Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/wZoRnYkXaB3LBHvjA3k_DMT0YDQ.roa
File: wZoRnYkXaB3LBHvjA3k_DMT0YDQ.roa (raw, json)
Hash identifier: 6+Utm7rPsur+uBo7Z2iqdvOnf5XDVGi41DyKmVdJOho=
Subject key identifier: C1:9A:11:9D:89:17:68:1D:CB:04:7B:E3:03:79:3F:0C:C4:F4:60:34
Certificate issuer: /CN=59bff5f16ecb268b1597da1b3ad30af40fce7717
Certificate serial: 0194258F06C0E0BBFBDEEEF7F52D0138DD88
Authority key identifier: 59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/wZoRnYkXaB3LBHvjA3k_DMT0YDQ.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54113
IP address blocks: 185.199.108.0/22 maxlen: 22
185.199.108.0/24 maxlen: 24
185.199.109.0/24 maxlen: 24
185.199.110.0/24 maxlen: 24
185.199.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:06:c0:e0:bb:fb:de:ee:f7:f5:2d:01:38:dd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59bff5f16ecb268b1597da1b3ad30af40fce7717
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c19a119d8917681dcb047be303793f0cc4f46034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c4:20:29:7d:08:6e:8a:07:d9:3f:b4:11:73:
59:2b:51:e4:39:2f:0f:77:fe:4b:33:cc:72:ff:91:
04:41:bb:f9:89:bd:b3:1a:d5:3d:1d:3f:6c:80:81:
4f:1b:c1:c5:a3:90:38:5f:d4:40:fd:31:55:be:c7:
07:a1:11:84:b5:3d:9a:55:63:52:8d:20:86:c7:08:
43:f7:1a:72:d5:76:ad:31:3d:7e:1d:a8:97:4a:30:
aa:ab:28:70:b6:2e:be:57:b8:f9:8f:dc:5a:e1:ae:
ab:41:76:e0:6e:d7:ea:58:13:d0:4b:cd:1c:30:c5:
48:a1:bb:de:57:60:7e:0c:0c:e4:2a:3e:a9:9a:ef:
7a:3c:27:bc:aa:79:10:93:e7:50:78:3d:51:19:0b:
02:bd:0d:53:67:ba:67:cf:2e:ba:e4:af:93:c1:96:
5b:c9:6f:6e:1d:42:d2:f7:a5:c5:3b:3e:e9:8c:e7:
d2:1a:4f:16:48:28:64:fa:2c:ae:47:f6:5a:f6:bc:
35:91:53:12:fa:de:0f:f1:9a:95:78:3d:5a:4e:6b:
9f:f3:a5:4c:b5:ea:cb:ea:31:ac:99:e3:3f:70:d8:
e4:72:56:70:d4:e2:df:86:3a:5c:1e:47:84:f8:e3:
d6:48:01:85:17:a3:8f:8e:12:ce:08:29:bb:39:0b:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:11:9D:89:17:68:1D:CB:04:7B:E3:03:79:3F:0C:C4:F4:60:34
X509v3 Authority Key Identifier:
keyid:59:BF:F5:F1:6E:CB:26:8B:15:97:DA:1B:3A:D3:0A:F4:0F:CE:77:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wb_18W7LJosVl9obOtMK9A_Odxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/wZoRnYkXaB3LBHvjA3k_DMT0YDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d5480-60a7-4193-bf34-bd849b04d10a/1/Wb_18W7LJosVl9obOtMK9A_Odxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.199.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:85:33:5a:65:86:b0:2f:93:40:58:d8:2f:84:30:16:9b:a6:
