Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Wl5OMNC6MCxgbmomNHBubWa_YQU.roa
File: Wl5OMNC6MCxgbmomNHBubWa_YQU.roa (raw, json)
Hash identifier: l+u7ZnhhBCsAfHDI+07MRIoLVM81+Kmmayjl/zuQNno=
Subject key identifier: 5A:5E:4E:30:D0:BA:30:2C:60:6E:6A:26:34:70:6E:6D:66:BF:61:05
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0194252190D0F7C5FBE4F79CC603AFBA7FAA
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Wl5OMNC6MCxgbmomNHBubWa_YQU.roa
Signing time: Thu 02 Jan 2025 03:49:04 +0000
ROA not before: Thu 02 Jan 2025 03:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199218
IP address blocks: 85.239.144.0/24 maxlen: 24
85.239.149.0/24 maxlen: 24
85.239.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:90:d0:f7:c5:fb:e4:f7:9c:c6:03:af:ba:7f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a5e4e30d0ba302c606e6a2634706e6d66bf6105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:45:02:ac:0b:19:26:09:bb:3f:e5:a6:10:
73:13:ce:db:82:de:79:65:4d:ad:1f:fa:ef:80:a5:
77:25:f6:10:00:1c:4d:5d:b6:17:d6:a9:67:9d:d7:
83:42:8c:2a:57:d5:54:e1:0a:b5:57:a0:bd:5a:fd:
ba:79:8f:06:d7:18:7e:e1:d1:6a:ef:e6:b0:23:b3:
ad:f3:94:e6:f0:c0:71:b3:58:7a:55:ca:e4:83:cc:
4e:19:94:54:74:b2:a7:18:ab:b9:ff:de:59:6a:35:
cc:da:e6:06:02:c2:f6:04:da:7c:0a:50:11:9e:3e:
f2:d4:97:09:3e:81:64:f1:34:6c:e5:3c:75:ce:cb:
44:f7:eb:96:c8:0f:f0:e7:d5:c9:1c:95:81:ae:61:
24:b5:32:5a:1a:dc:aa:93:74:8b:5d:56:98:29:18:
0e:38:a4:69:ac:be:46:e8:0c:be:60:05:92:28:1c:
df:a2:59:74:5f:bd:85:a5:3b:b1:ed:39:6d:50:84:
4a:e9:1e:a3:89:ef:f8:40:8a:7a:22:df:08:db:ec:
a3:46:21:16:33:c9:ed:60:97:f2:c5:1e:77:20:21:
f4:9d:eb:b4:ac:e2:fc:c0:21:7b:b4:75:ad:3c:11:
d7:bf:80:c7:7b:be:c4:6c:1a:8e:45:be:41:b1:b1:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:4E:30:D0:BA:30:2C:60:6E:6A:26:34:70:6E:6D:66:BF:61:05
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/Wl5OMNC6MCxgbmomNHBubWa_YQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.144.0/24
85.239.149.0/24
85.239.151.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:2f:55:ea:c9:e9:00:84:b5:2b:b6:31:96:ac:dc:c6:9f:55:
77:46:84:df:1b:e5:9c:c9:f5:15:ac:e5:15:87:57:2a:5a:e4:
08:35:22:20:da:80:7c:3a:58:65:6b:b3:af:b7:ed:f6:50:11:
86:22:84:37:0e:ff:04:ac:fb:7b:c0:1e:67:78:6e:bb:60:4d:
4f:06:e2:84:06:e0:af:43:fa:92:75:98:8e:39:a1:31:09:d8:
88:5e:13:b1:98:ad:35:a2:99:9c:29:fa:c4:a0:fd:40:af:24:
97:10:23:83:e7:dc:29:e0:66:78:99:b9:7c:50:c3:6d:30:0f:
b5:60:ef:8b:85:06:87:cc:28:45:b5:0c:ed:67:61:54:30:e2:
b8:e1:21:6f:06:94:6f:43:3b:5f:b3:e0:72:9a:ae:2a:e4:23:
dd:4d:93:57:97:f5:6d:66:8d:57:6b:74:e4:8b:96:8d:41:68:
f2:00:f7:63:f0:12:65:52:4e:07:5a:a7:be:0b:42:91:29:8c:
d6:64:b7:56:e7:a8:4f:3c:10:78:39:22:2a:91:a8:69:35:f2:
5b:db:f9:89:ff:bb:cc:70:47:c6:82:bb:f2:91:fd:eb:0f:b6:
f6:20:d1:78:06:0a:ae:12:3a:39:a2:8f:e8:2d:6f:8b:37:b6:
b7:4a:0b:c7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQlIZDQ98X75PecxgOvun+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjUwMTAyMDM0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTVlNGUzMGQwYmEzMDJjNjA2ZTZhMjYzNDcwNmU2ZDY2YmY2MTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj1FAqwLGSYJuz/lphBzE87bgt55
ZU2tH/rvgKV3JfYQABxNXbYX1qlnndeDQowqV9VU4Qq1V6C9Wv26eY8G1xh+4dFq
7+awI7Ot85Tm8MBxs1h6Vcrkg8xOGZRUdLKnGKu5/95ZajXM2uYGAsL2BNp8ClAR
nj7y1JcJPoFk8TRs5Tx1zstE9+uWyA/w59XJHJWBrmEktTJaGtyqk3SLXVaYKRgO
OKRprL5G6Ay+YAWSKBzfoll0X72FpTux7TltUIRK6R6jie/4QIp6It8I2+yjRiEW
M8ntYJfyxR53ICH0neu0rOL8wCF7tHWtPBHXv4DHe77EbBqORb5BsbH3ewIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFpeTjDQujAsYG5qJjRwbm1mv2EFMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvV2w1T01OQzZNQ3hnYm1vbU5IQnViV2FfWVFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVe+QAwQA
Ve+VAwQAVe+XMA0GCSqGSIb3DQEBCwUAA4IBAQC3L1XqyekAhLUrtjGWrNzGn1V3
RoTfG+WcyfUVrOUVh1cqWuQINSIg2oB8Olhla7Ovt+32UBGGIoQ3Dv8ErPt7wB5n
eG67YE1PBuKEBuCvQ/qSdZiOOaExCdiIXhOxmK01opmcKfrEoP1ArySXECOD59wp
4GZ4mbl8UMNtMA+1YO+LhQaHzChFtQztZ2FUMOK44SFvBpRvQztfs+Bymq4q5CPd
TZNXl/VtZo1Xa3Tki5aNQWjyAPdj8BJlUk4HWqe+C0KRKYzWZLdW56hPPBB4OSIq
kahpNfJb2/mJ/7vMcEfGgrvykf3rD7b2INF4BgquEjo5oo/oLW+LN7a3SgvH
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:48 2025 by rpki-client