Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wN8s3gQsiiWN1yc39yU1k2UdnBE.roa
File: wN8s3gQsiiWN1yc39yU1k2UdnBE.roa (raw, json)
Hash identifier: nsZWenE98GJZvMr1lWD/nyvvdrHK15e3lCbQcODG6FQ=
Subject key identifier: C0:DF:2C:DE:04:2C:8A:25:8D:D7:27:37:F7:25:35:93:65:1D:9C:11
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 019054C4BFB095ABAD5E4451FF1214F24A6A
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wN8s3gQsiiWN1yc39yU1k2UdnBE.roa
Signing time: Wed 26 Jun 2024 13:38:18 +0000
ROA not before: Wed 26 Jun 2024 13:38:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.80.28.0/24 maxlen: 24
45.80.30.0/24 maxlen: 24
45.80.31.0/24 maxlen: 24
86.62.28.0/24 maxlen: 24
86.62.29.0/24 maxlen: 24
86.62.30.0/24 maxlen: 24
86.62.31.0/24 maxlen: 24
185.81.127.0/24 maxlen: 24
193.228.139.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
194.36.33.0/24 maxlen: 24
194.107.160.0/24 maxlen: 24
194.107.161.0/24 maxlen: 24
194.107.162.0/24 maxlen: 24
194.107.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:c4:bf:b0:95:ab:ad:5e:44:51:ff:12:14:f2:4a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jun 26 13:38:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0df2cde042c8a258dd72737f7253593651d9c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:d3:14:fa:a3:97:3e:dd:e2:b5:d3:87:ba:
66:09:28:6d:6e:df:b4:85:a0:eb:3e:90:16:e7:36:
f5:b2:2b:67:72:a8:ab:d2:f1:73:41:77:88:75:06:
32:e4:34:93:b9:3e:64:7b:da:a2:a8:11:e9:e2:3f:
8e:5b:df:c3:0f:c2:e7:d2:06:b3:31:62:f5:ee:9c:
4c:32:da:e1:d8:bd:a2:b8:7d:28:c4:d1:b2:e5:95:
d2:6a:74:4a:68:6a:32:e0:f6:d1:da:80:fc:1c:60:
48:93:93:25:22:df:62:a9:8d:95:8a:3b:96:2f:83:
6e:d9:da:c5:7c:72:7d:d6:5d:b8:4a:40:c9:39:4c:
c5:57:71:26:2e:83:ab:cf:5b:f2:34:0f:67:2f:4b:
3b:50:20:2d:ae:43:9e:2f:65:bb:37:21:e4:57:f9:
70:ee:f8:13:8a:d0:f8:a6:96:99:40:76:dc:55:82:
14:5f:a2:ff:f0:70:2c:5d:ab:4a:08:bd:e1:d3:44:
6e:e1:df:f4:cc:97:de:7c:4e:a5:dc:f4:91:78:d9:
d5:32:77:f6:f9:ff:5d:56:6f:9c:c6:a9:57:20:30:
26:13:d0:81:19:d7:e9:a5:6e:8f:f8:46:84:29:ea:
0a:4d:39:1f:44:da:7a:30:b1:de:35:4a:1c:00:5d:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:2C:DE:04:2C:8A:25:8D:D7:27:37:F7:25:35:93:65:1D:9C:11
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wN8s3gQsiiWN1yc39yU1k2UdnBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.28.0/24
45.80.30.0/23
86.62.28.0/22
185.81.127.0/24
193.228.139.0/24
194.36.32.0/23
194.107.160.0/22
Signature Algorithm: sha256WithRSAEncryption
04:8d:cd:8c:8e:4a:c8:9b:3f:93:12:7a:32:bd:71:b0:de:ab:
1a:fe:bf:48:ef:be:8f:97:27:c8:bf:7d:1a:8e:01:48:e2:aa:
69:a9:19:00:d2:11:0f:64:e7:9f:c0:e3:30:b9:d6:11:1c:e3:
45:0d:8b:7f:16:1c:06:36:7b:a4:9f:89:ae:a7:1b:3f:22:c3:
89:23:88:6c:42:a3:d9:14:43:98:38:13:eb:41:81:64:9b:0b:
4e:29:67:41:7c:55:47:1c:cf:3a:d0:39:08:11:e5:37:43:47:
ef:28:c3:1a:b7:58:a3:a7:db:54:2e:ab:1a:57:d0:f0:3a:62:
d1:d6:f1:56:c5:a9:86:bb:a4:ee:37:ba:4e:21:dd:7e:0f:c6:
6f:d4:97:25:cd:31:ef:c1:33:81:36:c1:70:fc:b8:59:87:f0:
a3:86:49:24:80:32:ff:a6:45:d5:72:60:0a:27:e7:b1:ad:86:
74:2f:9a:71:74:f6:87:47:ce:fb:c3:66:c3:6d:7f:c3:e4:fb:
0c:3e:ca:6b:5d:83:96:4a:23:d0:0d:c8:44:eb:8f:2c:98:85:
1c:6f:93:ca:97:f8:33:8f:70:0a:2f:ee:63:be:54:b9:14:b9:
c1:59:62:57:84:10:38:c4:4f:8f:07:c4:7f:a0:57:8e:00:f2:
8f:40:65:7f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZBUxL+wlautXkRR/xIU8kpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3
NDcwYTcwHhcNMjQwNjI2MTMzODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGRmMmNkZTA0MmM4YTI1OGRkNzI3MzdmNzI1MzU5MzY1MWQ5YzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMjTFPqjlz7d4rXTh7pmCShtbt+0
haDrPpAW5zb1sitncqir0vFzQXeIdQYy5DSTuT5ke9qiqBHp4j+OW9/DD8Ln0gaz
MWL17pxMMtrh2L2iuH0oxNGy5ZXSanRKaGoy4PbR2oD8HGBIk5MlIt9iqY2VijuW
L4Nu2drFfHJ91l24SkDJOUzFV3EmLoOrz1vyNA9nL0s7UCAtrkOeL2W7NyHkV/lw
7vgTitD4ppaZQHbcVYIUX6L/8HAsXatKCL3h00Ru4d/0zJfefE6l3PSReNnVMnf2
+f9dVm+cxqlXIDAmE9CBGdfppW6P+EaEKeoKTTkfRNp6MLHeNUocAF3s8wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFMDfLN4ELIoljdcnN/clNZNlHZwRMB8GA1UdIwQY
MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt
ZWU5NWI2Y2MzNDc0LzEvd044czNnUXNpaVdOMXljMzl5VTFrMlVkbkJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDItZWU5NWI2Y2MzNDc0
LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALVAcAwQB
LVAeAwQCVj4cAwQAuVF/AwQAweSLAwQBwiQgAwQCwmugMA0GCSqGSIb3DQEBCwUA
A4IBAQAEjc2MjkrImz+TEnoyvXGw3qsa/r9I776PlyfIv30ajgFI4qppqRkA0hEP
ZOefwOMwudYRHONFDYt/FhwGNnukn4mupxs/IsOJI4hsQqPZFEOYOBPrQYFkmwtO
KWdBfFVHHM860DkIEeU3Q0fvKMMat1ijp9tULqsaV9DwOmLR1vFWxamGu6TuN7pO
Id1+D8Zv1JclzTHvwTOBNsFw/LhZh/CjhkkkgDL/pkXVcmAKJ+exrYZ0L5pxdPaH
R877w2bDbX/D5PsMPsprXYOWSiPQDchE648smIUcb5PKl/gzj3AKL+5jvlS5FLnB
WWJXhBA4xE+PB8R/oFeOAPKPQGV/
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:15:39 2025 by rpki-client