Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/w-LQVMlaL9SYt8z7KkkTQ7lBPqg.roa
File: w-LQVMlaL9SYt8z7KkkTQ7lBPqg.roa (raw, json)
Hash identifier: So/hChGXjU6MKX3Mis+pDOs+oRAVOQpoVguBFYULzvY=
Subject key identifier: C3:E2:D0:54:C9:5A:2F:D4:98:B7:CC:FB:2A:49:13:43:B9:41:3E:A8
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 03B335E2
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/w-LQVMlaL9SYt8z7KkkTQ7lBPqg.roa
Signing time: Tue 26 Apr 2022 18:48:26 +0000
ROA not before: Tue 26 Apr 2022 18:48:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 31.11.40.0/21 maxlen: 24
84.247.4.0/22 maxlen: 24
213.159.136.0/21 maxlen: 24
37.251.200.0/21 maxlen: 24
46.19.104.0/21 maxlen: 24
62.122.40.0/21 maxlen: 24
94.26.64.0/23 maxlen: 24
37.251.240.0/21 maxlen: 24
193.17.225.0/24 maxlen: 24
89.46.248.0/22 maxlen: 24
91.245.216.0/23 maxlen: 24
84.247.40.0/22 maxlen: 24
141.136.16.0/20 maxlen: 24
176.223.172.0/22 maxlen: 24
86.104.20.0/22 maxlen: 24
176.223.176.0/22 maxlen: 24
109.94.144.0/20 maxlen: 24
192.109.205.0/24 maxlen: 24
185.200.204.0/22 maxlen: 24
88.135.96.0/20 maxlen: 24
46.231.104.0/21 maxlen: 24
94.24.64.0/21 maxlen: 24
37.251.176.0/20 maxlen: 24
94.26.24.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
86.106.152.0/22 maxlen: 24
94.24.24.0/22 maxlen: 24
195.128.136.0/24 maxlen: 24
91.227.240.0/23 maxlen: 24
86.104.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62076386 (0x3b335e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Apr 26 18:48:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3e2d054c95a2fd498b7ccfb2a491343b9413ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:ed:58:bb:b1:4f:df:24:84:98:c1:57:d7:
7c:fc:ca:45:7c:cb:19:c6:bf:5e:9c:d9:8d:86:06:
d9:44:0e:ef:dd:99:37:09:53:77:5a:be:11:d8:bd:
f2:0e:e6:c5:61:bc:95:67:2e:1f:09:59:c0:8f:d0:
37:44:f5:68:6e:0d:4b:cd:f0:07:7c:4d:01:fa:f6:
68:a2:5e:b4:a9:11:00:9b:d1:22:4e:8a:ee:08:f2:
5a:04:49:ce:86:4c:a8:c7:f2:2d:ca:50:fc:d8:5c:
d7:00:9c:93:96:98:00:26:f0:49:d8:09:e6:68:55:
ea:b8:79:37:5d:27:87:c0:80:53:a4:73:b0:02:88:
25:21:29:00:f7:40:9d:dd:6e:43:ec:9d:d7:5a:d1:
c9:bf:e9:3d:27:60:73:f9:fa:f8:a0:10:cd:e2:34:
ee:f5:e2:07:ab:f3:f7:72:50:6d:b5:24:60:50:2e:
f0:0e:6f:16:96:2a:2b:87:56:2c:85:33:6c:ba:67:
e7:0b:c6:fb:89:cb:ca:fc:4e:65:f2:aa:c5:b2:6d:
6d:3a:50:6e:da:11:a1:a2:34:84:36:d9:aa:95:db:
b0:7e:65:59:12:91:c5:82:2c:b2:d7:80:37:be:23:
f6:a7:68:02:ae:f9:f8:9b:26:4e:8f:3b:79:07:42:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E2:D0:54:C9:5A:2F:D4:98:B7:CC:FB:2A:49:13:43:B9:41:3E:A8
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/w-LQVMlaL9SYt8z7KkkTQ7lBPqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.11.40.0/21
37.251.176.0/20
37.251.200.0/21
37.251.240.0/21
46.19.104.0/21
46.231.104.0/21
62.122.40.0/21
84.247.4.0/22
84.247.40.0/22
86.104.20.0/22
86.104.248.0/22
86.106.152.0/22
88.135.96.0/20
89.40.220.0/23
89.46.248.0/22
91.227.240.0/23
91.245.216.0/23
94.24.24.0/22
94.24.64.0/21
94.26.24.0/23
