Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/W6TXRuSHj7Av0ycVagFuBFyueug.roa
File: W6TXRuSHj7Av0ycVagFuBFyueug.roa (raw, json)
Hash identifier: zzCpwhscwcrboKFL/7dxhPDQ5vjcVhPtCOUJlM4/l38=
Subject key identifier: 5B:A4:D7:46:E4:87:8F:B0:2F:D3:27:15:6A:01:6E:04:5C:AE:7A:E8
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 01941FFA4FD19C503AF5A749B6C9D39D113E
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/W6TXRuSHj7Av0ycVagFuBFyueug.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16027
IP address blocks: 193.168.160.0/22 maxlen: 22
193.168.161.0/24 maxlen: 24
217.71.64.0/20 maxlen: 20
217.71.65.0/24 maxlen: 24
217.71.67.0/24 maxlen: 24
217.71.68.0/24 maxlen: 24
217.71.69.0/24 maxlen: 24
217.71.70.0/24 maxlen: 24
217.71.73.0/24 maxlen: 24
217.71.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4f:d1:9c:50:3a:f5:a7:49:b6:c9:d3:9d:11:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ba4d746e4878fb02fd327156a016e045cae7ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:63:21:9b:1b:c6:c8:03:0a:83:ce:ff:c9:
1f:58:f3:18:60:df:a6:bd:27:d2:c3:43:f4:d5:a7:
35:89:d5:c0:1a:5c:bb:57:ba:df:3e:58:d0:72:53:
f5:2c:28:30:d7:97:ef:6d:fc:7c:bb:93:0c:bc:6b:
9b:81:b6:94:4b:3a:24:e8:7e:79:b9:c3:cb:f8:1a:
e7:74:63:33:8b:7b:3d:a9:cc:2b:43:5f:98:c7:e9:
07:d6:0e:f7:1c:42:24:ea:55:f8:f4:1f:64:74:46:
a0:67:5f:a8:95:eb:04:53:3d:81:d7:d1:99:e3:6d:
8b:2e:76:1e:46:6a:8b:04:24:10:d7:9d:97:8a:b7:
70:47:d8:a3:4a:c8:73:2f:b5:88:45:e8:cc:4f:3a:
3a:26:26:8f:ac:41:d6:96:0e:5f:ee:63:b4:0c:6b:
3b:66:d5:da:c8:77:c7:6c:cb:e0:b8:2c:e1:4c:b9:
3b:4e:af:82:28:0c:e0:85:51:e8:b9:d7:1c:75:0f:
ff:40:81:f3:66:dc:e5:04:4f:00:da:62:e6:8e:6e:
4b:52:03:90:5f:bc:c5:ef:f7:a6:95:36:5a:a9:c0:
78:2b:02:a4:61:9a:80:08:7b:06:5f:9c:9e:0c:c1:
90:ec:b6:aa:bb:0c:9a:c4:11:38:df:70:89:3d:78:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A4:D7:46:E4:87:8F:B0:2F:D3:27:15:6A:01:6E:04:5C:AE:7A:E8
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/W6TXRuSHj7Av0ycVagFuBFyueug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.160.0/22
217.71.64.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:ce:27:e0:8a:7a:c3:9e:21:37:b4:6e:72:72:c3:7d:67:f9:
ff:7b:6c:56:ee:d2:42:41:0c:7e:a0:ee:84:68:98:c9:9c:54:
d9:7d:78:8f:c2:b4:9e:f3:80:ce:78:01:7c:41:22:a7:81:d3:
28:fc:8a:b4:6d:a4:e4:9e:0b:e9:21:01:7e:4e:b9:2a:34:c6:
74:89:da:db:dc:08:25:10:63:a1:7a:2d:a1:a5:e6:57:75:66:
bc:6f:4a:30:02:2a:0e:36:76:72:2d:fa:74:f7:45:7f:ce:61:
97:91:34:53:25:77:0b:9d:17:4d:cc:46:85:c8:da:19:80:94:
0d:bd:dc:27:19:62:75:f9:03:29:f2:bc:77:08:d6:c2:24:14:
51:72:f5:33:84:f4:c5:51:6d:be:08:8f:b4:93:bb:b7:23:13:
af:fb:4d:31:d6:f8:68:e9:b9:4b:de:ba:67:0e:ec:ad:2c:b0:
24:90:a4:ef:e4:f1:0c:52:9c:0c:24:19:3e:68:8e:f1:0b:39:
c7:8f:4f:9c:23:dd:01:29:e3:55:0f:c6:64:76:11:fe:f5:8c:
a4:d1:50:47:6c:ff:88:ce:81:59:de:18:c4:d9:f9:e9:98:2b:
54:10:d7:95:46:12:1b:72:44:4e:12:dc:fe:65:1c:e1:e1:9a:
fc:c2:08:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+k/RnFA69adJtsnTnRE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmE1N2UxNzA3ZTQzYjJmYTk3ZmNlYjA3OGE1ZDQ2MGU1
NmMxYmYwHhcNMjUwMTAxMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmE0ZDc0NmU0ODc4ZmIwMmZkMzI3MTU2YTAxNmUwNDVjYWU3YWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviZjIZsbxsgDCoPO/8kfWPMYYN+m
vSfSw0P01ac1idXAGly7V7rfPljQclP1LCgw15fvbfx8u5MMvGubgbaUSzok6H55
ucPL+BrndGMzi3s9qcwrQ1+Yx+kH1g73HEIk6lX49B9kdEagZ1+olesEUz2B19GZ
422LLnYeRmqLBCQQ152XirdwR9ijSshzL7WIRejMTzo6JiaPrEHWlg5f7mO0DGs7
ZtXayHfHbMvguCzhTLk7Tq+CKAzghVHoudccdQ//QIHzZtzlBE8A2mLmjm5LUgOQ
X7zF7/emlTZaqcB4KwKkYZqACHsGX5yeDMGQ7LaquwyaxBE433CJPXg9TQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFuk10bkh4+wL9MnFWoBbgRcrnroMB8GA1UdIwQY
MBaAFF66V+FwfkOy+pf86weKXUYOVsG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2Mt
YjU5NzI3MDliYjAyLzEvVzZUWFJ1U0hqN0F2MHljVmFnRnVCRnl1ZXVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2MtYjU5NzI3MDliYjAy
LzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwaigAwQE
2UdAMA0GCSqGSIb3DQEBCwUAA4IBAQDDzifginrDniE3tG5ycsN9Z/n/e2xW7tJC
QQx+oO6EaJjJnFTZfXiPwrSe84DOeAF8QSKngdMo/Iq0baTkngvpIQF+TrkqNMZ0
idrb3AglEGOhei2hpeZXdWa8b0owAioONnZyLfp090V/zmGXkTRTJXcLnRdNzEaF
yNoZgJQNvdwnGWJ1+QMp8rx3CNbCJBRRcvUzhPTFUW2+CI+0k7u3IxOv+00x1vho
6blL3rpnDuytLLAkkKTv5PEMUpwMJBk+aI7xCznHj0+cI90BKeNVD8ZkdhH+9Yyk
0VBHbP+IzoFZ3hjE2fnpmCtUENeVRhIbckROEtz+ZRzh4Zr8wggu
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:12 2025 by rpki-client