Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/WTARnFcaaxywjD8542Gln8y_dnw.roa
File: WTARnFcaaxywjD8542Gln8y_dnw.roa (raw, json)
Hash identifier: Ftlz5tAZ1Wy4DgBSL6cjF0uXQi2BfjzAEtpVPnOo5XU=
Subject key identifier: 59:30:11:9C:57:1A:6B:1C:B0:8C:3F:39:E3:61:A5:9F:CC:BF:76:7C
Certificate issuer: /CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Certificate serial: 0194266C35F893D7B091A147C6904B70475D
Authority key identifier: 42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/WTARnFcaaxywjD8542Gln8y_dnw.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199997
IP address blocks: 46.245.224.0/21 maxlen: 21
46.245.224.0/24 maxlen: 24
46.245.225.0/24 maxlen: 24
46.245.226.0/24 maxlen: 24
46.245.227.0/24 maxlen: 24
46.245.228.0/24 maxlen: 24
46.245.229.0/24 maxlen: 24
2a01:bfe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:35:f8:93:d7:b0:91:a1:47:c6:90:4b:70:47:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a62ffc99f294102dcce235dc1a3c13dabcd69a
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5930119c571a6b1cb08c3f39e361a59fccbf767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dc:c9:e8:b6:b3:cb:5e:72:45:f3:51:4e:5b:
33:e4:bb:f4:05:04:35:1e:1b:65:be:ad:49:3c:10:
ff:84:f1:0b:6d:0b:a4:f5:5e:dd:74:63:dd:fd:ba:
00:2b:5a:f5:6c:e8:be:8c:f3:8f:ee:95:4c:1e:f8:
f8:28:ce:4e:64:49:4c:4c:6a:b3:97:d2:3e:7a:df:
85:5b:a6:3f:0e:9b:7d:c1:1e:bc:57:8e:34:22:66:
e1:d2:ff:20:12:33:9b:0f:fd:d9:14:de:c2:4e:bd:
20:19:97:ec:e6:10:fb:15:da:e1:88:30:c6:23:70:
66:0f:de:e9:fa:b1:fe:85:36:dd:42:2d:d0:f9:26:
1b:47:50:8a:71:3d:ae:a0:63:c6:51:d3:34:5d:fe:
35:8c:4c:0d:74:de:8f:b2:df:9d:68:04:78:08:2e:
c1:f7:5f:90:9e:fd:29:63:52:d7:e0:8d:87:f9:13:
94:0f:6f:cf:1b:2e:f9:34:64:5e:5d:a2:cc:25:de:
57:89:99:d1:df:5b:58:c6:04:ad:bc:b6:50:5b:93:
00:53:4f:87:40:82:3b:aa:82:3e:03:fc:70:4d:91:
06:44:0d:8e:bf:bc:45:ee:bc:10:ef:e7:d5:32:be:
a0:01:0b:5e:49:59:c0:70:bb:a1:57:af:cf:92:84:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:30:11:9C:57:1A:6B:1C:B0:8C:3F:39:E3:61:A5:9F:CC:BF:76:7C
X509v3 Authority Key Identifier:
keyid:42:A6:2F:FC:99:F2:94:10:2D:CC:E2:35:DC:1A:3C:13:DA:BC:D6:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqYv_JnylBAtzOI13Bo8E9q81po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/WTARnFcaaxywjD8542Gln8y_dnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dc665d-db10-4059-83ed-1c22da44a22d/1/QqYv_JnylBAtzOI13Bo8E9q81po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.224.0/21
IPv6:
2a01:bfe0::/32
Signature Algorithm: sha256WithRSAEncryption
01:f1:db:11:99:52:3a:d0:0a:f7:f6:94:8b:e6:ae:95:8c:9d:
8f:e9:b5:dd:6a:88:d8:88:0b:52:3d:49:0a:48:fc:f4:84:03:
58:48:90:3c:2e:9f:44:58:ef:f2:e3:66:13:4f:b8:f1:21:54:
0a:39:02:b9:25:88:73:b5:3d:f4:d1:97:00:2b:d3:72:a2:79:
8a:54:e3:18:8d:11:87:a2:d8:92:af:33:98:74:24:1c:70:e5:
ea:34:1b:90:20:0e:90:0f:1e:f5:47:0a:f9:41:7e:0b:40:2c:
ac:10:fd:b8:c7:b7:a5:b0:71:a9:84:04:6d:17:fc:f1:e5:6c:
58:e1:7f:ab:2b:05:67:fb:1d:75:25:4e:b4:65:61:ef:9d:d3:
0b:41:87:5a:63:7e:fe:cd:2d:e7:30:c7:ec:64:dc:59:31:03:
ed:51:a5:cb:e5:86:97:59:1c:6b:88:8a:26:60:ba:46:da:69:
b0:58:d5:b3:a1:24:01:a7:30:ea:57:29:77:43:f3:62:33:b6:
3a:45:e9:ab:24:89:54:45:0a:37:88:ad:c9:b5:64:ef:58:1e:
38:19:af:16:f8:a0:f5:7b:8b:9b:f0:8a:4c:4e:22:91:47:c6:
37:9f:18:ac:93:ec:ac:4a:08:d2:4c:58:e2:0b:aa:5d:9a:09:
08:c6:b3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:39 2025 by rpki-client on console.sobornost.net