Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/pl_wkNT0eOnfSTkLaYZ-eGu2gPg.roa
File: pl_wkNT0eOnfSTkLaYZ-eGu2gPg.roa (raw, json)
Hash identifier: XpSnO1ZGAXTw7pza4xOb6DxEwhKPR0uoKa/oJR12kNw=
Subject key identifier: A6:5F:F0:90:D4:F4:78:E9:DF:49:39:0B:69:86:7E:78:6B:B6:80:F8
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018C113C1DFF2587B5FCDEDD2CB0B7F2B9C2
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/pl_wkNT0eOnfSTkLaYZ-eGu2gPg.roa
Signing time: Mon 27 Nov 2023 14:43:21 +0000
ROA not before: Mon 27 Nov 2023 14:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49468
IP address blocks: 2.57.123.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.161.0/24 maxlen: 24
45.129.12.0/24 maxlen: 24
45.148.8.0/24 maxlen: 24
45.134.49.0/24 maxlen: 24
45.134.50.0/24 maxlen: 24
45.13.214.0/24 maxlen: 24
45.13.215.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
45.142.193.0/24 maxlen: 24
45.13.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:3c:1d:ff:25:87:b5:fc:de:dd:2c:b0:b7:f2:b9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 27 14:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a65ff090d4f478e9df49390b69867e786bb680f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:67:04:e1:a0:1d:01:c2:dc:73:9b:42:a4:8a:
d3:0e:45:d0:82:72:3d:be:17:ff:0e:92:4a:e3:cd:
9f:74:eb:95:5d:0e:98:d1:ba:72:c3:e3:90:4d:32:
22:27:a3:6d:c6:26:ff:d7:84:ca:44:9c:d9:bc:33:
10:00:c3:d1:e0:c5:1e:61:a8:30:87:06:cf:18:ea:
29:75:5c:1d:0a:a8:98:b2:da:9e:bc:bf:64:a6:00:
aa:c5:3c:37:65:af:5c:48:64:98:ba:8c:b4:0b:7f:
7e:bc:da:8c:39:17:df:b6:c0:8a:14:e3:94:79:76:
7e:2c:42:a5:ae:84:f4:04:80:52:87:84:ba:db:4d:
fa:21:9b:80:ed:fb:32:5e:3c:df:e4:02:5f:a2:50:
3f:e4:f9:00:42:91:64:21:ea:cb:0a:63:30:7c:22:
e2:f1:64:c5:40:95:14:9d:f8:db:56:90:09:27:2b:
1d:5a:b0:63:6e:3f:20:7f:5a:af:5a:3b:de:55:3e:
98:0b:75:98:c7:cf:5f:42:60:12:92:81:90:f4:65:
1a:21:e3:93:28:5e:86:6d:99:f8:59:4e:f4:47:ad:
a5:98:04:50:56:0d:a1:9a:a9:5b:78:fe:70:da:c1:
b2:1a:08:44:95:93:4b:3f:82:6b:8d:6f:58:eb:84:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:F0:90:D4:F4:78:E9:DF:49:39:0B:69:86:7E:78:6B:B6:80:F8
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/pl_wkNT0eOnfSTkLaYZ-eGu2gPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.123.0/24
45.13.36.0/24
45.13.214.0/23
45.129.12.0/24
45.134.49.0-45.134.50.255
45.142.193.0/24
45.148.8.0/24
193.29.12.0/24
193.32.160.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:3d:d0:3b:0d:c4:a1:8a:ff:71:08:06:38:be:ef:eb:eb:79:
1e:e0:98:29:c8:2a:6d:2a:a6:51:23:8f:65:20:06:4e:fe:c4:
c0:77:73:02:6a:37:13:b3:88:5a:29:43:a8:de:9f:ca:0a:b3:
c9:34:a6:b7:3f:13:f4:da:33:c8:96:18:00:0c:81:0d:d5:e4:
b3:25:a1:d8:39:35:0f:41:77:46:46:46:15:62:a6:9d:d2:e7:
cc:8d:49:10:cc:16:d5:a3:12:11:2f:5d:8e:54:78:98:e8:b6:
95:1e:f5:8d:61:a0:95:04:19:6a:18:3d:3c:e7:a9:52:da:54:
cf:0f:3a:43:78:0a:82:fc:c6:5a:71:bf:7d:14:32:13:ec:80:
04:a3:2f:f4:2c:69:05:d1:6d:88:f0:a2:d1:62:89:25:4e:45:
0c:13:65:c2:0d:4b:98:80:25:5a:58:8a:86:53:27:2a:72:52:
f0:12:2d:65:eb:c6:1d:fe:04:1e:53:e1:c3:b0:03:0f:4c:df:
88:56:e9:29:8d:8b:6e:ae:c0:c0:ab:be:63:50:9b:34:78:97:
ba:5b:9b:7c:ca:85:9f:18:8b:67:1d:9a:1e:c9:a0:89:54:ff:
b3:83:35:09:ac:88:fd:09:12:51:73:c3:9e:e6:04:0d:9b:6e:
29:99:52:25
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAYwRPB3/JYe1/N7dLLC38rnCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjMxMTI3MTQ0MzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjVmZjA5MGQ0ZjQ3OGU5ZGY0OTM5MGI2OTg2N2U3ODZiYjY4MGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWcE4aAdAcLcc5tCpIrTDkXQgnI9
vhf/DpJK482fdOuVXQ6Y0bpyw+OQTTIiJ6Ntxib/14TKRJzZvDMQAMPR4MUeYagw
hwbPGOopdVwdCqiYstqevL9kpgCqxTw3Za9cSGSYuoy0C39+vNqMORfftsCKFOOU
eXZ+LEKlroT0BIBSh4S62036IZuA7fsyXjzf5AJfolA/5PkAQpFkIerLCmMwfCLi
8WTFQJUUnfjbVpAJJysdWrBjbj8gf1qvWjveVT6YC3WYx89fQmASkoGQ9GUaIeOT
KF6GbZn4WU70R62lmARQVg2hmqlbeP5w2sGyGghElZNLP4JrjW9Y64RVHwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFKZf8JDU9Hjp30k5C2mGfnhrtoD4MB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvcGxfd2tOVDBlT25mU1RrTGFZWi1lR3UyZ1BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAAjl7AwQA
LQ0kAwQBLQ3WAwQALYEMMAwDBAAthjEDBAAthjIDBAAtjsEDBAAtlAgDBADBHQwD
BAHBIKAwDQYJKoZIhvcNAQELBQADggEBAAs90DsNxKGK/3EIBji+7+vreR7gmCnI
Km0qplEjj2UgBk7+xMB3cwJqNxOziFopQ6jen8oKs8k0prc/E/TaM8iWGAAMgQ3V
5LMlodg5NQ9Bd0ZGRhVipp3S58yNSRDMFtWjEhEvXY5UeJjotpUe9Y1hoJUEGWoY
PTznqVLaVM8POkN4CoL8xlpxv30UMhPsgASjL/QsaQXRbYjwotFiiSVORQwTZcIN
S5iAJVpYioZTJypyUvASLWXrxh3+BB5T4cOwAw9M34hW6SmNi26uwMCrvmNQmzR4
l7pbm3zKhZ8Yi2cdmh7JoIlU/7ODNQmsiP0JElFzw57mBA2bbimZUiU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:50 2025 by rpki-client