Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/w6mVjyVbjFRcazrEdvt50tkS3zg.roa
File: w6mVjyVbjFRcazrEdvt50tkS3zg.roa (raw, json)
Hash identifier: iJ4rvYUy0m0cb5ioPTiEFnxYb+CsX3lM2FCXlLfqVqY=
Subject key identifier: C3:A9:95:8F:25:5B:8C:54:5C:6B:3A:C4:76:FB:79:D2:D9:12:DF:38
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 018433F2F0E8A2691CDA6158C9BC509BA3AE
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/w6mVjyVbjFRcazrEdvt50tkS3zg.roa
Signing time: Tue 01 Nov 2022 16:07:50 +0000
ROA not before: Tue 01 Nov 2022 16:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48090
IP address blocks: 2.57.122.0/24 maxlen: 24
92.118.39.0/24 maxlen: 24
45.142.192.0/24 maxlen: 24
80.94.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:f2:f0:e8:a2:69:1c:da:61:58:c9:bc:50:9b:a3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Nov 1 16:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3a9958f255b8c545c6b3ac476fb79d2d912df38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:d8:5d:c4:84:0f:39:3c:54:2a:bb:ec:a2:
78:fe:dc:95:51:ea:2b:6a:99:79:2a:31:fb:97:99:
71:e3:79:18:d5:d0:98:69:e4:a9:2c:95:8d:44:ac:
bc:bb:0f:1a:62:13:8b:33:fa:71:cb:d0:28:2c:da:
2c:22:1d:56:81:71:28:63:5e:22:c8:20:0f:a1:66:
be:11:1f:fe:b3:a9:db:be:cc:bd:89:0c:1c:fe:ee:
fc:e7:ee:b5:23:89:df:d4:cc:51:bf:db:1e:52:54:
8c:f4:44:f6:27:7c:5e:7b:51:1a:14:cd:9f:75:79:
91:21:a7:1c:ea:af:0a:90:64:b6:d4:2c:82:b4:44:
d8:d3:c9:3b:ef:f8:8e:c7:19:1d:7f:84:b6:2a:a6:
bf:16:c4:5d:17:31:a8:f6:6b:dd:70:a3:81:97:cc:
a4:ec:5d:a0:58:98:9a:40:3b:e7:cf:46:73:3a:bd:
af:0f:9e:de:d0:1a:40:d1:b5:0a:8c:b2:a7:16:b0:
36:46:23:f2:5a:4a:1d:be:2a:cc:72:60:e8:64:f4:
6b:19:e8:d3:a9:18:77:da:34:e3:86:5c:7f:b8:9d:
4d:e9:78:68:91:97:07:fc:f7:64:c5:b7:be:0a:80:
d9:c8:6a:8c:9d:80:d8:8f:7e:53:90:e7:1c:44:7a:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:95:8F:25:5B:8C:54:5C:6B:3A:C4:76:FB:79:D2:D9:12:DF:38
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/w6mVjyVbjFRcazrEdvt50tkS3zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.122.0/24
45.142.192.0/24
80.94.92.0/24
92.118.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a5:20:fc:1b:33:b5:1a:79:29:09:52:b6:dc:18:a5:10:e7:
8f:d1:e8:9b:9d:ac:f3:36:c1:fe:2c:b8:81:01:b3:a5:68:3d:
35:70:3e:79:d3:1e:91:d7:ee:70:20:4a:aa:bb:07:a4:a1:b6:
f3:d6:8d:73:2d:08:6d:32:e5:55:1f:98:fe:48:9c:1c:64:03:
6f:68:6f:38:f1:4a:4e:21:a3:37:5a:3d:fc:3c:d9:34:af:76:
28:ac:93:5c:b0:44:3d:31:30:57:80:eb:eb:21:c7:9c:7a:54:
a7:60:bf:63:8f:d7:f7:0f:8a:d1:25:91:ba:7c:26:23:5a:10:
3b:9e:df:66:6c:51:96:a7:a1:e6:c9:7e:cd:8c:92:b8:4c:73:
8c:ed:e8:8d:dd:21:63:bf:ed:b5:a3:1e:95:50:5a:06:a6:1f:
32:cd:69:0e:1f:e4:2e:5e:b7:d3:62:1e:74:54:a1:51:6b:5b:
25:b9:df:fe:1d:85:56:f3:05:2a:4c:a3:96:9f:4e:28:1f:e3:
18:22:28:32:1a:df:e0:0b:73:aa:35:99:8b:8a:a5:80:73:ab:
d2:cd:f2:0f:a9:f8:e3:6b:41:b8:1e:cf:88:bd:5f:57:65:4d:
83:a5:f7:7f:cc:84:14:57:36:33:5d:3d:2c:1e:62:29:03:94:
46:b1:9c:45
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYQz8vDoomkc2mFYybxQm6OuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjIxMTAxMTYwNzUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2E5OTU4ZjI1NWI4YzU0NWM2YjNhYzQ3NmZiNzlkMmQ5MTJkZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMvYXcSEDzk8VCq77KJ4/tyVUeor
apl5KjH7l5lx43kY1dCYaeSpLJWNRKy8uw8aYhOLM/pxy9AoLNosIh1WgXEoY14i
yCAPoWa+ER/+s6nbvsy9iQwc/u785+61I4nf1MxRv9seUlSM9ET2J3xee1EaFM2f
dXmRIacc6q8KkGS21CyCtETY08k77/iOxxkdf4S2Kqa/FsRdFzGo9mvdcKOBl8yk
7F2gWJiaQDvnz0ZzOr2vD57e0BpA0bUKjLKnFrA2RiPyWkodvirMcmDoZPRrGejT
qRh32jTjhlx/uJ1N6XhokZcH/Pdkxbe+CoDZyGqMnYDYj35TkOccRHrbHQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMOplY8lW4xUXGs6xHb7edLZEt84MB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvdzZtVmp5VmJqRlJjYXpyRWR2dDUwdGtTM3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjl6AwQA
LY7AAwQAUF5cAwQAXHYnMA0GCSqGSIb3DQEBCwUAA4IBAQB6pSD8GzO1GnkpCVK2
3BilEOeP0eibnazzNsH+LLiBAbOlaD01cD550x6R1+5wIEqquwekobbz1o1zLQht
MuVVH5j+SJwcZANvaG848UpOIaM3Wj38PNk0r3YorJNcsEQ9MTBXgOvrIcecelSn
YL9jj9f3D4rRJZG6fCYjWhA7nt9mbFGWp6HmyX7NjJK4THOM7eiN3SFjv+21ox6V
UFoGph8yzWkOH+QuXrfTYh50VKFRa1slud/+HYVW8wUqTKOWn04oH+MYIigyGt/g
C3OqNZmLiqWAc6vSzfIPqfjja0G4Hs+IvV9XZU2Dpfd/zIQUVzYzXT0sHmIpA5RG
sZxF
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:18 2025 by rpki-client