Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WP02YgRSYpHODBkoxQfpjXzD_DQ.roa
File: WP02YgRSYpHODBkoxQfpjXzD_DQ.roa (raw, json)
Hash identifier: KcxyA0WEgg5frvF8DNiL8pSYUPuuv7jO36XG5grRQbA=
Subject key identifier: 58:FD:36:62:04:52:62:91:CE:0C:19:28:C5:07:E9:8D:7C:C3:FC:34
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F2977A824058BD50E18DE1082BC62
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WP02YgRSYpHODBkoxQfpjXzD_DQ.roa
Signing time: Thu 02 Jan 2025 05:48:46 +0000
ROA not before: Thu 02 Jan 2025 05:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214382
IP address blocks: 5.180.104.0/24 maxlen: 24
45.141.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:29:77:a8:24:05:8b:d5:0e:18:de:10:82:bc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58fd366204526291ce0c1928c507e98d7cc3fc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f2:35:e8:99:99:b7:41:6d:bf:29:e4:a4:90:
cc:b2:3e:1e:6b:51:b7:bf:e7:fe:95:d3:94:cf:c0:
8b:a0:de:f4:c0:42:e4:bc:2a:7e:33:99:b0:e5:79:
00:8a:4e:dd:46:57:6a:d2:2a:19:00:5a:b4:f3:f5:
64:fe:1b:66:34:4c:4d:6e:af:60:1f:2a:5b:70:31:
d0:77:f6:ba:8c:9b:78:c5:a1:fa:1f:fb:c4:cf:c3:
bf:fb:da:f1:d2:e4:93:b2:34:d8:6d:3b:34:18:b3:
0d:61:e2:d8:9a:8c:c3:a5:93:5a:fc:78:3a:0b:cf:
3e:e9:8d:ad:70:80:46:79:96:84:83:f7:1f:63:b6:
b3:e3:84:92:c0:85:37:f0:9d:55:94:1e:27:e2:89:
78:0a:b5:7d:1e:9c:47:5c:4d:ec:e8:7f:45:93:de:
91:cf:c6:e3:26:3c:b4:ac:87:c4:3c:7c:13:d3:65:
9b:d3:a5:c0:87:4f:78:23:eb:96:96:5b:02:5f:9d:
76:00:0f:ec:b3:ce:58:71:04:57:11:14:9e:e1:70:
e5:ae:38:af:d2:70:43:5c:ab:e9:5b:fe:e8:07:1c:
53:27:e5:ef:be:3e:a8:bf:ae:69:83:c3:89:1d:6b:
93:20:a2:37:93:84:dd:0c:36:53:26:db:d7:9a:c3:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FD:36:62:04:52:62:91:CE:0C:19:28:C5:07:E9:8D:7C:C3:FC:34
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/WP02YgRSYpHODBkoxQfpjXzD_DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.104.0/24
45.141.150.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5f:87:26:57:97:c2:89:3c:40:2d:de:0c:1c:ce:7d:23:78:
73:bf:dd:13:34:53:64:78:bc:be:63:56:72:73:e1:50:14:80:
b9:98:ba:ed:15:af:9c:eb:56:04:4a:fb:68:71:3f:1b:8d:66:
06:b4:17:6a:64:3d:99:0d:ae:eb:df:dd:a7:6a:f0:87:e0:1c:
7c:4d:e9:e4:1e:e1:ce:af:15:2f:56:26:df:12:c9:73:2f:d6:
d5:68:f8:24:6b:12:df:29:9c:02:d4:73:6e:c8:a4:da:e9:41:
2e:8f:a1:5a:ec:b9:13:e9:ac:39:90:9a:7c:64:88:f4:0e:eb:
2a:00:37:ab:8b:3d:2c:d7:4f:e2:e5:78:45:fb:a0:16:33:ab:
63:e9:92:7a:44:a3:ed:7a:82:ba:a0:54:b1:37:d5:c0:52:22:
d6:c7:ef:e0:c9:ae:77:be:90:4e:9f:d4:eb:d2:1c:08:13:8e:
51:6e:fe:4a:29:fd:6d:92:30:8c:21:7c:b1:13:67:3a:e7:e2:
ec:f1:d2:43:dd:83:38:a8:70:6d:aa:53:d5:f1:45:1b:87:9d:
1f:2d:f1:76:54:1c:a4:77:0f:8f:8a:04:c9:a9:e9:24:2e:77:
c7:29:97:d0:13:10:4d:ea:30:19:3f:3f:26:75:3b:01:a3:19:
e5:f9:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:42 2025 by rpki-client