Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wj4WsGps_PMeUwaGe8quk2F-4tM.roa
File: wj4WsGps_PMeUwaGe8quk2F-4tM.roa (raw, json)
Hash identifier: mv4Qcf3hD2FoUEIXbMcnIiuU3Cgt309wUfc4YIyhlx4=
Subject key identifier: C2:3E:16:B0:6A:6C:FC:F3:1E:53:06:86:7B:CA:AE:93:61:7E:E2:D3
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 055682FD
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wj4WsGps_PMeUwaGe8quk2F-4tM.roa
Signing time: Thu 09 Jun 2022 03:45:02 +0000
ROA not before: Thu 09 Jun 2022 03:45:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25408
IP address blocks: 109.167.215.0/24 maxlen: 24
109.167.218.0/24 maxlen: 24
109.167.225.0/24 maxlen: 24
109.167.243.0/24 maxlen: 24
109.167.192.0/24 maxlen: 24
109.167.192.0/18 maxlen: 18
77.244.16.0/20 maxlen: 20
77.244.17.0/24 maxlen: 24
77.244.31.0/24 maxlen: 24
77.244.30.0/24 maxlen: 24
77.244.25.0/24 maxlen: 24
194.24.240.0/24 maxlen: 24
194.24.241.0/24 maxlen: 24
84.52.64.0/18 maxlen: 18
84.52.77.0/24 maxlen: 24
84.52.79.0/24 maxlen: 24
84.52.88.0/24 maxlen: 24
84.52.97.0/24 maxlen: 24
84.52.99.0/24 maxlen: 24
195.177.122.0/24 maxlen: 24
195.177.121.0/24 maxlen: 24
195.177.120.0/24 maxlen: 24
195.177.120.0/22 maxlen: 22
195.177.123.0/24 maxlen: 24
185.202.212.0/22 maxlen: 22
185.202.214.0/23 maxlen: 23
109.167.128.0/18 maxlen: 18
91.202.220.0/22 maxlen: 22
62.182.89.0/24 maxlen: 24
62.182.88.0/21 maxlen: 21
194.246.112.0/24 maxlen: 24
195.64.141.0/24 maxlen: 24
195.64.140.0/23 maxlen: 23
194.246.113.0/24 maxlen: 24
2a00:1c78::/29 maxlen: 29
2a00:1c78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89555709 (0x55682fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jun 9 03:45:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c23e16b06a6cfcf31e5306867bcaae93617ee2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:76:bd:8a:b6:d1:c2:f0:08:f9:ea:38:6e:
90:8f:ff:4a:33:14:cb:8b:76:58:dd:7f:21:6d:d7:
1a:55:8f:21:9e:9b:aa:e2:d4:07:e6:c1:b0:b8:ed:
95:8c:96:f0:76:99:73:bd:79:4b:e1:01:74:0e:53:
7d:bd:f2:fa:6e:c0:a5:c1:79:c9:86:51:e4:97:44:
7b:30:5c:5d:f9:4f:62:f4:e5:3d:76:6a:ff:36:61:
fa:92:a1:b0:21:c4:2d:ac:32:59:3c:06:06:d2:0d:
e3:a3:03:3a:2f:bc:25:79:0f:f4:73:84:5e:80:57:
ed:f4:fa:1b:2e:35:49:c0:cc:fe:53:50:c6:3a:f5:
70:da:74:1e:d7:d4:8c:e9:1c:ea:c1:02:c5:e8:23:
74:2b:9e:7c:2f:43:22:bd:36:30:94:de:6d:83:1a:
48:be:21:28:a6:31:76:68:de:10:f6:c9:fa:cf:ff:
a2:26:fc:eb:bb:68:ea:29:7e:12:1f:af:01:bc:c8:
0e:fe:a1:9b:bf:d3:f5:2d:14:57:a3:3d:79:71:53:
eb:a9:c4:f8:7b:90:1a:bf:87:8d:4b:0b:13:d5:43:
d6:cc:cb:d9:90:6d:5d:4b:ff:96:11:3f:c5:29:1b:
2c:3b:eb:bf:77:77:bb:bd:96:ab:b1:76:05:a6:0c:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:16:B0:6A:6C:FC:F3:1E:53:06:86:7B:CA:AE:93:61:7E:E2:D3
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/wj4WsGps_PMeUwaGe8quk2F-4tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.88.0/21
