Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/WxvsON4HsgDYWWMCHYm2diG-qCw.roa
File: WxvsON4HsgDYWWMCHYm2diG-qCw.roa (raw, json)
Hash identifier: J3RdQ2ldz36B3dQMlXtlpBB6bKkFotnu4Nxj+CcVeB0=
Subject key identifier: 5B:1B:EC:38:DE:07:B2:00:D8:59:63:02:1D:89:B6:76:21:BE:A8:2C
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 0186EEC9C9B5FC0FB0E4292D1BAA8CDA3AB8
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/WxvsON4HsgDYWWMCHYm2diG-qCw.roa
Signing time: Fri 17 Mar 2023 08:57:27 +0000
ROA not before: Fri 17 Mar 2023 08:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47524
IP address blocks: 176.240.0.0/16 maxlen: 24
185.26.68.0/24 maxlen: 24
185.26.68.0/22 maxlen: 24
185.26.69.0/24 maxlen: 24
185.26.70.0/24 maxlen: 24
185.26.71.0/24 maxlen: 24
94.55.96.0/22 maxlen: 24
94.55.112.0/22 maxlen: 24
94.55.116.0/22 maxlen: 24
94.55.124.0/23 maxlen: 24
94.55.120.0/23 maxlen: 24
94.55.122.0/23 maxlen: 24
94.55.127.0/24 maxlen: 24
94.55.126.0/24 maxlen: 24
24.133.0.0/16 maxlen: 24
94.55.64.0/20 maxlen: 24
94.55.80.0/21 maxlen: 24
94.55.88.0/22 maxlen: 24
94.54.0.0/15 maxlen: 24
46.196.0.0/15 maxlen: 24
24.133.152.0/22 maxlen: 24
24.133.156.0/22 maxlen: 24
178.233.0.0/16 maxlen: 24
2a00:1d58::/36 maxlen: 36
2a00:1d58::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ee:c9:c9:b5:fc:0f:b0:e4:29:2d:1b:aa:8c:da:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: Mar 17 08:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b1bec38de07b200d85963021d89b67621bea82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:2d:5c:4e:25:47:3e:e9:29:13:25:2e:c1:
9a:29:79:a7:94:ab:a1:63:00:45:92:64:a6:e5:32:
53:ee:fa:03:aa:c1:47:63:56:0b:17:96:53:ae:5e:
72:40:1f:17:47:6b:13:01:20:c9:fe:05:2c:8c:cb:
a7:d4:3e:8e:ac:68:ab:ea:83:eb:94:0c:16:35:10:
24:db:90:5c:9e:30:bb:0a:4c:54:98:15:cc:58:e7:
70:3b:2c:bc:1b:b1:d6:25:7e:cf:4f:0b:97:43:15:
a8:6f:23:09:47:a6:1b:0d:31:86:77:c7:11:c1:2b:
88:50:2f:ea:40:b1:e0:29:68:b3:25:34:51:33:2d:
84:48:bf:56:53:b3:be:e0:1c:7f:9b:53:a2:f9:92:
2d:60:fc:b3:5c:cf:9e:d3:cf:18:15:bb:58:2a:95:
6f:9a:a1:6c:c8:74:2d:33:f9:de:43:57:2e:99:20:
d6:cd:2a:20:d9:51:59:0f:8e:d7:8f:7b:a4:71:a6:
73:dd:47:e4:f1:4b:fc:63:6b:90:a0:a0:95:a7:81:
b2:81:f3:0f:20:13:79:cb:22:b6:a7:5e:db:77:70:
bf:22:e0:7d:26:1f:28:61:60:dd:6e:83:5b:bd:1e:
41:61:42:94:ec:be:8c:1c:52:5f:a9:9b:07:1e:84:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:EC:38:DE:07:B2:00:D8:59:63:02:1D:89:B6:76:21:BE:A8:2C