94.26.64.0/23
109.94.144.0/20
141.136.16.0/20
176.223.172.0-176.223.179.255
185.200.204.0/22
192.109.205.0/24
193.17.225.0/24
195.128.136.0/24
213.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
d1:5f:69:93:2d:aa:62:6a:1e:08:06:86:74:af:59:f3:61:e5:
9a:21:00:26:d4:b4:7e:97:e6:29:93:22:fe:d5:83:d3:37:61:
a1:83:ba:c0:5c:e8:cc:0e:62:f4:28:67:d6:d1:51:8b:59:8f:
72:ca:1c:25:bc:a7:4c:ba:b4:b9:c1:97:74:78:2f:e2:70:cd:
ba:7a:b2:aa:44:6f:2e:b9:62:5a:38:5f:e1:02:b6:90:eb:7b:
d8:d7:8b:fa:fa:aa:98:4b:7b:ae:1c:f1:12:c6:51:1c:28:c9:
0f:3d:82:f4:87:46:a9:13:e3:42:33:aa:20:30:5a:9a:72:77:
b5:0c:e1:1e:26:6e:1e:0b:a0:05:cf:f6:f4:15:9c:c7:cb:55:
1e:57:9a:8c:b9:c5:bf:6a:3d:15:64:e4:66:75:21:96:d3:81:
4a:6e:35:a6:99:78:28:59:1e:b7:6b:5e:18:3c:2c:df:3a:d4:
b0:0b:d5:02:9e:23:a4:a5:35:b4:9e:71:ba:ce:a3:59:5d:c9:
b3:07:ad:b5:a3:06:75:8a:ac:ae:5b:b1:23:73:9c:93:91:03:
a8:86:18:3e:ff:27:60:7b:8f:db:49:ae:fb:da:d9:24:a7:15:
05:30:2e:55:ac:c7:42:e6:f3:76:c1:5b:87:f8:ed:60:c8:c0:
e3:bf:c2:73
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIEA7M14jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YmU4Y2M4ZjVhZjFlNzM2MmQ0NTRmM2RkOTFhODI5NTI5MTlkYjYxMB4XDTIyMDQy
NjE4NDgyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzNlMmQwNTRjOTVh
MmZkNDk4YjdjY2ZiMmE0OTEzNDNiOTQxM2VhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAK+57Vi7sU/fJISYwVfXfPzKRXzLGca/XpzZjYYG2UQO792Z
NwlTd1q+Edi98g7mxWG8lWcuHwlZwI/QN0T1aG4NS83wB3xNAfr2aKJetKkRAJvR
Ik6K7gjyWgRJzoZMqMfyLcpQ/Nhc1wCck5aYACbwSdgJ5mhV6rh5N10nh8CAU6Rz
sAKIJSEpAPdAnd1uQ+yd11rRyb/pPSdgc/n6+KAQzeI07vXiB6vz93JQbbUkYFAu
8A5vFpYqK4dWLIUzbLpn5wvG+4nLyvxOZfKqxbJtbTpQbtoRoaI0hDbZqpXbsH5l
WRKRxYIssteAN74j9qdoAq75+JsmTo87eQdC5PkCAwEAAaOCAr4wggK6MB0GA1Ud
DgQWBBTD4tBUyVov1Ji3zPsqSRNDuUE+qDAfBgNVHSMEGDAWgBTb6MyPWvHnNi1F
Tz3ZGoKVKRnbYTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzItak1qMXJ4NXpZdFJVODkyUnFDbFNrWjIyRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODAvYTU3M2ZlLTZlMGUtNGJmZi05OWZjLTI2MjFkNWM5OWNhYi8x
L3ctTFFWTWxhTDlTWXQ4ejdLa2tUUTdsQlBxZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAv
YTU3M2ZlLTZlMGUtNGJmZi05OWZjLTI2MjFkNWM5OWNhYi8xLzItak1qMXJ4NXpZ
dFJVODkyUnFDbFNrWjIyRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
0wYIKwYBBQUHAQcBAf8EgcMwgcAwgb0EAgABMIG2AwQDHwsoAwQEJfuwAwQDJfvI
AwQDJfvwAwQDLhNoAwQDLudoAwQDPnooAwQCVPcEAwQCVPcoAwQCVmgUAwQCVmj4
AwQCVmqYAwQEWIdgAwQBWSjcAwQCWS74AwQBW+PwAwQBW/XYAwQCXhgYAwQDXhhA
AwQBXhoYAwQBXhpAAwQEbV6QAwQEjYgQMAwDBAKw36wDBAKw37ADBAK5yMwDBADA
bc0DBADBEeEDBADDgIgDBAPVn4gwDQYJKoZIhvcNAQELBQADggEBANFfaZMtqmJq
HggGhnSvWfNh5ZohACbUtH6X5imTIv7Vg9M3YaGDusBc6MwOYvQoZ9bRUYtZj3LK
HCW8p0y6tLnBl3R4L+Jwzbp6sqpEby65Ylo4X+ECtpDre9jXi/r6qphLe64c8RLG
URwoyQ89gvSHRqkT40IzqiAwWppyd7UM4R4mbh4LoAXP9vQVnMfLVR5Xmoy5xb9q
PRVk5GZ1IZbTgUpuNaaZeChZHrdrXhg8LN861LAL1QKeI6SlNbSecbrOo1ldybMH
rbWjBnWKrK5bsSNznJORA6iGGD7/J2B7j9tJrvva2SSnFQUwLlWsx0Lm83bBW4f4
7WDIwOO/wnM=
-----END CERTIFICATE-----
Generated at Wed Mar 12 06:58:57 2025 by rpki-client