Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wZjhE_pr55WbVQ7EqMILnUgk6q8.roa
File: wZjhE_pr55WbVQ7EqMILnUgk6q8.roa (raw, json)
Hash identifier: E6eN/ifoYlTOJWQpXkVLq+LL8JRVZ8agV15uv1I+xK0=
Subject key identifier: C1:98:E1:13:FA:6B:E7:95:9B:55:0E:C4:A8:C2:0B:9D:48:24:EA:AF
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0194AE321A6458393250D805F5A0602B7E83
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wZjhE_pr55WbVQ7EqMILnUgk6q8.roa
Signing time: Tue 28 Jan 2025 18:35:06 +0000
ROA not before: Tue 28 Jan 2025 18:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.43.147.0/24 maxlen: 24
45.43.152.0/24 maxlen: 24
64.137.110.0/23 maxlen: 23
104.222.160.0/24 maxlen: 24
104.222.163.0/24 maxlen: 24
104.222.164.0/24 maxlen: 24
104.222.165.0/24 maxlen: 24
104.222.166.0/24 maxlen: 24
104.222.191.0/24 maxlen: 24
104.233.56.0/24 maxlen: 24
104.233.58.0/24 maxlen: 24
104.238.24.0/24 maxlen: 24
104.238.28.0/24 maxlen: 24
104.239.47.0/24 maxlen: 24
104.239.66.0/24 maxlen: 24
104.239.74.0/24 maxlen: 24
104.239.79.0/24 maxlen: 24
104.239.83.0/24 maxlen: 24
104.239.89.0/24 maxlen: 24
104.239.100.0/24 maxlen: 24
104.239.102.0/24 maxlen: 24
104.239.109.0/24 maxlen: 24
104.239.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ae:32:1a:64:58:39:32:50:d8:05:f5:a0:60:2b:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 28 18:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c198e113fa6be7959b550ec4a8c20b9d4824eaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:d5:31:bf:72:8f:26:49:c4:7f:e2:a0:63:
70:e4:1c:54:3c:61:18:c7:80:a1:65:60:35:eb:e2:
35:8e:f0:6e:9c:63:31:50:02:4e:5c:18:e2:c6:4e:
7e:ab:62:9e:f4:f3:75:cb:b0:52:6f:e9:0f:6c:b5:
25:53:3c:95:12:a4:51:66:91:3a:66:66:c9:bf:1d:
e2:72:8b:23:cd:c7:c4:28:a6:f3:d9:78:d7:a3:16:
83:b9:42:7f:de:cf:60:91:a5:16:43:d8:13:68:f6:
7d:c6:fd:c2:00:a3:dc:75:7e:2a:8f:3d:25:b9:ec:
68:9e:cb:6b:91:6d:0b:a2:f9:ce:e5:93:48:90:3c:
d6:75:14:e8:bb:f0:f7:7c:c4:26:d9:41:7c:ba:f7:
56:e4:18:4d:0d:af:be:b1:01:d0:1d:26:5e:b9:0b:
f3:96:c9:36:bf:ab:2f:8f:5c:43:bc:2d:4f:ed:24:
a8:82:a3:6c:22:1d:b8:77:b3:ec:9d:71:ca:1f:ee:
65:00:2f:ce:57:97:cb:ba:b4:e4:06:02:23:5b:40:
5f:4e:5f:1c:b9:b8:c6:d1:4a:86:67:ef:de:0c:f9:
d6:a4:41:ae:e2:df:94:2f:62:6f:ce:59:1e:7d:f5:
18:a0:f9:6f:13:63:a5:41:4d:37:dd:e8:67:c0:8a:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:E1:13:FA:6B:E7:95:9B:55:0E:C4:A8:C2:0B:9D:48:24:EA:AF
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wZjhE_pr55WbVQ7EqMILnUgk6q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.147.0/24
45.43.152.0/24
64.137.110.0/23
104.222.160.0/24
104.222.163.0-104.222.166.255
104.222.191.0/24
104.233.56.0/24
104.233.58.0/24
104.238.24.0/24
104.238.28.0/24
104.239.47.0/24
104.239.66.0/24
104.239.74.0/24
104.239.79.0/24
104.239.83.0/24
104.239.89.0/24
104.239.100.0/24
104.239.102.0/24
104.239.109.0/24
104.239.127.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d3:72:2d:cd:55:9e:71:ee:ed:70:45:ee:2c:33:8e:87:8c:
2b:2d:35:56:88:98:f9:c8:86:b0:25:a4:3c:5c:fe:c6:71:6d:
dd:e6:bf:8a:5a:8f:f3:09:a4:66:c0:c7:77:9f:a7:1d:f7:d3:
9d:5f:ab:2a:ac:8b:e2:99:35:ae:7a:b0:94:75:78:13:ee:3b:
4c:d8:20:65:df:a5:cc:55:8a:f1:51:b4:d3:a9:f5:bb:a0:77:
d5:51:af:74:0e:66:bf:7c:48:95:44:a9:2a:3e:4f:57:a7:eb:
94:e3:fe:d7:d4:4c:41:25:39:86:7a:22:20:98:4e:f6:84:b2:
39:2f:d2:27:00:5f:7e:3f:f2:d9:7b:39:ac:c0:f0:5f:87:79:
84:f4:9e:4d:03:fe:49:85:ef:97:a1:6f:d6:6a:04:52:87:e8:
28:9a:a6:f2:ad:05:1d:3c:e4:4d:34:be:45:4e:09:ec:8d:5d:
db:23:5a:f7:d5:1f:e0:7a:35:f2:70:0f:a1:bd:7b:8c:c2:69:
43:67:ef:1f:30:9b:eb:0a:61:d7:5e:ae:2b:bc:de:95:38:f0:
2f:52:fd:12:0f:64:ba:f2:b1:43:92:2b:a3:71:8a:38:5b:a2:
a8:77:90:f9:24:83:e6:7c:99:77:a0:6b:2e:87:95:16:a0:24:
6e:79:44:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:59 2025 by rpki-client