Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/WTHS0_mrkntFTwKYSZ523FW3dY0.roa
File: WTHS0_mrkntFTwKYSZ523FW3dY0.roa (raw, json)
Hash identifier: KofyEyzWypys/rTtNM9UpTOaMnadl07Wa+WactOD2TQ=
Subject key identifier: 59:31:D2:D3:F9:AB:92:7B:45:4F:02:98:49:9E:76:DC:55:B7:75:8D
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01942823FF828EAD68401B85AE93A926E6EA
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/WTHS0_mrkntFTwKYSZ523FW3dY0.roa
Signing time: Thu 02 Jan 2025 17:50:35 +0000
ROA not before: Thu 02 Jan 2025 17:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 91.102.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:ff:82:8e:ad:68:40:1b:85:ae:93:a9:26:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jan 2 17:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5931d2d3f9ab927b454f0298499e76dc55b7758d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:6d:f0:db:93:79:80:da:96:be:b3:f3:d2:
92:15:8d:32:b8:ad:c7:21:d4:c8:73:46:98:b0:1c:
73:4a:10:bd:2b:12:10:f2:28:95:3b:14:70:4f:8c:
2e:29:21:5f:9d:7a:42:c7:cb:35:3e:5b:ca:2e:71:
66:48:cf:2c:5a:77:b8:95:a0:a2:7d:3e:37:55:95:
59:ff:31:02:bf:54:9f:b6:5b:6f:85:89:f9:d1:ae:
0e:7b:e8:9c:c8:8e:c5:57:dc:b6:44:58:30:aa:2e:
bc:42:fa:6f:76:51:58:1b:88:18:a9:1e:c2:8f:0b:
c3:2b:fc:2c:89:72:e6:12:2c:f3:03:80:33:11:90:
20:a4:9a:d7:d6:6a:c2:77:85:1d:0a:b0:7c:94:67:
8b:9b:89:f0:86:d5:68:23:40:6c:d1:80:6c:fd:b1:
1a:3b:18:dd:5d:b9:a5:55:12:42:1f:3a:18:82:54:
36:6b:39:2e:1e:8a:9f:20:ec:30:fd:59:6b:c4:d5:
ab:15:6e:fe:aa:47:43:33:d7:8b:7e:e9:7a:e8:61:
47:18:09:26:e9:a0:57:d3:5b:d6:91:d8:7a:0f:ee:
51:8a:05:57:aa:c4:4b:83:ae:dc:64:ae:21:04:5f:
8d:fa:21:69:19:71:35:c6:86:ec:65:88:7f:e4:10:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:D2:D3:F9:AB:92:7B:45:4F:02:98:49:9E:76:DC:55:B7:75:8D
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/WTHS0_mrkntFTwKYSZ523FW3dY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
10:03:07:61:4e:bd:56:24:2a:6c:52:ab:38:db:7b:ba:64:7b:
da:97:96:51:6d:c7:0e:01:1e:65:56:e1:5a:72:e8:ac:72:12:
28:6a:71:c2:93:9b:bf:54:47:47:f9:c8:3c:53:60:16:8f:39:
7d:ea:5c:cd:53:31:ac:48:32:5d:49:e1:3d:c2:14:b3:c5:a5:
5c:dd:3f:db:27:b0:d2:d5:21:21:33:63:a1:41:56:18:e1:13:
36:fe:c3:5e:e5:72:86:dd:22:33:dc:93:5d:8f:48:0c:c3:72:
e2:38:d5:c1:1c:4a:20:e5:0c:59:de:40:3d:5a:bc:ab:79:3c:
12:9e:0a:96:9c:de:21:3a:9e:3e:7f:d5:76:2a:eb:0c:6b:a0:
21:77:94:bd:69:02:2f:40:54:2c:d6:e4:34:33:d1:c3:ec:02:
9e:46:1d:0d:1a:85:fb:64:20:67:a4:db:12:91:25:45:e0:b4:
41:69:14:da:e5:41:3a:2d:a7:45:6d:0f:db:62:32:e8:6a:57:
b4:bb:8f:9a:4d:4b:da:4a:a2:f8:0e:05:c1:1a:47:79:f5:fa:
ea:5f:0f:4c:e0:28:7e:a7:30:41:b9:7e:f5:83:c4:7e:1f:d0:
e5:2b:51:2b:cb:07:a1:37:97:51:2a:c5:4c:c4:41:8e:f8:bc:
ad:8c:2c:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoI/+Cjq1oQBuFrpOpJubqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5
ZmMyYzkwHhcNMjUwMTAyMTc1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTMxZDJkM2Y5YWI5MjdiNDU0ZjAyOTg0OTllNzZkYzU1Yjc3NThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwVt8NuTeYDalr6z89KSFY0yuK3H
IdTIc0aYsBxzShC9KxIQ8iiVOxRwT4wuKSFfnXpCx8s1PlvKLnFmSM8sWne4laCi
fT43VZVZ/zECv1SftltvhYn50a4Oe+icyI7FV9y2RFgwqi68QvpvdlFYG4gYqR7C
jwvDK/wsiXLmEizzA4AzEZAgpJrX1mrCd4UdCrB8lGeLm4nwhtVoI0Bs0YBs/bEa
OxjdXbmlVRJCHzoYglQ2azkuHoqfIOww/VlrxNWrFW7+qkdDM9eLful66GFHGAkm
6aBX01vWkdh6D+5RigVXqsRLg67cZK4hBF+N+iFpGXE1xobsZYh/5BBHCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFkx0tP5q5J7RU8CmEmedtxVt3WNMB8GA1UdIwQY
MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct
MWM2ZWU0NGUxMWFkLzEvV1RIUzBfbXJrbnRGVHdLWVNaNTIzRlczZFkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk
LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW2akMA0G
CSqGSIb3DQEBCwUAA4IBAQAQAwdhTr1WJCpsUqs423u6ZHval5ZRbccOAR5lVuFa
cuischIoanHCk5u/VEdH+cg8U2AWjzl96lzNUzGsSDJdSeE9whSzxaVc3T/bJ7DS
1SEhM2OhQVYY4RM2/sNe5XKG3SIz3JNdj0gMw3LiONXBHEog5QxZ3kA9WryreTwS
ngqWnN4hOp4+f9V2KusMa6Ahd5S9aQIvQFQs1uQ0M9HD7AKeRh0NGoX7ZCBnpNsS
kSVF4LRBaRTa5UE6LadFbQ/bYjLoale0u4+aTUvaSqL4DgXBGkd59frqXw9M4Ch+
pzBBuX71g8R+H9DlK1ErywehN5dRKsVMxEGO+LytjCw1
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:35:22 2025 by rpki-client