Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa
File: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (raw, json)
Hash identifier: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=
Subject key identifier: C2:C6:39:93:8A:AA:1B:4C:58:1D:5D:3F:24:A2:8E:F8:C2:CD:D4:B7
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019423693977DD08A4835C26DDF821D3864D
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa
Signing time: Wed 01 Jan 2025 19:48:06 +0000
ROA not before: Wed 01 Jan 2025 19:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 45.89.212.0/22 maxlen: 24
45.94.8.0/22 maxlen: 24
45.94.10.0/24 maxlen: 24
94.26.93.0/24 maxlen: 24
94.26.95.0/24 maxlen: 24
94.26.97.0/24 maxlen: 24
94.26.98.0/23 maxlen: 24
94.26.101.0/24 maxlen: 24
94.26.103.0/24 maxlen: 24
94.26.109.0/24 maxlen: 24
94.190.196.0/22 maxlen: 24
94.190.196.0/24 maxlen: 24
94.190.197.0/24 maxlen: 24
94.190.198.0/24 maxlen: 24
94.190.199.0/24 maxlen: 24
104.255.128.0/21 maxlen: 24
153.94.56.0/21 maxlen: 24
185.9.212.0/22 maxlen: 24
185.49.216.0/22 maxlen: 24
185.75.80.0/22 maxlen: 24
185.83.148.0/23 maxlen: 24
185.83.150.0/23 maxlen: 24
185.94.76.0/23 maxlen: 24
185.94.78.0/23 maxlen: 24
192.190.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:39:77:dd:08:a4:83:5c:26:dd:f8:21:d3:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Jan 1 19:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2c639938aaa1b4c581d5d3f24a28ef8c2cdd4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:04:34:72:59:bf:bf:60:fe:2f:7a:5e:30:
52:79:e8:d0:ec:89:11:7c:1a:de:6e:11:36:bf:41:
63:87:a0:51:36:94:c1:78:f6:3a:bb:08:22:3a:46:
6c:a5:0a:01:24:a5:b6:82:6c:eb:d7:35:77:79:cd:
82:2c:1c:a2:6f:5d:e0:1a:24:f3:7d:70:cf:9b:36:
af:55:0f:fa:f4:b1:1b:a0:a0:2b:fe:e7:99:51:b3:
40:89:2c:82:3e:d8:3a:c9:3d:0e:58:70:d9:21:a6:
f4:97:b3:5b:98:d7:5b:c8:a7:80:b4:84:33:da:5c:
48:c9:db:05:a4:38:e2:c0:d7:1a:85:2d:6d:78:93:
e0:1b:c6:41:d3:8a:44:26:f9:31:7a:6f:c5:cf:99:
c9:a3:99:58:44:18:40:91:12:8e:21:dc:be:ec:a1:
0b:8d:b4:08:28:7b:15:9d:d1:f1:40:8e:f2:30:27:
40:69:10:d9:36:d6:68:42:33:5c:75:f7:d1:fc:92:
da:8e:47:41:48:34:a5:ce:8e:98:64:6f:41:af:92:
3a:d5:12:25:60:46:c4:43:fb:36:d4:cb:71:b0:73:
93:1d:f4:a9:11:b7:dc:6f:27:ad:2a:9e:b7:7d:da:
9e:77:2f:d2:54:3b:70:66:93:f5:b8:3c:6d:d6:5c:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C6:39:93:8A:AA:1B:4C:58:1D:5D:3F:24:A2:8E:F8:C2:CD:D4:B7
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.212.0/22
45.94.8.0/22
94.26.93.0/24
94.26.95.0/24
94.26.97.0-94.26.99.255
94.26.101.0/24
94.26.103.0/24
94.26.109.0/24
94.190.196.0/22
104.255.128.0/21
153.94.56.0/21
185.9.212.0/22
185.49.216.0/22
