Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa
File: wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa (raw, json)
Hash identifier: B4jHxBo8KD+DxfBtAFoOk8Vvzyje54Bq/hBOaPBuC2c=
Subject key identifier: C1:81:B4:94:F5:9D:FE:EF:EF:C6:9C:10:97:67:4C:B9:6F:C4:62:C3
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B67F1D1F5F2946148272E21BA44DC3
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa
Signing time: Thu 02 Jan 2025 15:50:59 +0000
ROA not before: Thu 02 Jan 2025 15:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21342
IP address blocks: 2.16.40.0/24 maxlen: 24
2.16.122.0/24 maxlen: 24
2.16.123.0/24 maxlen: 24
2.16.126.0/24 maxlen: 24
2.16.127.0/24 maxlen: 24
2.16.130.0/24 maxlen: 24
2.17.46.0/24 maxlen: 24
2.21.230.0/24 maxlen: 24
2.22.230.0/24 maxlen: 24
2.22.243.0/24 maxlen: 24
84.53.139.0/24 maxlen: 24
88.221.81.0/24 maxlen: 24
88.221.162.0/24 maxlen: 24
88.221.163.0/24 maxlen: 24
92.122.123.0/24 maxlen: 24
92.123.94.0/24 maxlen: 24
92.123.95.0/24 maxlen: 24
95.100.168.0/24 maxlen: 24
95.100.173.0/24 maxlen: 24
95.100.174.0/24 maxlen: 24
95.100.175.0/24 maxlen: 24
95.101.36.0/24 maxlen: 24
95.101.76.0/24 maxlen: 24
193.108.88.0/24 maxlen: 24
193.108.91.0/24 maxlen: 24
2a02:26f0:67::/48 maxlen: 48
2a02:26f0:68::/48 maxlen: 48
2a02:26f0:117::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:7f:1d:1f:5f:29:46:14:82:72:e2:1b:a4:4d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c181b494f59dfeefefc69c1097674cb96fc462c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:db:83:e0:62:c9:de:e6:1b:09:11:ba:28:
48:ec:ec:20:78:6d:08:51:74:c7:87:1c:85:d7:a0:
b1:62:3d:49:39:8f:d0:d8:72:0c:61:b2:18:aa:8b:
4e:dd:1b:3f:42:2d:b5:18:81:6e:90:4d:bb:7f:33:
da:97:54:a5:bb:72:d1:89:0f:9b:3f:7e:4d:ff:62:
97:6b:a9:25:23:9b:e9:c7:d1:37:da:7e:d6:b7:96:
30:74:c4:44:9f:e2:c7:72:db:3b:11:52:e2:cf:3e:
17:ef:91:07:d7:84:eb:27:e2:2a:bb:b6:ee:59:af:
00:c1:c1:6b:ec:99:0d:89:5a:7c:70:a9:d7:f3:3a:
15:78:3e:dd:9e:32:1c:0b:0a:5c:e4:df:c7:80:c1:
3a:79:df:c8:1b:09:47:cb:66:66:1b:ee:63:e5:73:
7e:54:91:6c:7f:1b:15:ca:f4:a7:89:b6:52:c6:b0:
58:7e:3b:54:b3:66:d3:1d:c7:3b:8e:b7:a1:e4:cd:
fd:cb:6d:e3:82:f4:40:ae:26:5b:bd:6a:d5:1f:80:
da:2d:61:0c:c6:2d:87:31:c5:87:85:16:bc:2b:8d:
75:07:38:14:4a:55:d2:1f:15:58:a1:44:90:0d:83:
90:8f:0c:8e:aa:9b:31:c8:ff:e9:30:57:43:07:4d:
e5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:B4:94:F5:9D:FE:EF:EF:C6:9C:10:97:67:4C:B9:6F:C4:62:C3
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/wYG0lPWd_u_vxpwQl2dMuW_EYsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.40.0/24
2.16.122.0/23
2.16.126.0/23
2.16.130.0/24
2.17.46.0/24