77.244.16.0/20
84.52.64.0/18
91.202.220.0/22
109.167.128.0/17
185.202.212.0/22
194.24.240.0/23
194.246.112.0/23
195.64.140.0/23
195.177.120.0/22
IPv6:
2a00:1c78::/29
Signature Algorithm: sha256WithRSAEncryption
08:99:9c:31:9b:11:7f:84:4a:3e:17:b1:cf:d8:8d:4e:ec:b3:
5f:41:42:c5:ab:2f:91:ae:ce:5c:d4:77:d7:67:98:aa:33:b4:
00:73:15:6e:69:07:c5:26:76:0c:bf:5a:a1:e2:f4:25:b6:0e:
c7:1b:05:d4:80:20:21:48:3c:23:c1:53:68:b9:59:ae:00:74:
3b:50:e2:8f:12:8c:27:8b:46:35:fe:08:23:f0:ba:2f:08:3f:
3a:55:82:ad:3f:30:da:8b:8a:53:c7:6c:85:a3:eb:ca:40:f9:
1a:05:9e:b1:32:d3:af:a0:e8:fe:a4:14:bf:65:97:34:b4:32:
ed:eb:cf:bf:92:f6:2a:88:12:e9:be:c7:1a:76:d1:cf:9d:9f:
e0:77:7e:c3:2d:74:81:54:80:0a:55:83:9c:83:12:e4:d1:98:
80:ed:97:39:2b:67:85:33:a3:8a:02:31:ab:cf:b7:b4:c5:1f:
85:66:a6:d7:b7:e5:64:a0:69:3e:b7:75:12:fd:1d:be:8d:52:
5f:2a:80:69:42:18:3f:b3:13:de:f0:31:31:b7:3d:59:cf:b8:
54:97:7b:1a:3d:af:17:64:6c:de:14:22:51:ac:49:c1:f8:c4:
cd:e7:db:bc:37:a7:50:e4:1d:a7:7e:2a:79:1b:4f:6f:f8:a0:
4b:7d:da:f0
-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIEBVaC/TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OGY2ZjVkZWMwOWJjN2ExMjAzMDQ1Njk5YmEwNTgyOTVkMzhlMzQ2MB4XDTIyMDYw
OTAzNDUwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzIzZTE2YjA2YTZj
ZmNmMzFlNTMwNjg2N2JjYWFlOTM2MTdlZTJkMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIrBdr2KttHC8Aj56jhukI//SjMUy4t2WN1/IW3XGlWPIZ6b
quLUB+bBsLjtlYyW8HaZc715S+EBdA5Tfb3y+m7ApcF5yYZR5JdEezBcXflPYvTl
PXZq/zZh+pKhsCHELawyWTwGBtIN46MDOi+8JXkP9HOEXoBX7fT6Gy41ScDM/lNQ
xjr1cNp0HtfUjOkc6sECxegjdCuefC9DIr02MJTebYMaSL4hKKYxdmjeEPbJ+s//
oib867to6il+Eh+vAbzIDv6hm7/T9S0UV6M9eXFT66nE+HuQGr+HjUsLE9VD1szL
2ZBtXUv/lhE/xSkbLDvrv3d3u72Wq7F2BaYMpX8CAwEAAaOCAk4wggJKMB0GA1Ud
DgQWBBTCPhawamz88x5TBoZ7yq6TYX7i0zAfBgNVHSMEGDAWgBTI9vXewJvHoSAw
RWmboFgpXTjjRjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lQYjEzc0NieDZFZ01FVnBtNkJZS1YwNDQwWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODkvNDhjYjg2LTI3NTAtNGQ2YS04YTcxLTFiZTUyNTU3Njg2My8x
L3dqNFdzR3BzX1BNZVV3YUdlOHF1azJGLTR0TS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkv
NDhjYjg2LTI3NTAtNGQ2YS04YTcxLTFiZTUyNTU3Njg2My8xL3lQYjEzc0NieDZF
Z01FVnBtNkJZS1YwNDQwWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBk
BggrBgEFBQcBBwEB/wRVMFMwQgQCAAEwPAMEAz62WAMEBE30EAMEBlQ0QAMEAlvK
3AMEB22ngAMEArnK1AMEAcIY8AMEAcL2cAMEAcNAjAMEAsOxeDANBAIAAjAHAwUD
KgAceDANBgkqhkiG9w0BAQsFAAOCAQEACJmcMZsRf4RKPhexz9iNTuyzX0FCxasv
ka7OXNR312eYqjO0AHMVbmkHxSZ2DL9aoeL0JbYOxxsF1IAgIUg8I8FTaLlZrgB0
O1DijxKMJ4tGNf4II/C6Lwg/OlWCrT8w2ouKU8dshaPrykD5GgWesTLTr6Do/qQU
v2WXNLQy7evPv5L2KogS6b7HGnbRz52f4Hd+wy10gVSAClWDnIMS5NGYgO2XOStn
hTOjigIxq8+3tMUfhWam17flZKBpPrd1Ev0dvo1SXyqAaUIYP7MT3vAxMbc9Wc+4
VJd7Gj2vF2Rs3hQiUaxJwfjEzefbvDenUOQdp34qeRtPb/igS33a8A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 18:08:12 2025 by rpki-client