80:8a:b3:90:33:e3:85:50:05:3e:2f:fc:51:cf:32:4f:54:65:
1b:4a:e8:64:a7:53:77:2d:bc:47:ae:12:50:6d:d7:2f:41:05:
b7:4b:78:de:e1:a6:b0:68:0c:18:e3:11:4b:88:b5:cf:2c:8b:
d6:ed:d5:22:ab:8a:5d:06:28:6e:9f:6b:8a:d4:98:66:68:4c:
7f:5c:93:f1:86:c6:79:ff:a1:ce:53:be:16:6c:20:6c:7c:20:
3f:35:4d:4e:a9:b0:96:de:f2:19:3a:04:1e:a6:ed:fa:2b:46:
8b:f7:10:b7:cc:24:de:78:77:e9:96:37:8d:74:b8:30:1e:df:
8c:8e:d1:b5:b2:3f:7a:89:2b:17:9f:d4:45:b1:cb:97:63:6c:
ed:3b:b9:46:4f:71:a3:f2:89:d3:69:50:98:33:8a:17:b4:07:
97:cf:39:df:9c:22:19:71:c4:aa:4c:e7:17:9d:e6:ba:27:38:
55:00:14:7f:49:f7:8b:fa:b2:06:63:2e:16:c5:2a:95:54:52:
e2:fd:16:f6:15:f6:42:74:53:37:6c:72:f4:be:d3:67:1f:09:
26:63:f0:6f:ea:66:7b:15:f4:e2:54:13:9a:65:96:42:a5:8f:
9b:99:31:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwbA4Lv73u739S0BON2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YmZmNWYxNmVjYjI2OGIxNTk3ZGExYjNhZDMwYWY0MGZj
ZTc3MTcwHhcNMjUwMTAyMDU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTlhMTE5ZDg5MTc2ODFkY2IwNDdiZTMwMzc5M2YwY2M0ZjQ2MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMQgKX0IbooH2T+0EXNZK1HkOS8P
d/5LM8xy/5EEQbv5ib2zGtU9HT9sgIFPG8HFo5A4X9RA/TFVvscHoRGEtT2aVWNS
jSCGxwhD9xpy1XatMT1+HaiXSjCqqyhwti6+V7j5j9xa4a6rQXbgbtfqWBPQS80c
MMVIobveV2B+DAzkKj6pmu96PCe8qnkQk+dQeD1RGQsCvQ1TZ7pnzy665K+TwZZb
yW9uHULS96XFOz7pjOfSGk8WSChk+iyuR/Za9rw1kVMS+t4P8ZqVeD1aTmuf86VM
terL6jGsmeM/cNjkclZw1OLfhjpcHkeE+OPWSAGFF6OPjhLOCCm7OQtbkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMGaEZ2JF2gdywR74wN5PwzE9GA0MB8GA1UdIwQY
MBaAFFm/9fFuyyaLFZfaGzrTCvQPzncXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JfMThXN0xKb3NWbDlvYk90TUs5QV9PZHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDU0ODAtNjBhNy00MTkzLWJmMzQt
YmQ4NDliMDRkMTBhLzEvd1pvUm5Za1hhQjNMQkh2akEza19ETVQwWURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZDU0ODAtNjBhNy00MTkzLWJmMzQtYmQ4NDliMDRkMTBh
LzEvV2JfMThXN0xKb3NWbDlvYk90TUs5QV9PZHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucdsMA0G
CSqGSIb3DQEBCwUAA4IBAQCihTNaZYawL5NAWNgvhDAWm6aAirOQM+OFUAU+L/xR
zzJPVGUbSuhkp1N3LbxHrhJQbdcvQQW3S3je4aawaAwY4xFLiLXPLIvW7dUiq4pd
Bihun2uK1JhmaEx/XJPxhsZ5/6HOU74WbCBsfCA/NU1OqbCW3vIZOgQepu36K0aL
9xC3zCTeeHfpljeNdLgwHt+MjtG1sj96iSsXn9RFscuXY2ztO7lGT3Gj8onTaVCY
M4oXtAeXzznfnCIZccSqTOcXnea6JzhVABR/SfeL+rIGYy4WxSqVVFLi/Rb2FfZC
dFM3bHL0vtNnHwkmY/Bv6mZ7FfTiVBOaZZZCpY+bmTE1
-----END CERTIFICATE-----
Generated at Thu Apr 3 03:01:17 2025 by rpki-client