2.21.230.0/24
2.22.230.0/24
2.22.243.0/24
84.53.139.0/24
88.221.81.0/24
88.221.162.0/23
92.122.123.0/24
92.123.94.0/23
95.100.168.0/24
95.100.173.0-95.100.175.255
95.101.36.0/24
95.101.76.0/24
193.108.88.0/24
193.108.91.0/24
IPv6:
2a02:26f0:67::-2a02:26f0:68:ffff:ffff:ffff:ffff:ffff
2a02:26f0:117::/48
Signature Algorithm: sha256WithRSAEncryption
91:6e:59:50:e5:40:44:19:75:8c:22:17:32:45:ce:34:fd:6a:
f5:e2:45:e7:12:1a:c3:c1:8b:fc:9f:ca:5e:61:48:6f:42:ac:
b5:08:02:7b:32:19:4f:cb:83:e5:e7:bd:ef:a3:69:1f:b4:c8:
66:73:45:91:d6:33:51:32:c5:04:13:9d:5b:42:a5:4b:c7:de:
5f:95:06:bb:99:fb:c1:fb:9c:1f:3e:15:74:13:a6:13:00:9c:
58:af:da:fc:1c:84:68:ce:3a:5d:2d:51:af:ce:de:55:14:63:
49:ca:d8:4d:16:9e:9b:10:60:ef:da:59:bc:83:6c:b2:fa:9c:
89:1a:28:ae:e2:75:10:cb:5f:46:f4:b7:45:d9:1b:08:26:d6:
58:89:c8:8a:b3:d2:57:1d:96:a1:2b:dd:5c:7e:48:ce:6f:9b:
28:65:0a:cf:fb:96:c4:7d:bf:3e:e8:3e:38:6b:73:27:41:d9:
f2:15:6f:3c:b0:bb:b9:19:22:95:33:5d:b1:1e:37:17:80:08:
70:14:12:d4:9b:6e:5a:f8:ce:8a:f5:02:fe:78:b2:d2:53:74:
45:9c:6a:ee:0a:53:54:bc:c1:7c:83:ba:d7:40:8d:86:96:9c:
1f:d1:3e:41:bc:de:fb:48:3b:de:0a:a7:41:c5:7f:d5:eb:d4:
4c:46:aa:da
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQntn8dH18pRhSCcuIbpE3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTgxYjQ5NGY1OWRmZWVmZWZjNjljMTA5NzY3NGNiOTZmYzQ2MmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gTbg+Biyd7mGwkRuihI7OwgeG0I
UXTHhxyF16CxYj1JOY/Q2HIMYbIYqotO3Rs/Qi21GIFukE27fzPal1Slu3LRiQ+b
P35N/2KXa6klI5vpx9E32n7Wt5YwdMREn+LHcts7EVLizz4X75EH14TrJ+Iqu7bu
Wa8AwcFr7JkNiVp8cKnX8zoVeD7dnjIcCwpc5N/HgME6ed/IGwlHy2ZmG+5j5XN+
VJFsfxsVyvSnibZSxrBYfjtUs2bTHcc7jreh5M39y23jgvRAriZbvWrVH4DaLWEM
xi2HMcWHhRa8K411BzgUSlXSHxVYoUSQDYOQjwyOqpsxyP/pMFdDB03lzwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFMGBtJT1nf7v78acEJdnTLlvxGLDMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvd1lHMGxQV2RfdV92eHB3UWwyZE11V19FWXNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBgAQCAAEwegMEAAIQ
KAMEAQIQegMEAQIQfgMEAAIQggMEAAIRLgMEAAIV5gMEAAIW5gMEAAIW8wMEAFQ1
iwMEAFjdUQMEAVjdogMEAFx6ewMEAVx7XgMEAF9kqDAMAwQAX2StAwQEX2SgAwQA
X2UkAwQAX2VMAwQAwWxYAwQAwWxbMCMEAgACMB0wEgMHACoCJvAAZwMHACoCJvAA
aAMHACoCJvABFzANBgkqhkiG9w0BAQsFAAOCAQEAkW5ZUOVARBl1jCIXMkXONP1q
9eJF5xIaw8GL/J/KXmFIb0KstQgCezIZT8uD5ee976NpH7TIZnNFkdYzUTLFBBOd
W0KlS8feX5UGu5n7wfucHz4VdBOmEwCcWK/a/ByEaM46XS1Rr87eVRRjScrYTRae
mxBg79pZvINssvqciRooruJ1EMtfRvS3RdkbCCbWWInIirPSVx2WoSvdXH5Izm+b
KGUKz/uWxH2/Pug+OGtzJ0HZ8hVvPLC7uRkilTNdsR43F4AIcBQS1JtuWvjOivUC
/niy0lN0RZxq7gpTVLzBfIO610CNhpacH9E+Qbze+0g73gqnQcV/1evUTEaq2g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:50 2025 by rpki-client