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/WxvsON4HsgDYWWMCHYm2diG-qCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.133.0.0/16
46.196.0.0/15
94.54.0.0/15
176.240.0.0/16
178.233.0.0/16
185.26.68.0/22
IPv6:
2a00:1d58::/29
Signature Algorithm: sha256WithRSAEncryption
64:9d:8e:ee:26:00:5a:0c:43:b8:f0:79:d2:6d:62:12:5f:b1:
5c:27:9c:c3:93:0d:49:5a:91:e3:3a:0b:cf:31:a0:5a:61:fe:
02:a1:24:a8:3c:da:f7:80:ec:19:08:89:a3:fb:fb:0f:b5:e9:
15:3c:51:07:0d:48:0f:3f:3f:03:08:02:b7:94:34:ec:c0:61:
3d:4a:31:05:5e:1c:0f:e7:c6:b3:b8:ea:7d:07:c2:e1:7d:bf:
2d:dc:85:a1:31:36:82:05:6e:c8:0d:f7:e9:50:55:8c:e8:ff:
83:c0:9c:37:68:e3:16:20:fd:10:9c:05:fc:30:9b:43:1c:dc:
39:50:0d:02:2c:52:dd:a9:a3:ad:84:fb:de:da:a3:5c:31:81:
57:6a:c2:1c:f3:77:d2:37:f4:91:4e:cb:30:1d:a1:89:e1:af:
ed:5f:86:ba:75:53:2a:9e:bd:64:d8:48:47:cf:09:71:c9:da:
fe:6d:57:5a:96:53:25:37:36:f5:7f:3e:3d:ee:8a:71:52:c4:
e1:7c:52:6c:a6:32:75:16:87:1b:fb:39:a3:ea:2d:ef:e8:6b:
fa:8d:4c:83:16:35:1d:2c:9a:5e:76:e5:df:81:03:1d:43:27:
0e:1c:b4:95:0e:16:6d:8c:c7:20:02:1d:37:88:56:9b:70:a8:
9c:8f:53:98
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYbuycm1/A+w5CktG6qM2jq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0
ZTg4NDcwHhcNMjMwMzE3MDg1NzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjFiZWMzOGRlMDdiMjAwZDg1OTYzMDIxZDg5YjY3NjIxYmVhODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcYtXE4lRz7pKRMlLsGaKXmnlKuh
YwBFkmSm5TJT7voDqsFHY1YLF5ZTrl5yQB8XR2sTASDJ/gUsjMun1D6OrGir6oPr
lAwWNRAk25BcnjC7CkxUmBXMWOdwOyy8G7HWJX7PTwuXQxWobyMJR6YbDTGGd8cR
wSuIUC/qQLHgKWizJTRRMy2ESL9WU7O+4Bx/m1Oi+ZItYPyzXM+e088YFbtYKpVv
mqFsyHQtM/neQ1cumSDWzSog2VFZD47Xj3ukcaZz3Ufk8Uv8Y2uQoKCVp4GygfMP
IBN5yyK2p17bd3C/IuB9Jh8oYWDdboNbvR5BYUKU7L6MHFJfqZsHHoSrRQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFFsb7DjeB7IA2FljAh2JtnYhvqgsMB8GA1UdIwQY
MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt
NmUxMjc3NGY4NTFlLzEvV3h2c09ONEhzZ0RZV1dNQ0hZbTJkaUctcUN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl
LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAlBAIAATAfAwMAGIUDAwEu
xAMDAV42AwMAsPADAwCy6QMEArkaRDANBAIAAjAHAwUDKgAdWDANBgkqhkiG9w0B
AQsFAAOCAQEAZJ2O7iYAWgxDuPB50m1iEl+xXCecw5MNSVqR4zoLzzGgWmH+AqEk
qDza94DsGQiJo/v7D7XpFTxRBw1IDz8/AwgCt5Q07MBhPUoxBV4cD+fGs7jqfQfC
4X2/LdyFoTE2ggVuyA336VBVjOj/g8CcN2jjFiD9EJwF/DCbQxzcOVANAixS3amj
rYT73tqjXDGBV2rCHPN30jf0kU7LMB2hieGv7V+GunVTKp69ZNhIR88Jccna/m1X
WpZTJTc29X8+Pe6KcVLE4XxSbKYydRaHG/s5o+ot7+hr+o1MgxY1HSyaXnbl34ED
HUMnDhy0lQ4WbYzHIAIdN4hWm3ConI9TmA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:06:22 2025 by rpki-client