Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa
File: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (raw, json)
Hash identifier: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=
Subject key identifier: 5B:A8:16:FE:4E:0F:02:50:D7:58:D5:C7:8F:EE:EE:56:D6:84:85:4A
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01942445462B0D7C3914453AFBE7270E7D7B
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18530
IP address blocks: 31.13.214.0/24 maxlen: 24
37.60.142.0/24 maxlen: 24
37.61.225.0/24 maxlen: 24
37.61.230.0/24 maxlen: 24
46.243.160.0/24 maxlen: 24
87.120.58.0/24 maxlen: 24
87.120.62.0/24 maxlen: 24
87.120.247.0/24 maxlen: 24
87.121.102.0/24 maxlen: 24
93.123.25.0/24 maxlen: 24
93.123.111.0/24 maxlen: 24
94.156.40.0/23 maxlen: 23
94.156.43.0/24 maxlen: 24
94.156.62.0/23 maxlen: 23
94.156.132.0/23 maxlen: 23
94.156.145.0/24 maxlen: 24
94.156.224.0/23 maxlen: 23
158.120.252.0/23 maxlen: 23
188.212.110.0/24 maxlen: 24
192.175.2.0/24 maxlen: 24
198.160.152.0/24 maxlen: 24
203.17.237.0/24 maxlen: 24
203.25.139.0/24 maxlen: 24
203.78.161.0/24 maxlen: 24
203.78.163.0/24 maxlen: 24
203.78.164.0/24 maxlen: 24
203.78.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:46:2b:0d:7c:39:14:45:3a:fb:e7:27:0e:7d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ba816fe4e0f0250d758d5c78feeee56d684854a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:41:7e:b4:d3:57:bc:40:8c:f7:4f:14:3f:
d5:d5:c7:4b:e1:de:15:aa:d3:03:0e:e8:56:fc:d4:
51:39:76:47:c6:31:5f:cb:07:5c:4a:74:d7:9f:73:
10:8f:01:4c:8b:d6:72:c5:8e:bc:8e:fd:03:77:01:
03:36:ac:cd:2a:72:6a:fd:81:74:9e:d2:09:46:ce:
ee:67:cf:26:9f:13:a6:f5:d9:f3:0f:5b:68:a4:c5:
27:ce:a4:d6:06:c9:c0:49:a2:9f:4f:33:a3:6a:f2:
a1:76:41:b3:3c:9f:4e:e1:d4:47:71:f9:94:a2:5b:
7b:23:b8:54:dc:8a:ed:de:8f:56:3e:6f:02:d3:b9:
ab:5e:af:af:ed:e3:35:bf:1f:9f:0b:82:af:e2:c3:
16:8e:5a:2e:72:fd:18:83:3a:0f:0c:de:0c:56:fc:
cd:13:da:ac:ce:6e:b0:2f:38:ee:b9:02:9c:f9:16:
8c:50:5c:c3:53:c2:b8:34:7b:eb:df:f1:b9:1d:ce:
91:04:8a:87:4b:b5:85:80:08:36:1b:df:01:fe:0b:
fa:88:fd:df:91:b6:8e:d9:81:33:7d:d8:ca:f6:2d:
2b:83:f6:a9:43:70:bd:d9:50:52:47:10:bb:af:a2:
a8:50:5a:61:a1:9e:9d:11:6f:c5:15:83:72:c6:b3:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:16:FE:4E:0F:02:50:D7:58:D5:C7:8F:EE:EE:56:D6:84:85:4A
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.214.0/24
37.60.142.0/24
37.61.225.0/24
37.61.230.0/24
46.243.160.0/24
87.120.58.0/24
87.120.62.0/24
87.120.247.0/24
87.121.102.0/24
93.123.25.0/24
93.123.111.0/24
94.156.40.0/23
94.156.43.0/24
94.156.62.0/23
94.156.132.0/23
