Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/W1JgD5JymAX9NqlHwEfMW5RmfQk.roa
File: W1JgD5JymAX9NqlHwEfMW5RmfQk.roa (raw, json)
Hash identifier: 1rWlBwGmCRabFI3cb7vTSqe6Xt7yHhTBWMZ/2UG67Vg=
Subject key identifier: 5B:52:60:0F:92:72:98:05:FD:36:A9:47:C0:47:CC:5B:94:66:7D:09
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27EB475C
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/W1JgD5JymAX9NqlHwEfMW5RmfQk.roa
Signing time: Sat 01 Jan 2022 13:00:24 +0000
ROA not before: Sat 01 Jan 2022 13:00:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41272
IP address blocks: 46.165.64.0/18 maxlen: 18
188.7.0.0/16 maxlen: 16
80.185.0.0/16 maxlen: 16
2a00:8380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669730652 (0x27eb475c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5b52600f92729805fd36a947c047cc5b94667d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ca:57:83:3f:42:cd:44:f5:ac:71:48:28:64:
98:d8:ed:96:2d:4b:43:37:30:a0:52:96:f0:6d:fd:
7a:32:48:0e:75:fa:67:b5:78:7b:8c:13:fa:68:b5:
02:a5:e6:e3:f4:60:80:94:04:a6:dd:a9:fb:95:db:
86:51:c3:6b:19:68:b4:1f:55:0c:28:66:61:24:94:
63:ab:35:9e:fd:e0:e9:1c:f2:6e:f1:a1:47:e1:16:
0f:ca:e0:37:96:be:fb:27:8f:1b:ed:9d:6e:12:95:
61:7d:0d:76:e8:4d:0a:c7:d2:4b:1b:83:6c:ce:75:
34:5a:47:df:10:9a:50:db:1d:b8:31:4e:d6:cb:64:
16:20:21:4c:7d:79:4b:0a:06:ba:16:24:fe:e3:3f:
8a:aa:03:a3:bf:42:03:10:ec:69:33:b5:f9:de:a1:
32:ac:b4:2e:88:d6:98:e7:43:46:e2:1b:6c:b3:83:
9d:fd:9e:4e:fc:c0:3d:f5:97:bd:9f:4e:6c:ec:58:
f1:66:e0:37:bd:84:97:70:07:13:bf:57:27:df:0e:
37:dd:d4:d6:3d:21:33:e2:34:51:25:38:c5:73:8e:
86:b2:79:26:62:98:aa:98:05:f5:0c:88:e0:7c:ae:
c3:a3:40:1f:4e:00:bf:77:16:92:74:49:4b:23:94:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:52:60:0F:92:72:98:05:FD:36:A9:47:C0:47:CC:5B:94:66:7D:09
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/W1JgD5JymAX9NqlHwEfMW5RmfQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.165.64.0/18
80.185.0.0/16
188.7.0.0/16
IPv6:
2a00:8380::/32
Signature Algorithm: sha256WithRSAEncryption
4e:5d:9d:df:72:ba:1c:95:7a:82:a1:5c:f5:96:ee:d6:9e:4a:
8b:a1:5e:78:f3:1f:f1:22:a3:3b:a0:4c:f6:f6:ab:bf:22:d9:
1c:3e:3d:0b:65:1b:2a:dd:a7:ae:7e:78:87:01:9f:94:e1:81:
b0:d3:11:8e:a5:34:a3:db:0c:48:0b:38:d6:e7:68:17:92:01:
98:f9:f9:73:9b:8f:cc:25:02:d8:41:4c:57:34:51:c2:12:99:
00:7b:c0:21:0e:d7:13:97:72:28:7b:36:3a:72:94:91:dd:68:
90:ec:f7:a2:03:f2:09:a8:22:7b:a6:cc:e8:1b:6a:c2:b9:d0:
61:ef:c4:2d:1c:5d:76:f7:1d:5a:f0:fa:09:48:e7:61:e6:a9:
5b:c9:bf:ff:cb:20:01:76:94:d1:fa:6a:29:a3:5f:b8:7a:ff:
89:b4:0d:d8:fb:a4:b0:0b:f2:01:76:4f:55:66:15:8b:91:14:
53:ff:7e:6f:53:ed:fd:2c:8e:41:84:78:8c:bc:d9:1d:07:ec:
1a:e2:f4:43:ad:13:03:cf:40:6b:d9:ff:b8:0b:f4:c6:0f:1f:
5f:af:8b:cb:fc:db:83:2b:18:54:c0:37:b2:af:d9:fd:79:18:
e1:c5:29:c2:e9:a4:0e:df:bc:33:24:24:b1:ef:4a:56:20:75:
94:99:ec:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEJ+tHXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
NTI5NTIzN2FiNDRiY2UzNWRkZmMyNjI3ZmQ0OWE4YzQ0NjEyNDQxMB4XDTIyMDEw
MTEzMDAyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNWI1MjYwMGY5Mjcy
OTgwNWZkMzZhOTQ3YzA0N2NjNWI5NDY2N2QwOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALPKV4M/Qs1E9axxSChkmNjtli1LQzcwoFKW8G39ejJIDnX6
Z7V4e4wT+mi1AqXm4/RggJQEpt2p+5XbhlHDaxlotB9VDChmYSSUY6s1nv3g6Rzy
bvGhR+EWD8rgN5a++yePG+2dbhKVYX0NduhNCsfSSxuDbM51NFpH3xCaUNsduDFO
1stkFiAhTH15SwoGuhYk/uM/iqoDo79CAxDsaTO1+d6hMqy0LojWmOdDRuIbbLOD
nf2eTvzAPfWXvZ9ObOxY8WbgN72El3AHE79XJ98ON93U1j0hM+I0USU4xXOOhrJ5
JmKYqpgF9QyI4Hyuw6NAH04Av3cWknRJSyOUI2ECAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRbUmAPknKYBf02qUfAR8xblGZ9CTAfBgNVHSMEGDAWgBSlKVI3q0S8413f
wmJ/1JqMRGEkQTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3BTbFNONnRFdk9OZDM4SmlmOVNhakVSaEpFRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmIvMDk1MWQ3LTNmNjctNGJkNC05MDRkLWM5NGZlYWE2Y2I3OS8x
L1cxSmdENUp5bUFYOU5xbEh3RWZNVzVSbWZRay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIv
MDk1MWQ3LTNmNjctNGJkNC05MDRkLWM5NGZlYWE2Y2I3OS8xL3BTbFNONnRFdk9O
ZDM4SmlmOVNhakVSaEpFRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA4
BggrBgEFBQcBBwEB/wQpMCcwFgQCAAEwEAMEBi6lQAMDAFC5AwMAvAcwDQQCAAIw
BwMFACoAg4AwDQYJKoZIhvcNAQELBQADggEBAE5dnd9yuhyVeoKhXPWW7taeSouh
XnjzH/EiozugTPb2q78i2Rw+PQtlGyrdp65+eIcBn5ThgbDTEY6lNKPbDEgLONbn
aBeSAZj5+XObj8wlAthBTFc0UcISmQB7wCEO1xOXcih7NjpylJHdaJDs96ID8gmo
InumzOgbasK50GHvxC0cXXb3HVrw+glI52HmqVvJv//LIAF2lNH6aimjX7h6/4m0
Ddj7pLAL8gF2T1VmFYuRFFP/fm9T7f0sjkGEeIy82R0H7Bri9EOtEwPPQGvZ/7gL
9MYPH1+vi8v824MrGFTAN7Kv2f15GOHFKcLppA7fvDMkJLHvSlYgdZSZ7Hk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:07 2025 by rpki-client