:
5d:0c:9f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:14 2025 by rpki-client