Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/WNroR83uzcjISqXHww42f1zYgLY.roa
File: WNroR83uzcjISqXHww42f1zYgLY.roa (raw, json)
Hash identifier: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=
Subject key identifier: 58:DA:E8:47:CD:EE:CD:C8:C8:4A:A5:C7:C3:0E:36:7F:5C:D8:80:B6
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019424B3DF99CB790FB908F3ADB97BE2551D
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/WNroR83uzcjISqXHww42f1zYgLY.roa
Signing time: Thu 02 Jan 2025 01:49:15 +0000
ROA not before: Thu 02 Jan 2025 01:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 212.84.192.0/20 maxlen: 32
212.99.128.0/18 maxlen: 32
2a02:e240::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:df:99:cb:79:0f:b9:08:f3:ad:b9:7b:e2:55:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jan 2 01:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58dae847cdeecdc8c84aa5c7c30e367f5cd880b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:72:e3:64:be:06:3e:03:c1:d3:d0:f6:58:04:
33:62:9a:fd:1e:76:00:bb:e5:a4:80:ca:69:ae:f2:
a0:9e:a3:2e:9f:d0:55:37:c3:94:89:df:25:ed:42:
aa:71:8c:8b:30:c9:13:14:16:71:47:b4:a5:52:b7:
a3:28:2f:bc:01:2d:f1:89:1c:94:fe:c2:83:e3:7e:
e1:96:44:94:79:0a:cd:8d:94:04:d2:5c:bb:ed:67:
53:6c:16:14:7d:ce:14:44:7e:2b:1d:0c:a0:36:5b:
54:e7:80:0f:b1:f6:f1:82:5c:4b:8a:83:bf:92:91:
7a:e1:67:bb:06:e9:7a:6e:91:3e:40:31:c8:b6:dc:
3e:62:f3:2b:b3:6b:0f:9e:f2:1c:6b:15:41:69:93:
be:fa:32:e7:5e:ad:97:bb:78:99:4c:01:9b:77:7b:
38:6d:ca:e4:cc:d1:6c:29:ab:0e:c9:9f:b2:93:59:
b1:12:1e:a8:4b:2f:ee:ad:1c:e9:ab:25:6d:bf:69:
df:f6:a1:66:53:38:07:21:31:cc:7b:b5:cd:f3:02:
e4:3b:a0:48:68:65:38:5c:72:c3:cf:94:a5:45:77:
11:10:34:aa:ec:08:f2:c7:83:6d:59:57:ec:1f:9c:
3d:4c:32:7a:dd:57:fd:36:d7:70:52:bb:d0:f5:65:
71:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DA:E8:47:CD:EE:CD:C8:C8:4A:A5:C7:C3:0E:36:7F:5C:D8:80:B6
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/WNroR83uzcjISqXHww42f1zYgLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.84.192.0/20
212.99.128.0/18
IPv6:
2a02:e240::/29
Signature Algorithm: sha256WithRSAEncryption
99:c1:3c:dd:d0:94:b9:38:b2:30:58:23:7f:c7:3f:9c:63:99:
b1:d7:9f:21:1b:d5:d8:96:42:e5:c3:e6:ad:2e:8a:a0:9e:97:
65:f2:52:12:51:8e:ad:da:38:6c:e3:ff:e6:02:0b:02:8f:22:
b2:8a:a4:91:54:94:07:81:17:d7:cf:fb:40:1a:ee:6a:7d:7a:
27:5d:5f:01:ce:fb:38:80:ac:25:a1:1a:b5:a8:d7:ef:81:99:
57:b5:e2:b1:a1:16:eb:ed:74:4f:7e:a7:5e:f3:79:61:e7:32:
75:32:50:b7:ff:67:62:9f:2a:c4:e9:4d:a0:c5:60:b8:8c:cc:
b3:01:d5:40:32:24:12:25:fa:73:00:70:e0:71:ae:c9:41:d8:
03:af:f0:dd:3b:9c:b0:30:e1:e7:6f:b5:ec:a0:5f:bd:4e:5d:
d3:a6:36:85:0d:bf:83:c8:fd:6b:1a:ca:7a:1b:c0:52:65:fc:
f8:d2:97:3b:ed:f9:6c:99:37:f5:9a:c0:bc:75:01:9d:9c:11:
fb:f6:a1:cd:e4:e2:13:69:e5:b7:60:3d:7c:e2:02:8d:1f:12:
bd:36:b6:b5:b6:f3:6d:e2:d9:fd:ad:b2:f1:a1:f9:4b:bd:69:
c1:ad:f1:9c:db:8d:21:65:0b:73:30:89:7f:66:cd:96:a4:57:
03:bf:14:f8
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQks9+Zy3kPuQjzrbl74lUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTEzYmRlYTU0Zjc2YjhhODU3MTJhZmRiNjE1MTg2YjMz
ODM4YzEwHhcNMjUwMTAyMDE0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGRhZTg0N2NkZWVjZGM4Yzg0YWE1YzdjMzBlMzY3ZjVjZDg4MGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHLjZL4GPgPB09D2WAQzYpr9HnYA
u+WkgMpprvKgnqMun9BVN8OUid8l7UKqcYyLMMkTFBZxR7SlUrejKC+8AS3xiRyU
/sKD437hlkSUeQrNjZQE0ly77WdTbBYUfc4URH4rHQygNltU54APsfbxglxLioO/
kpF64We7Bul6bpE+QDHIttw+YvMrs2sPnvIcaxVBaZO++jLnXq2Xu3iZTAGbd3s4
bcrkzNFsKasOyZ+yk1mxEh6oSy/urRzpqyVtv2nf9qFmUzgHITHMe7XN8wLkO6BI
aGU4XHLDz5SlRXcREDSq7Ajyx4NtWVfsH5w9TDJ63Vf9NtdwUrvQ9WVx0QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFja6EfN7s3IyEqlx8MONn9c2IC2MB8GA1UdIwQY
MBaAFEyhO96lT3a4qFcSr9thUYazODjBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYt
ZmM5MTQzM2QzNjdkLzEvV05yb1I4M3V6Y2pJU3FYSHd3NDJmMXpZZ0xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jNjJkMTMtN2YwMy00ZDE5LThiNDYtZmM5MTQzM2QzNjdk
LzEvVEtFNzNxVlBkcmlvVnhLdjIyRlJock00T01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQE1FTAAwQG
1GOAMA0EAgACMAcDBQMqAuJAMA0GCSqGSIb3DQEBCwUAA4IBAQCZwTzd0JS5OLIw
WCN/xz+cY5mx158hG9XYlkLlw+atLoqgnpdl8lISUY6t2jhs4//mAgsCjyKyiqSR
VJQHgRfXz/tAGu5qfXonXV8Bzvs4gKwloRq1qNfvgZlXteKxoRbr7XRPfqde83lh
5zJ1MlC3/2dinyrE6U2gxWC4jMyzAdVAMiQSJfpzAHDgca7JQdgDr/DdO5ywMOHn
b7XsoF+9Tl3TpjaFDb+DyP1rGsp6G8BSZfz40pc77flsmTf1msC8dQGdnBH79qHN
5OITaeW3YD184gKNHxK9Nra1tvNt4tn9rbLxoflLvWnBrfGc240hZQtzMIl/Zs2W
pFcDvxT4
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:22 2025 by rpki-client