Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/wNwWeJHUtkLxBPgnpALlj40rkKM.roa
File: wNwWeJHUtkLxBPgnpALlj40rkKM.roa (raw, json)
Hash identifier: YICifZ1fm1GtiS8nLlpvGGd/vJOKE9DxSrD+m32m41c=
Subject key identifier: C0:DC:16:78:91:D4:B6:42:F1:04:F8:27:A4:02:E5:8F:8D:2B:90:A3
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 018CC86F38C91B0BB4E12144CF598164993F
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/wNwWeJHUtkLxBPgnpALlj40rkKM.roa
Signing time: Tue 02 Jan 2024 04:29:41 +0000
ROA not before: Tue 02 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210163
IP address blocks: 194.180.44.0/24 maxlen: 24
194.180.46.0/24 maxlen: 24
194.180.47.0/24 maxlen: 24
194.180.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:38:c9:1b:0b:b4:e1:21:44:cf:59:81:64:99:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Jan 2 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0dc167891d4b642f104f827a402e58f8d2b90a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:72:52:a5:d9:fd:af:c7:b8:60:48:64:13:
32:6f:50:dc:13:7c:4b:da:c2:4d:e0:62:d5:1e:bc:
a1:1f:1c:0c:7f:39:cb:68:74:bd:f0:ce:22:b1:7b:
12:1d:74:68:81:11:12:43:8a:2e:53:19:ff:d9:36:
b8:1b:31:eb:30:31:f0:a3:63:10:4a:23:13:14:f3:
ee:30:51:62:1b:e5:80:c4:18:41:e6:0b:36:6b:d9:
08:f7:25:83:e6:4d:fb:93:de:28:b5:e9:5c:05:41:
a2:77:dc:b2:79:cc:9e:38:a1:fe:77:e4:ec:22:46:
5c:26:36:c3:99:af:ea:44:a1:02:95:75:fd:c4:43:
5a:f1:59:84:f2:fb:e8:26:49:69:a0:dd:aa:54:90:
da:54:2e:d6:59:4d:c6:0f:49:d6:dd:b0:32:34:57:
83:aa:91:b2:e2:c8:62:01:9c:cf:5a:6b:54:2f:06:
e3:ac:c2:10:e9:4f:e8:d6:1c:dc:c4:55:13:bb:16:
5c:5b:d6:02:7a:1b:62:25:40:d2:e1:fa:56:a1:68:
07:30:fe:5b:0a:33:f8:f8:f5:1a:8c:7a:a0:1e:ed:
d8:44:f6:bd:53:1b:70:5c:0b:e1:3d:2a:e8:5d:e5:
56:dd:5d:8c:f1:f2:95:5b:29:dc:5c:14:e6:89:c1:
96:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DC:16:78:91:D4:B6:42:F1:04:F8:27:A4:02:E5:8F:8D:2B:90:A3
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/wNwWeJHUtkLxBPgnpALlj40rkKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.44.0/22
Signature Algorithm: sha256WithRSAEncryption
71:e5:fd:66:6b:b7:ac:92:f6:91:cf:4f:00:a2:01:31:c4:41:
86:0f:0d:36:2d:6f:43:ee:50:17:ca:33:ca:8f:ef:45:1b:6e:
f4:d5:3f:d4:dc:82:18:9c:b3:2a:7d:d8:4b:47:ff:0c:5b:f5:
ae:0b:0e:c5:e7:4c:c6:33:4b:3f:19:48:77:38:96:14:cc:b4:
27:0a:90:86:96:f5:1e:d5:bc:d1:93:a5:38:a3:b8:2d:3a:31:
fa:76:3c:f5:26:da:91:95:9f:c5:51:fe:dc:c5:cc:97:04:5d:
0e:c4:f7:36:2a:55:08:d0:e9:3c:ba:52:1d:ca:46:8b:43:20:
9b:66:08:16:ce:0f:af:9a:fa:3c:a8:c3:00:b7:2b:ab:e4:6a:
3b:52:71:6b:18:12:b9:d0:97:86:de:54:25:0e:21:27:04:c9:
72:dc:db:36:71:3d:6b:a4:68:2e:c8:d3:42:7e:5a:4f:dc:50:
be:7a:8c:d9:e9:55:7a:73:43:04:1f:8a:7e:22:b2:7e:d8:04:
0a:31:f1:4d:1f:c4:62:2e:78:94:8a:dc:e0:e8:99:40:08:02:
2c:10:95:33:50:c0:f8:dd:b7:7f:77:f3:db:51:2b:35:d4:b3:
0c:58:e5:65:4f:02:ca:a2:5e:8d:20:6f:a6:55:2e:19:52:5d:
40:66:8c:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbzjJGwu04SFEz1mBZJk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhODg1YzM3ZTc0N2JjZTIzZWU5MDk3ZTVmZjdlOTgzYmNi
YTBkYjQwHhcNMjQwMTAyMDQyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGRjMTY3ODkxZDRiNjQyZjEwNGY4MjdhNDAyZTU4ZjhkMmI5MGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibRyUqXZ/a/HuGBIZBMyb1DcE3xL
2sJN4GLVHryhHxwMfznLaHS98M4isXsSHXRogRESQ4ouUxn/2Ta4GzHrMDHwo2MQ
SiMTFPPuMFFiG+WAxBhB5gs2a9kI9yWD5k37k94otelcBUGid9yyecyeOKH+d+Ts
IkZcJjbDma/qRKEClXX9xENa8VmE8vvoJklpoN2qVJDaVC7WWU3GD0nW3bAyNFeD
qpGy4shiAZzPWmtULwbjrMIQ6U/o1hzcxFUTuxZcW9YCehtiJUDS4fpWoWgHMP5b
CjP4+PUajHqgHu3YRPa9UxtwXAvhPSroXeVW3V2M8fKVWyncXBTmicGWIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMDcFniR1LZC8QT4J6QC5Y+NK5CjMB8GA1UdIwQY
MBaAFBqIXDfnR7ziPukJfl/36YO8ug20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5Mzkt
YzE0MDJkMjYxNDMyLzEvd053V2VKSFV0a0x4QlBnbnBBTGxqNDBya0tNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNTQyMTQtNTJkNS00NmRjLTk5MzktYzE0MDJkMjYxNDMy
LzEvR29oY04tZEh2T0ktNlFsLVhfZnBnN3k2RGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrQsMA0G
CSqGSIb3DQEBCwUAA4IBAQBx5f1ma7eskvaRz08AogExxEGGDw02LW9D7lAXyjPK
j+9FG2701T/U3IIYnLMqfdhLR/8MW/WuCw7F50zGM0s/GUh3OJYUzLQnCpCGlvUe
1bzRk6U4o7gtOjH6djz1JtqRlZ/FUf7cxcyXBF0OxPc2KlUI0Ok8ulIdykaLQyCb
ZggWzg+vmvo8qMMAtyur5Go7UnFrGBK50JeG3lQlDiEnBMly3Ns2cT1rpGguyNNC
flpP3FC+eozZ6VV6c0MEH4p+IrJ+2AQKMfFNH8RiLniUitzg6JlACAIsEJUzUMD4
3bd/d/PbUSs11LMMWOVlTwLKol6NIG+mVS4ZUl1AZox9
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:13 2025 by rpki-client