94.156.145.0/24
94.156.224.0/23
158.120.252.0/23
188.212.110.0/24
192.175.2.0/24
198.160.152.0/24
203.17.237.0/24
203.25.139.0/24
203.78.161.0/24
203.78.163.0-203.78.164.255
203.78.166.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:ba:c6:e0:1e:6e:77:6c:fe:2e:d8:0f:e4:b0:3f:9e:13:d5:
25:49:fb:f7:3a:19:e4:35:11:21:53:67:a1:d2:ea:f9:63:fc:
ac:d8:d0:35:6e:a6:47:18:e0:db:e3:be:7c:45:6f:d8:6a:9d:
24:61:da:8b:4b:af:12:eb:2c:50:d8:8a:dc:77:c9:fd:b8:f7:
35:24:ff:a9:b8:05:d0:19:06:2c:1c:1e:00:e0:c0:39:1b:fa:
57:ee:33:36:b3:bf:8d:4e:76:c8:74:04:41:2a:b9:7c:de:00:
3e:56:c9:98:c1:e4:24:6f:e8:1c:c7:69:de:a3:b1:6d:c3:7a:
98:53:2c:77:62:b5:56:56:44:ac:97:9a:6f:23:6d:e3:98:47:
fd:f5:d5:70:6d:1c:fd:54:8b:d2:0c:c0:ab:92:37:26:6d:cd:
b8:0b:f1:5a:48:08:76:91:ff:bd:7c:e4:09:86:2b:26:77:cf:
ea:d3:54:3d:97:9b:ba:15:41:e4:6f:e0:11:1f:e3:59:9c:5d:
4e:dc:25:b2:2a:4a:b0:23:ff:a2:a4:1c:21:1a:79:73:d8:b7:
35:8b:40:4a:1d:ae:60:a9:e1:b0:a3:c0:0d:69:25:a7:35:26:
ca:be:34:51:1a:70:e6:75:0d:21:57:0c:56:9a:e2:62:c8:f7:
88:93:67:35
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgISAZQkRUYrDXw5FEU6++cnDn17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjUwMTAxMjM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmE4MTZmZTRlMGYwMjUwZDc1OGQ1Yzc4ZmVlZWU1NmQ2ODQ4NTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+VBfrTTV7xAjPdPFD/V1cdL4d4V
qtMDDuhW/NRROXZHxjFfywdcSnTXn3MQjwFMi9ZyxY68jv0DdwEDNqzNKnJq/YF0
ntIJRs7uZ88mnxOm9dnzD1topMUnzqTWBsnASaKfTzOjavKhdkGzPJ9O4dRHcfmU
olt7I7hU3Irt3o9WPm8C07mrXq+v7eM1vx+fC4Kv4sMWjloucv0YgzoPDN4MVvzN
E9qszm6wLzjuuQKc+RaMUFzDU8K4NHvr3/G5Hc6RBIqHS7WFgAg2G98B/gv6iP3f
kbaO2YEzfdjK9i0rg/apQ3C92VBSRxC7r6KoUFphoZ6dEW/FFYNyxrMi3wIDAQAB
o4ICrDCCAqgwHQYDVR0OBBYEFFuoFv5ODwJQ11jVx4/u7lbWhIVKMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEvVzZnV19rNFBBbERYV05YSGotN3VWdGFFaFVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBAAf
DdYDBAAlPI4DBAAlPeEDBAAlPeYDBAAu86ADBABXeDoDBABXeD4DBABXePcDBABX
eWYDBABdexkDBABde28DBAFenCgDBABenCsDBAFenD4DBAFenIQDBABenJEDBAFe
nOADBAGeePwDBAC81G4DBADArwIDBADGoJgDBADLEe0DBADLGYsDBADLTqEwDAME
AMtOowMEAMtOpAMEActOpjANBgkqhkiG9w0BAQsFAAOCAQEAW7rG4B5ud2z+LtgP
5LA/nhPVJUn79zoZ5DURIVNnodLq+WP8rNjQNW6mRxjg2+O+fEVv2GqdJGHai0uv
EussUNiK3HfJ/bj3NST/qbgF0BkGLBweAODAORv6V+4zNrO/jU52yHQEQSq5fN4A
PlbJmMHkJG/oHMdp3qOxbcN6mFMsd2K1VlZErJeabyNt45hH/fXVcG0c/VSL0gzA
q5I3Jm3NuAvxWkgIdpH/vXzkCYYrJnfP6tNUPZebuhVB5G/gER/jWZxdTtwlsipK
sCP/oqQcIRp5c9i3NYtASh2uYKnhsKPADWklpzUmyr40URpw5nUNIVcMVpriYsj3
iJNnNQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:29 2025 by rpki-client