Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/WVsQ8JQ7ouSWbjpcDUguYxc6wSY.roa
File: WVsQ8JQ7ouSWbjpcDUguYxc6wSY.roa (raw, json)
Hash identifier: W9/H7OIPhZvgRrbbQ8srNIO74WrvizLwvNhXIcqtBwc=
Subject key identifier: 59:5B:10:F0:94:3B:A2:E4:96:6E:3A:5C:0D:48:2E:63:17:3A:C1:26
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019507408106AA1263A8AC4B3D7EFBBDEB24
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/WVsQ8JQ7ouSWbjpcDUguYxc6wSY.roa
Signing time: Sat 15 Feb 2025 01:37:02 +0000
ROA not before: Sat 15 Feb 2025 01:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.226.0/23 maxlen: 24
212.116.236.0/22 maxlen: 24
212.116.236.0/23 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:07:40:81:06:aa:12:63:a8:ac:4b:3d:7e:fb:bd:eb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Feb 15 01:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=595b10f0943ba2e4966e3a5c0d482e63173ac126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:b5:37:8d:b2:09:bd:7a:90:37:80:be:5d:
47:29:d4:26:af:e6:91:94:8c:85:8b:3f:4e:a8:de:
52:62:e0:85:e3:2a:23:b1:aa:50:2a:12:bb:98:0c:
6d:7c:28:31:c7:82:0c:fb:c9:38:34:8a:6a:91:d7:
d4:25:18:52:24:13:5e:9f:66:c2:62:67:7c:84:99:
a8:4a:b2:f8:bf:7b:0d:62:4a:9c:dc:92:db:a1:59:
9a:e9:a8:a3:2e:a4:71:a3:cd:08:39:a2:52:ac:15:
74:ef:5b:3f:ec:a1:73:12:9a:94:f5:52:3e:82:f8:
33:8a:4b:ec:97:2f:0a:6e:8d:78:c3:96:79:f9:d4:
e8:0a:96:b4:a6:3b:c1:0f:bd:58:e6:fd:8e:4b:1a:
24:50:fd:06:b1:74:65:3e:97:1b:05:c3:c2:79:5d:
75:c1:ea:a5:ed:e5:63:3c:08:ec:53:b3:eb:c6:6f:
6a:5b:c2:ea:ca:a8:bc:4c:52:58:b2:c4:ac:88:46:
d6:dd:4b:de:f4:10:42:36:50:bf:b1:0a:23:64:a0:
5e:eb:e3:33:89:63:1d:8d:fe:df:a4:f8:f3:46:64:
5a:26:48:3e:f5:5a:57:e3:62:d6:10:c1:03:73:31:
b1:74:6d:60:70:ac:b5:ee:50:f4:b0:18:b1:e9:a3:
ea:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5B:10:F0:94:3B:A2:E4:96:6E:3A:5C:0D:48:2E:63:17:3A:C1:26
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/WVsQ8JQ7ouSWbjpcDUguYxc6wSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/23
212.116.236.0/22
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c8:1d:39:4c:19:09:b6:87:53:dc:4f:3c:13:51:2e:4b:b4:
ed:04:dc:0d:47:30:4e:d3:94:25:57:75:f1:22:d0:0b:28:35:
d5:0d:64:33:94:a5:53:37:ec:94:f3:05:a6:2d:0a:f9:cc:07:
da:12:4b:23:39:cc:40:b5:d2:3f:7c:13:b8:9a:11:02:5a:0c:
27:16:2c:c9:ca:f6:f7:50:b7:2c:fd:2c:90:e1:5f:98:cc:0d:
e1:d5:4c:32:62:24:d1:30:2f:4e:73:43:3f:45:2a:a3:24:01:
81:2e:fc:54:37:c9:15:7f:bc:92:e3:01:c0:8e:08:24:1e:dc:
29:29:1b:bc:b1:ee:14:03:bd:d7:fb:d9:a9:7e:bb:b7:fb:97:
23:c8:ea:ed:02:d0:a9:6a:9a:c2:5b:bf:37:c7:88:f0:50:73:
70:99:94:2b:ee:2c:25:cf:0b:d2:ed:c0:3f:96:01:2b:f5:2a:
63:5f:8c:92:2a:1c:50:b4:c9:b7:f0:a7:ca:e1:1c:02:db:31:
f6:df:3e:3e:a9:71:c0:46:f7:3d:ac:eb:80:3f:90:e9:44:b2:
ad:3f:23:ac:7c:9f:af:49:53:ae:9d:66:3f:53:cf:a1:07:4c:
81:be:9e:dc:a6:77:03:8a:a1:93:57:c6:60:0e:b9:e6:80:77:
48:f1:34:ca
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZUHQIEGqhJjqKxLPX77veskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjUwMjE1MDEzNzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTViMTBmMDk0M2JhMmU0OTY2ZTNhNWMwZDQ4MmU2MzE3M2FjMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfe1N42yCb16kDeAvl1HKdQmr+aR
lIyFiz9OqN5SYuCF4yojsapQKhK7mAxtfCgxx4IM+8k4NIpqkdfUJRhSJBNen2bC
Ymd8hJmoSrL4v3sNYkqc3JLboVma6aijLqRxo80IOaJSrBV071s/7KFzEpqU9VI+
gvgzikvsly8Kbo14w5Z5+dToCpa0pjvBD71Y5v2OSxokUP0GsXRlPpcbBcPCeV11
weql7eVjPAjsU7Prxm9qW8Lqyqi8TFJYssSsiEbW3Uve9BBCNlC/sQojZKBe6+Mz
iWMdjf7fpPjzRmRaJkg+9VpX42LWEMEDczGxdG1gcKy17lD0sBix6aPquQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFlbEPCUO6Lklm46XA1ILmMXOsEmMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvV1ZzUThKUTdvdVNXYmpwY0RVZ3VZeGM2d1NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQB1HTiAwQC
1HTsAwQA1HT2MA0GCSqGSIb3DQEBCwUAA4IBAQAlyB05TBkJtodT3E88E1EuS7Tt
BNwNRzBO05QlV3XxItALKDXVDWQzlKVTN+yU8wWmLQr5zAfaEksjOcxAtdI/fBO4
mhECWgwnFizJyvb3ULcs/SyQ4V+YzA3h1UwyYiTRMC9Oc0M/RSqjJAGBLvxUN8kV
f7yS4wHAjggkHtwpKRu8se4UA73X+9mpfru3+5cjyOrtAtCpaprCW783x4jwUHNw
mZQr7iwlzwvS7cA/lgEr9SpjX4ySKhxQtMm38KfK4RwC2zH23z4+qXHARvc9rOuA
P5DpRLKtPyOsfJ+vSVOunWY/U8+hB0yBvp7cpncDiqGTV8ZgDrnmgHdI8TTK
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:23 2025 by rpki-client