Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/ho-wkwgWDXjGCfVU_we6F8qB4H8.roa
File: ho-wkwgWDXjGCfVU_we6F8qB4H8.roa (raw, json)
Hash identifier: i1JSAfJoXpijSpLgKVP9y+qng3uHMvrJen2OJUNIMdo=
Subject key identifier: 86:8F:B0:93:08:16:0D:78:C6:09:F5:54:FF:07:BA:17:CA:81:E0:7F
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 0195D75F6C65AB957594FC5434CAF7BE985D
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/ho-wkwgWDXjGCfVU_we6F8qB4H8.roa
Signing time: Thu 27 Mar 2025 11:31:49 +0000
ROA not before: Thu 27 Mar 2025 11:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 31.178.0.0/15 maxlen: 15
31.178.0.0/16 maxlen: 16
31.179.0.0/16 maxlen: 16
31.186.192.0/19 maxlen: 19
31.187.0.0/18 maxlen: 18
31.187.0.0/19 maxlen: 19
31.187.32.0/19 maxlen: 19
77.236.0.0/19 maxlen: 19
77.236.0.0/20 maxlen: 20
77.236.16.0/20 maxlen: 20
81.18.192.0/20 maxlen: 20
81.18.192.0/21 maxlen: 21
81.18.200.0/21 maxlen: 21
81.18.208.0/20 maxlen: 20
81.18.208.0/21 maxlen: 21
81.18.216.0/21 maxlen: 21
83.144.64.0/18 maxlen: 18
84.10.0.0/16 maxlen: 16
84.10.0.0/17 maxlen: 17
84.10.128.0/17 maxlen: 17
85.222.0.0/17 maxlen: 17
85.222.0.0/18 maxlen: 18
85.222.64.0/18 maxlen: 18
87.206.0.0/15 maxlen: 15
87.206.0.0/16 maxlen: 16
87.207.0.0/16 maxlen: 16
89.64.0.0/12 maxlen: 12
89.64.0.0/13 maxlen: 13
89.72.0.0/13 maxlen: 13
92.244.32.0/19 maxlen: 19
92.244.32.0/20 maxlen: 20
92.244.48.0/20 maxlen: 20
94.75.64.0/18 maxlen: 18
94.75.64.0/19 maxlen: 19
94.75.96.0/19 maxlen: 19
94.172.0.0/16 maxlen: 16
94.172.0.0/17 maxlen: 17
94.172.128.0/17 maxlen: 17
95.158.64.0/18 maxlen: 18
178.73.0.0/18 maxlen: 18
178.73.0.0/19 maxlen: 19
178.73.32.0/19 maxlen: 19
188.93.160.0/21 maxlen: 21
188.93.160.0/22 maxlen: 22
188.93.164.0/22 maxlen: 22
193.47.158.0/23 maxlen: 23
193.47.160.0/24 maxlen: 24
194.187.40.0/22 maxlen: 22
195.34.208.0/22 maxlen: 22
212.76.32.0/19 maxlen: 19
212.76.32.0/20 maxlen: 20
212.76.48.0/20 maxlen: 20
213.134.160.0/19 maxlen: 19
2001:4050::/32 maxlen: 32
2001:4050::/33 maxlen: 33
2001:4050:8000::/33 maxlen: 33
2a02:a300::/27 maxlen: 27
2a02:a300::/28 maxlen: 28
2a02:a310::/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d7:5f:6c:65:ab:95:75:94:fc:54:34:ca:f7:be:98:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Mar 27 11:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=868fb09308160d78c609f554ff07ba17ca81e07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:2b:00:df:13:e2:d5:ef:61:db:46:a0:43:
e8:aa:3d:cf:1b:52:81:da:84:f0:3e:26:20:03:1e:
0b:c7:5d:ba:28:3c:f7:a8:f9:d6:64:43:97:85:a4:
a1:86:74:6e:b8:39:78:b5:1f:30:8d:f9:9d:d5:aa:
c4:26:75:b7:37:ce:b6:02:45:fd:f7:c7:b5:a9:57:
c8:93:08:18:d3:5c:1b:f2:72:89:19:44:fd:18:8a:
00:99:71:db:e2:b3:09:c9:62:2f:cc:ef:9c:82:10:
66:32:8a:e9:2c:38:ae:85:40:ed:1a:77:a3:fa:d4:
68:75:5e:f8:e3:65:93:ea:6a:82:9a:2d:6b:ce:a1:
6b:06:99:e7:a2:84:e7:f6:9d:f3:95:04:0f:92:53:
2b:2f:06:f5:46:58:13:2b:85:a1:b4:ae:64:1d:01:
5c:cb:26:d6:ae:c3:cb:ba:08:11:f6:73:7b:ad:0a:
d1:f7:28:03:4d:87:59:c2:16:6f:3d:b7:d0:3b:87:
80:b5:dc:ad:ec:9d:d0:75:ca:63:20:e7:67:ba:8b:
9d:6b:5c:e6:b9:89:b0:35:d6:07:53:a6:b1:9c:5b:
d2:39:7e:1f:f9:97:72:87:d4:b8:74:9b:01:98:97:
1b:89:91:5f:cd:02:9b:a3:58:61:12:36:81:d1:a7:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8F:B0:93:08:16:0D:78:C6:09:F5:54:FF:07:BA:17:CA:81:E0:7F
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/ho-wkwgWDXjGCfVU_we6F8qB4H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
31.186.192.0/19
31.187.0.0/18
77.236.0.0/19
81.18.192.0/19
83.144.64.0/18
84.10.0.0/16
85.222.0.0/17
87.206.0.0/15
89.64.0.0/12
92.244.32.0/19
94.75.64.0/18
94.172.0.0/16
95.158.64.0/18
178.73.0.0/18
188.93.160.0/21
193.47.158.0-193.47.160.255
194.187.40.0/22
195.34.208.0/22
212.76.32.0/19
213.134.160.0/19
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
35:45:26:92:33:ee:96:d5:29:77:02:7f:69:41:e0:8b:6a:4b:
13:23:11:95:7a:c0:56:4a:7c:94:c3:04:5b:05:d8:0d:13:b4:
1f:7b:a1:0a:5c:1a:0b:14:96:40:13:3c:1e:b8:2f:49:2a:06:
d0:97:41:99:13:b7:c1:a8:f9:21:d6:df:c3:34:ed:b3:78:38:
90:b0:f8:5e:1e:e2:79:bb:c1:c7:91:35:58:7f:cd:b7:83:be:
eb:db:b8:93:1b:a9:de:94:0b:04:35:ea:ff:14:3f:68:07:6b:
e8:07:77:95:c3:41:23:21:ca:83:4e:b6:59:6e:1d:6f:0a:14:
33:9d:12:9e:8b:b4:03:91:ae:43:60:c8:ae:65:73:99:45:74:
30:c8:ab:b4:d6:88:f6:1b:34:61:29:7a:66:86:a4:8a:05:af:
06:d9:38:5e:a8:cc:3b:85:44:a7:f9:ec:54:aa:8b:2c:dd:c8:
ff:d6:93:fe:71:e2:40:fd:36:8b:4c:ac:65:b4:21:d1:ab:cd:
98:b1:fd:c9:f2:e7:b6:48:ab:36:df:9a:a1:09:83:6e:54:e4:
43:03:85:ac:23:77:f5:63:42:a6:fc:5e:2b:26:1f:dc:c4:d0:
3c:f0:4f:1f:74:e0:49:80:fd:a3:d1:b5:51:e8:eb:77:89:20:
23:ba:50:9b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZXXX2xlq5V1lPxUNMr3vphdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm
OGVmZTIwHhcNMjUwMzI3MTEzMTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjhmYjA5MzA4MTYwZDc4YzYwOWY1NTRmZjA3YmExN2NhODFlMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJUrAN8T4tXvYdtGoEPoqj3PG1KB
2oTwPiYgAx4Lx126KDz3qPnWZEOXhaShhnRuuDl4tR8wjfmd1arEJnW3N862AkX9
98e1qVfIkwgY01wb8nKJGUT9GIoAmXHb4rMJyWIvzO+cghBmMorpLDiuhUDtGnej
+tRodV7442WT6mqCmi1rzqFrBpnnooTn9p3zlQQPklMrLwb1RlgTK4WhtK5kHQFc
yybWrsPLuggR9nN7rQrR9ygDTYdZwhZvPbfQO4eAtdyt7J3QdcpjIOdnuouda1zm
uYmwNdYHU6axnFvSOX4f+Zdyh9S4dJsBmJcbiZFfzQKbo1hhEjaB0afzqwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFIaPsJMIFg14xgn1VP8HuhfKgeB/MB8GA1UdIwQY
MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt
YjM1MzViNGNhNTBmLzEvaG8td2t3Z1dEWGpHQ2ZWVV93ZTZGOHFCNEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm
LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTCBiAQCAAEwgYEDAwEf
sgMEBR+6wAMEBh+7AAMEBU3sAAMEBVESwAMEBlOQQAMDAFQKAwQHVd4AAwMBV84D
AwRZQAMEBVz0IAMEBl5LQAMDAF6sAwQGX55AAwQGskkAAwQDvF2gMAwDBAHBL54D
BADBL6ADBALCuygDBALDItADBAXUTCADBAXVhqAwFAQCAAIwDgMFACABQFADBQUq
AqMAMA0GCSqGSIb3DQEBCwUAA4IBAQA1RSaSM+6W1Sl3An9pQeCLaksTIxGVesBW
SnyUwwRbBdgNE7Qfe6EKXBoLFJZAEzweuC9JKgbQl0GZE7fBqPkh1t/DNO2zeDiQ
sPheHuJ5u8HHkTVYf823g77r27iTG6nelAsENer/FD9oB2voB3eVw0EjIcqDTrZZ
bh1vChQznRKei7QDka5DYMiuZXOZRXQwyKu01oj2GzRhKXpmhqSKBa8G2TheqMw7
hUSn+exUqoss3cj/1pP+ceJA/TaLTKxltCHRq82Ysf3J8ue2SKs235qhCYNuVORD
A4WsI3f1Y0Km/F4rJh/cxNA88E8fdOBJgP2j0bVR6Ot3iSAjulCb
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:46 2025 by rpki-client