Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/wHQ2nvT1KvxZbnQkHU2EsGNSOjU.roa
File: wHQ2nvT1KvxZbnQkHU2EsGNSOjU.roa (raw, json)
Hash identifier: ObHcA7LAdcQDYq1idVsOcejw19rSMMmbaZQaWrP9Dwk=
Subject key identifier: C0:74:36:9E:F4:F5:2A:FC:59:6E:74:24:1D:4D:84:B0:63:52:3A:35
Certificate issuer: /CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Certificate serial: 0E740541
Authority key identifier: D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/wHQ2nvT1KvxZbnQkHU2EsGNSOjU.roa
Signing time: Thu 23 Jun 2022 15:22:30 +0000
ROA not before: Thu 23 Jun 2022 15:22:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48314
IP address blocks: 185.240.242.0/24 maxlen: 24
185.240.242.0/23 maxlen: 23
185.240.243.0/24 maxlen: 24
185.240.241.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
185.230.160.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
2a0c:2500::/32 maxlen: 32
2a09:6302::/32 maxlen: 32
2a09:6301::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242484545 (0xe740541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d592cb39d4f644e4cd0adfd299282e54c3995195
Validity
Not Before: Jun 23 15:22:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c074369ef4f52afc596e74241d4d84b063523a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9a:b3:88:51:5f:25:6e:c3:86:a1:00:e6:69:
d5:bf:37:a2:28:47:07:4b:f8:c0:37:28:3b:0e:44:
e6:22:a1:62:70:0f:ed:f5:ef:b2:6f:8f:aa:50:53:
b4:8d:d9:a2:3d:6a:4c:6d:51:34:83:04:8a:5e:af:
b5:ac:a2:e6:dd:6f:f2:99:58:33:10:d2:ae:64:d4:
2b:c2:bf:7e:41:68:eb:99:39:a7:a8:3e:0f:a4:67:
30:98:44:33:a8:f4:91:9a:00:68:86:cc:0c:80:8a:
9f:87:b7:ea:8c:3b:9d:3f:e8:75:27:ab:79:4f:4e:
f2:d1:07:1b:62:37:ca:c6:a6:5c:ee:f2:4c:31:28:
ca:7b:e7:88:41:16:96:5e:6e:c1:62:91:d0:6c:af:
45:7c:0b:4c:9b:04:3d:f2:2d:9d:78:e2:d7:0d:b1:
6e:76:83:5f:fe:9d:f1:ad:49:98:1e:01:e1:88:b0:
db:36:68:e6:69:81:80:ec:2a:ee:a1:cb:60:74:c2:
be:18:60:75:38:58:9b:37:3a:5f:a3:90:61:33:de:
fb:e3:6a:30:c4:8f:13:54:bd:88:69:cf:ce:dc:17:
15:bb:71:e6:da:9d:bb:63:bc:0d:fa:ec:66:67:02:
3d:c4:89:3d:0d:ab:dd:8f:57:0e:cc:d2:ca:ad:5e:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:36:9E:F4:F5:2A:FC:59:6E:74:24:1D:4D:84:B0:63:52:3A:35
X509v3 Authority Key Identifier:
keyid:D5:92:CB:39:D4:F6:44:E4:CD:0A:DF:D2:99:28:2E:54:C3:99:51:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZLLOdT2ROTNCt_SmSguVMOZUZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/wHQ2nvT1KvxZbnQkHU2EsGNSOjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/963192-9b60-4f5f-821e-2e686bc79c0e/1/1ZLLOdT2ROTNCt_SmSguVMOZUZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.120.0/22
185.230.160.0/22
185.240.241.0-185.240.243.255
IPv6:
2a09:6301::-2a09:6302:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2500::/32
Signature Algorithm: sha256WithRSAEncryption
79:6f:c4:5e:15:ce:65:dd:df:a7:09:fa:f6:46:68:16:96:89:
8e:c6:9c:8d:a5:53:7f:dd:73:1c:cc:e7:0e:f0:e8:58:61:25:
26:89:ac:0e:96:02:c9:0b:c9:8d:fd:2e:7b:38:1e:0b:11:10:
17:36:dd:65:a6:f9:3d:bf:da:ab:ca:0e:bd:a9:2f:13:76:82:
92:54:55:c9:7a:63:69:d1:a7:f9:53:a2:ff:89:36:9b:37:f9:
e8:1c:7c:03:b2:b0:00:3a:28:88:72:b6:2c:70:eb:36:2d:c6:
b0:a2:10:8d:8e:bd:a3:04:ce:71:76:61:4e:d8:aa:f3:bf:1e:
51:a8:60:31:22:93:78:ec:71:25:6c:73:68:78:45:bf:9f:47:
3f:f0:50:ae:c2:d8:6c:ec:52:a8:24:33:4f:e5:bb:dd:89:ee:
57:80:80:f4:a3:a2:3c:23:89:1b:bf:6c:c0:66:d6:94:4d:8b:
00:6a:98:91:05:be:16:87:67:78:19:b4:86:c1:71:e9:8b:c9:
11:d2:05:fd:5a:07:a4:2b:d5:48:a7:fd:22:74:01:0b:f3:a4:
36:54:40:41:09:d8:36:62:46:01:35:c9:87:1f:00:a0:ef:c4:
f3:44:9f:2c:b3:70:3f:1d:57:14:67:05:16:98:c9:60:c4:fa:
a5:a0:bc:82
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIEDnQFQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
NTkyY2IzOWQ0ZjY0NGU0Y2QwYWRmZDI5OTI4MmU1NGMzOTk1MTk1MB4XDTIyMDYy
MzE1MjIzMFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzA3NDM2OWVmNGY1
MmFmYzU5NmU3NDI0MWQ0ZDg0YjA2MzUyM2EzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOWas4hRXyVuw4ahAOZp1b83oihHB0v4wDcoOw5E5iKhYnAP
7fXvsm+PqlBTtI3Zoj1qTG1RNIMEil6vtayi5t1v8plYMxDSrmTUK8K/fkFo65k5
p6g+D6RnMJhEM6j0kZoAaIbMDICKn4e36ow7nT/odSereU9O8tEHG2I3ysamXO7y
TDEoynvniEEWll5uwWKR0GyvRXwLTJsEPfItnXji1w2xbnaDX/6d8a1JmB4B4Yiw
2zZo5mmBgOwq7qHLYHTCvhhgdThYmzc6X6OQYTPe++NqMMSPE1S9iGnPztwXFbtx
5tqdu2O8DfrsZmcCPcSJPQ2r3Y9XDszSyq1evEcCAwEAAaOCAjwwggI4MB0GA1Ud
DgQWBBTAdDae9PUq/FludCQdTYSwY1I6NTAfBgNVHSMEGDAWgBTVkss51PZE5M0K
39KZKC5Uw5lRlTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzFaTExPZFQyUk9UTkN0X1NtU2d1Vk1PWlVaVS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvOTYzMTkyLTliNjAtNGY1Zi04MjFlLTJlNjg2YmM3OWMwZS8x
L3dIUTJudlQxS3Z4WmJuUWtIVTJFc0dOU09qVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
OTYzMTkyLTliNjAtNGY1Zi04MjFlLTJlNjg2YmM3OWMwZS8xLzFaTExPZFQyUk9U
TkN0X1NtU2d1Vk1PWlVaVS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBS
BggrBgEFBQcBBwEB/wRDMEEwIAQCAAEwGgMEAlT8eAMEArnmoDAMAwQAufDxAwQC
ufDwMB0EAgACMBcwDgMFACoJYwEDBQAqCWMCAwUAKgwlADANBgkqhkiG9w0BAQsF
AAOCAQEAeW/EXhXOZd3fpwn69kZoFpaJjsacjaVTf91zHMznDvDoWGElJomsDpYC
yQvJjf0uezgeCxEQFzbdZab5Pb/aq8oOvakvE3aCklRVyXpjadGn+VOi/4k2mzf5
6Bx8A7KwADooiHK2LHDrNi3GsKIQjY69owTOcXZhTtiq878eUahgMSKTeOxxJWxz
aHhFv59HP/BQrsLYbOxSqCQzT+W73YnuV4CA9KOiPCOJG79swGbWlE2LAGqYkQW+
FodneBm0hsFx6YvJEdIF/VoHpCvVSKf9InQBC/OkNlRAQQnYNmJGATXJhx8AoO/E
80SfLLNwPx1XFGcFFpjJYMT6paC8gg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 08:22:03 2025 by rpki-client