Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WKZVBfiH3D-TaVNaT-guvBGFp_0.roa
File: WKZVBfiH3D-TaVNaT-guvBGFp_0.roa (raw, json)
Hash identifier: 7I4NYsd4EqSm/aWgUmyrlHRu1UUyGZmKClM66rDJf4U=
Subject key identifier: 58:A6:55:05:F8:87:DC:3F:93:69:53:5A:4F:E8:2E:BC:11:85:A7:FD
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 018F8B6B6ED0E03D602DCF9350B227F90012
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WKZVBfiH3D-TaVNaT-guvBGFp_0.roa
Signing time: Sat 18 May 2024 11:17:04 +0000
ROA not before: Sat 18 May 2024 11:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.128.248.0/22 maxlen: 24
95.82.0.0/20 maxlen: 20
109.111.32.0/20 maxlen: 24
109.111.44.0/22 maxlen: 24
176.221.16.0/21 maxlen: 21
176.221.24.0/22 maxlen: 24
176.221.26.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8b:6b:6e:d0:e0:3d:60:2d:cf:93:50:b2:27:f9:00:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: May 18 11:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58a65505f887dc3f9369535a4fe82ebc1185a7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:b2:16:14:42:be:95:25:30:0a:79:e8:23:
42:5b:20:ff:77:d1:b4:f9:72:bd:4d:1b:c3:e1:fb:
ac:08:66:57:0b:44:14:a4:6e:7e:92:92:2a:d0:3f:
71:b7:a4:97:57:b6:56:ae:5d:85:4e:7f:7a:13:c8:
95:43:2f:07:55:6a:1e:a9:3c:b7:50:a1:b6:81:99:
54:0c:72:66:31:81:70:f0:d9:1c:ed:37:46:a0:e5:
e5:39:4b:57:dc:cb:82:06:d5:37:76:d4:80:5d:fb:
1c:11:a1:3d:db:3a:8c:56:1f:5c:52:19:1d:48:bb:
36:60:14:a8:01:74:85:06:ed:35:b9:e0:03:2e:78:
c8:88:67:e1:f6:ff:4a:c4:79:aa:29:30:23:44:cc:
94:36:12:f2:aa:1b:68:ec:69:d3:95:64:c0:7e:34:
83:82:bc:d1:f0:4c:ff:0a:86:2e:d8:fe:3d:81:c0:
1b:fd:15:f4:dd:db:a4:86:40:e8:e3:83:b4:70:cd:
ae:5a:95:ce:d6:25:5b:d2:3b:da:46:b4:f9:11:b3:
b3:06:75:6b:54:c7:21:e2:e8:e5:78:5d:81:e3:80:
aa:ea:c9:15:69:15:88:34:a9:6a:d3:c1:df:0b:e2:
54:da:f5:e9:1c:0e:fe:2f:b1:9c:d0:45:c4:52:27:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:55:05:F8:87:DC:3F:93:69:53:5A:4F:E8:2E:BC:11:85:A7:FD
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/WKZVBfiH3D-TaVNaT-guvBGFp_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.248.0/22
95.82.0.0/20
109.111.32.0/20
176.221.16.0-176.221.27.255
Signature Algorithm: sha256WithRSAEncryption
3d:c7:16:ea:08:a1:d5:88:d2:dc:b0:38:b9:0e:59:92:aa:a1:
7d:5e:ce:60:e3:37:73:9c:ae:f5:11:10:bd:ad:b2:dc:21:5f:
4b:5e:3b:99:4b:c1:0c:be:cb:ae:8e:59:4e:ee:84:59:2c:75:
14:0e:50:2f:0a:69:6d:83:5b:75:bd:1e:84:d0:c1:a2:92:36:
a6:e1:65:4a:f1:9d:6b:41:a5:74:bb:fb:a3:da:4a:66:1f:76:
10:05:13:39:d5:0b:f2:25:30:5b:16:ec:e3:de:6d:56:8d:23:
c5:cc:cf:0e:5c:ba:2f:9b:8b:7a:23:72:2e:74:55:5d:66:03:
02:81:99:90:99:6a:32:96:32:0d:26:31:93:22:af:f7:72:b1:
c9:ef:05:78:15:5a:37:00:1f:11:36:20:23:ee:7c:a9:95:d9:
83:fc:85:26:cd:73:ed:90:cb:c4:d0:78:01:23:1b:f6:73:2b:
97:61:ad:3a:0b:f0:0f:1c:ad:b6:04:c5:5c:bc:87:2d:70:5a:
68:5e:5c:ad:ae:bd:87:e7:2c:a8:7e:40:9a:67:14:9a:43:b5:
15:e3:26:78:44:29:79:99:a7:6d:a1:44:18:8c:53:d5:6c:9d:
bc:20:4f:ec:5b:67:4a:8a:00:0d:8d:2a:6f:5e:b9:79:7c:a9:
ea:d2:a7:d1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAY+La27Q4D1gLc+TULIn+QASMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjQwNTE4MTExNzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGE2NTUwNWY4ODdkYzNmOTM2OTUzNWE0ZmU4MmViYzExODVhN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJCyFhRCvpUlMAp56CNCWyD/d9G0
+XK9TRvD4fusCGZXC0QUpG5+kpIq0D9xt6SXV7ZWrl2FTn96E8iVQy8HVWoeqTy3
UKG2gZlUDHJmMYFw8Nkc7TdGoOXlOUtX3MuCBtU3dtSAXfscEaE92zqMVh9cUhkd
SLs2YBSoAXSFBu01ueADLnjIiGfh9v9KxHmqKTAjRMyUNhLyqhto7GnTlWTAfjSD
grzR8Ez/CoYu2P49gcAb/RX03dukhkDo44O0cM2uWpXO1iVb0jvaRrT5EbOzBnVr
VMch4ujleF2B44Cq6skVaRWINKlq08HfC+JU2vXpHA7+L7Gc0EXEUidhKwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFimVQX4h9w/k2lTWk/oLrwRhaf9MB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvV0taVkJmaUgzRC1UYVZOYVQtZ3V2QkdGcF8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCJYD4AwQE
X1IAAwQEbW8gMAwDBASw3RADBAKw3RgwDQYJKoZIhvcNAQELBQADggEBAD3HFuoI
odWI0tywOLkOWZKqoX1ezmDjN3OcrvUREL2tstwhX0teO5lLwQy+y66OWU7uhFks
dRQOUC8KaW2DW3W9HoTQwaKSNqbhZUrxnWtBpXS7+6PaSmYfdhAFEznVC/IlMFsW
7OPebVaNI8XMzw5cui+bi3ojci50VV1mAwKBmZCZajKWMg0mMZMir/dyscnvBXgV
WjcAHxE2ICPufKmV2YP8hSbNc+2Qy8TQeAEjG/ZzK5dhrToL8A8crbYExVy8hy1w
WmheXK2uvYfnLKh+QJpnFJpDtRXjJnhEKXmZp22hRBiMU9VsnbwgT+xbZ0qKAA2N
Km9euXl8qerSp9E=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:28:51 2025 by rpki-client