185.75.80.0/22
185.83.148.0/22
185.94.76.0/22
192.190.168.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:ec:e3:10:3e:d8:e8:75:e8:c9:87:2a:f9:84:92:19:eb:82:
0b:53:4c:44:0b:9e:bf:fd:e9:33:1d:1f:ff:03:47:45:0e:5d:
45:87:e2:0a:eb:f3:db:21:d0:bd:fe:7d:09:4d:eb:2a:2d:fe:
79:f6:c0:d4:0f:38:1b:03:cf:90:c2:b9:c6:6d:60:7f:c3:1d:
b3:b8:cc:6f:b9:67:d0:d2:f0:7f:9f:74:ae:1f:c3:24:0b:c0:
5b:b6:74:12:6a:35:f9:48:34:41:4c:a1:31:fc:5a:21:d9:bc:
14:d5:85:86:e4:88:7b:00:c1:4d:30:8a:09:5e:a6:b4:62:81:
97:27:1f:c3:3d:5e:29:dc:86:26:6b:bb:e3:76:cf:90:3a:30:
30:7b:72:b4:f8:e9:fd:64:57:5e:b7:a2:c8:9e:19:f1:21:09:
e1:53:61:89:a6:df:7f:84:01:41:cd:c8:d8:ab:b4:0d:50:26:
2f:ad:1b:e9:17:3f:e4:04:0d:69:72:17:24:83:39:fb:a3:0a:
46:c8:c4:85:a6:26:1c:5a:d9:c8:4a:40:11:f1:1e:74:ba:d4:
6f:72:65:47:4e:4b:3e:84:fa:5b:b8:05:ea:f5:f1:23:cf:ee:
b7:02:8f:d9:4f:a7:9e:4e:48:bf:26:fe:53:48:34:b7:7e:b5:
0a:bf:b3:60
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAZQjaTl33Qikg1wm3fgh04ZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWM0ZTBjZjVjOGRiYmI2YTY3Y2YxZGEyZjMxZjQxNjI3
NDlmZGQwHhcNMjUwMTAxMTk0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmM2Mzk5MzhhYWExYjRjNTgxZDVkM2YyNGEyOGVmOGMyY2RkNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8sENHJZv79g/i96XjBSeejQ7IkR
fBrebhE2v0Fjh6BRNpTBePY6uwgiOkZspQoBJKW2gmzr1zV3ec2CLByib13gGiTz
fXDPmzavVQ/69LEboKAr/ueZUbNAiSyCPtg6yT0OWHDZIab0l7NbmNdbyKeAtIQz
2lxIydsFpDjiwNcahS1teJPgG8ZB04pEJvkxem/Fz5nJo5lYRBhAkRKOIdy+7KEL
jbQIKHsVndHxQI7yMCdAaRDZNtZoQjNcdffR/JLajkdBSDSlzo6YZG9Br5I61RIl
YEbEQ/s21MtxsHOTHfSpEbfcbyetKp63fdqedy/SVDtwZpP1uDxt1lwg0wIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFMLGOZOKqhtMWB1dPySijvjCzdS3MB8GA1UdIwQY
MBaAFKScTgz1yNu7amfPHaLzH0FidJ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMt
ODhlZDhkNzcxN2E0LzEvd3NZNWs0cXFHMHhZSFYwX0pLS08tTUxOMUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZTE5YzYtZGVmZC00NTVmLTkwYTMtODhlZDhkNzcxN2E0
LzEvcEp4T0RQWEkyN3RxWjg4ZG92TWZRV0owbjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAi1Z1AME
Ai1eCAMEAF4aXQMEAF4aXzAMAwQAXhphAwQCXhpgAwQAXhplAwQAXhpnAwQAXhpt
AwQCXr7EAwQDaP+AAwQDmV44AwQCuQnUAwQCuTHYAwQCuUtQAwQCuVOUAwQCuV5M
AwQCwL6oMA0GCSqGSIb3DQEBCwUAA4IBAQAc7OMQPtjodejJhyr5hJIZ64ILU0xE
C56//ekzHR//A0dFDl1Fh+IK6/PbIdC9/n0JTesqLf559sDUDzgbA8+QwrnGbWB/
wx2zuMxvuWfQ0vB/n3SuH8MkC8BbtnQSajX5SDRBTKEx/Foh2bwU1YWG5Ih7AMFN
MIoJXqa0YoGXJx/DPV4p3IYma7vjds+QOjAwe3K0+On9ZFdet6LInhnxIQnhU2GJ
pt9/hAFBzcjYq7QNUCYvrRvpFz/kBA1pchckgzn7owpGyMSFpiYcWtnISkAR8R50
utRvcmVHTks+hPpbuAXq9fEjz+63Ao/ZT6eeTki/Jv5TSDS3frUKv7Ng
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:17 2025 by rpki-client