Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wgncXRBzxQY6XA3oWfROZOXp5PA.roa
File: wgncXRBzxQY6XA3oWfROZOXp5PA.roa (raw, json)
Hash identifier: 5cSE89J7TSQPycdoG+YrxC5LsUL69k+OOwNxbbqsWOs=
Subject key identifier: C2:09:DC:5D:10:73:C5:06:3A:5C:0D:E8:59:F4:4E:64:E5:E9:E4:F0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194DC79F239C444C91DE305A5B2907C72C8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wgncXRBzxQY6XA3oWfROZOXp5PA.roa
Signing time: Thu 06 Feb 2025 18:16:06 +0000
ROA not before: Thu 06 Feb 2025 18:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.145.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.142.0/24 maxlen: 24
5.175.143.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.104.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.254.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.5.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:79:f2:39:c4:44:c9:1d:e3:05:a5:b2:90:7c:72:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 6 18:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c209dc5d1073c5063a5c0de859f44e64e5e9e4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:04:f4:61:62:68:6d:59:ed:ec:dc:06:52:
50:cb:53:ba:24:e8:e6:50:bd:9f:e2:db:df:1f:27:
ee:0f:f5:65:c0:e1:6b:b7:75:33:7e:59:8c:5b:a1:
79:42:25:5f:b2:dd:14:82:55:3f:43:9a:f6:1f:2e:
a6:b9:b3:f6:50:77:59:cc:36:6d:63:f3:88:a1:17:
b5:d4:6c:fd:a3:ac:d3:a2:ec:05:86:fc:9c:e2:ed:
5f:86:11:78:1e:91:e7:b8:fa:57:4b:a6:17:64:8b:
8f:05:ef:7b:d4:2e:92:eb:b2:a6:41:15:f2:15:60:
3a:ae:dd:84:54:59:80:e1:de:95:a1:c5:cc:84:6f:
5a:d9:3b:74:ed:79:75:a4:68:e2:18:c8:95:29:f7:
22:bd:22:f2:67:3f:9a:40:6d:8f:d9:55:e3:45:f5:
0f:29:18:36:e2:f6:16:b4:67:4d:6c:5b:bb:c3:42:
69:1e:bf:d7:7d:18:9c:0c:00:62:b6:bb:68:de:15:
01:0a:18:0f:d3:22:26:d9:34:eb:a7:b5:eb:5a:37:
51:4c:8c:59:e7:b5:3c:a9:7c:17:62:9a:9c:bf:ff:
5e:c0:5d:86:77:e6:e0:16:18:05:cd:5d:65:9f:6e:
4f:72:36:54:7b:9d:6c:4a:de:bf:ab:48:6e:f6:97:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:DC:5D:10:73:C5:06:3A:5C:0D:E8:59:F4:4E:64:E5:E9:E4:F0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wgncXRBzxQY6XA3oWfROZOXp5PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.142.0/23
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
77:18:b7:91:9e:ca:99:4e:ee:67:c4:d2:8d:fc:78:b9:2a:d1:
e7:84:8c:6b:81:fa:08:a6:d9:1c:8f:dc:ec:f6:a4:0a:11:65:
01:2c:d8:24:93:1b:d9:4c:30:e4:f2:a3:c8:57:5c:74:ef:d3:
87:6a:c1:bb:53:bc:10:3f:30:f8:43:06:f4:32:6c:dc:ea:48:
04:b7:5c:28:b5:67:ad:31:06:6a:97:b5:e9:cb:4d:88:53:db:
21:1e:67:3c:d3:ca:0f:2c:23:39:e1:f3:0f:db:de:f4:b5:d3:
64:0e:d3:20:d0:b5:5e:6f:30:46:5d:e2:51:ce:3c:62:6f:24:
8d:76:e4:6c:0a:2f:b2:a7:77:15:c8:32:27:d3:52:ef:06:52:
6e:dc:50:38:98:0f:00:d2:f4:9d:78:52:b9:83:96:48:a7:c8:
a6:89:e7:cf:ce:aa:a6:d4:1b:5c:30:18:1a:20:0e:20:cc:7f:
3a:41:af:95:c8:35:00:02:d9:68:84:82:15:f6:5a:38:75:e1:
be:0e:92:71:c5:93:27:bb:e8:44:70:29:2a:92:e2:78:89:48:
85:67:8e:1c:3d:35:af:e4:48:14:3d:1b:62:75:ee:0b:2d:59:
15:3b:1d:bf:b7:3b:5b:6d:4a:8f:76:70:29:00:b4:12:82:ad:
4d:ad:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:57 2025 by rpki-client