Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa
File: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (raw, json)
Hash identifier: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=
Subject key identifier: C2:93:B6:81:61:DD:ED:F2:22:25:8D:94:9B:00:60:86:E2:94:F0:F9
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 0194236917EA3D8DEBB952700CD9FE285870
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa
Signing time: Wed 01 Jan 2025 19:47:57 +0000
ROA not before: Wed 01 Jan 2025 19:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202470
IP address blocks: 109.107.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:17:ea:3d:8d:eb:b9:52:70:0c:d9:fe:28:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 1 19:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c293b68161ddedf222258d949b006086e294f0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:5e:e6:d8:84:4a:79:a0:43:46:1c:bf:e1:
70:c6:a9:15:f1:8a:48:eb:e1:88:00:58:2a:9d:a8:
e3:3e:6e:3f:c4:dd:a4:5a:84:ee:92:90:c8:0f:f6:
39:76:34:1d:c8:9f:1c:21:a0:8d:f2:aa:f3:97:ce:
3a:1a:1d:d3:ab:a6:75:c2:5d:1e:85:3d:d7:d3:53:
4d:65:13:8a:73:51:13:35:64:29:04:00:80:35:d8:
15:bf:13:71:19:31:6a:ec:f0:0e:30:32:8b:34:c3:
0a:55:1d:1f:d5:29:b8:b6:f7:10:53:fc:1a:a2:01:
d6:95:b0:1a:26:ef:0c:09:6c:d5:88:81:38:7c:d5:
a9:52:4b:49:f7:4d:4c:6f:8f:a3:fd:c8:59:61:97:
9f:9f:e8:ba:60:0e:ec:05:18:40:39:fa:41:71:08:
9d:d9:4c:54:ac:20:81:a2:e2:39:a7:84:a5:96:76:
88:52:ee:a5:98:bc:bc:e7:a8:87:60:6e:43:19:dc:
a5:d5:58:84:c2:6c:50:ee:ee:12:fa:31:f5:b3:07:
4c:1b:b5:15:6b:b3:05:31:09:de:4c:62:4c:b1:fa:
07:15:dc:6b:8d:2e:f0:9c:60:7d:4c:f3:2d:93:07:
34:6d:25:34:09:63:29:55:93:cd:7e:1b:50:f1:18:
25:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:B6:81:61:DD:ED:F2:22:25:8D:94:9B:00:60:86:E2:94:F0:F9
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:21:59:e3:80:1a:37:c3:03:7c:6f:99:5d:6a:54:4e:e7:2d:
9e:69:3c:25:4b:7b:0e:19:7f:d8:ed:43:e0:b8:c9:41:fe:67:
b2:7b:ca:bd:ed:7e:bb:cb:ec:f9:99:25:ca:44:f0:75:b2:44:
a9:41:b5:5c:3e:8d:55:14:0c:7a:02:d3:65:db:6f:03:e1:39:
ce:55:d0:5b:23:3d:ed:30:40:cf:d1:72:dd:08:45:85:23:a9:
84:f1:8c:b2:52:04:20:a9:4f:e1:6c:b8:19:3e:6e:66:e2:bd:
3c:36:f9:90:6e:a8:b8:58:3f:0f:72:41:1b:b9:34:d7:dc:f0:
3f:09:f0:ce:02:c6:50:06:d5:74:cb:11:1e:13:32:2e:07:61:
2a:b5:f1:8b:96:c3:67:99:a3:46:4f:c3:32:a4:32:84:84:f5:
85:5e:4a:ff:27:43:71:5b:2c:cd:bb:3a:04:0b:f2:05:28:93:
08:2e:fd:68:fd:2a:ea:66:25:3a:ff:33:7b:18:06:72:cc:cf:
27:4b:63:7c:0c:99:66:5f:91:4f:ea:3e:9a:29:41:0a:c2:fd:
b2:bf:94:72:98:5b:80:dc:c2:d9:63:86:75:05:26:21:d4:96:
b5:78:24:d9:b5:8b:c2:94:39:a2:52:9b:c9:bc:5b:28:9d:4c:
16:b9:74:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaRfqPY3ruVJwDNn+KFhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjUwMTAxMTk0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjkzYjY4MTYxZGRlZGYyMjIyNThkOTQ5YjAwNjA4NmUyOTRmMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGBe5tiESnmgQ0Ycv+FwxqkV8YpI
6+GIAFgqnajjPm4/xN2kWoTukpDID/Y5djQdyJ8cIaCN8qrzl846Gh3Tq6Z1wl0e
hT3X01NNZROKc1ETNWQpBACANdgVvxNxGTFq7PAOMDKLNMMKVR0f1Sm4tvcQU/wa
ogHWlbAaJu8MCWzViIE4fNWpUktJ901Mb4+j/chZYZefn+i6YA7sBRhAOfpBcQid
2UxUrCCBouI5p4SllnaIUu6lmLy856iHYG5DGdyl1ViEwmxQ7u4S+jH1swdMG7UV
a7MFMQneTGJMsfoHFdxrjS7wnGB9TPMtkwc0bSU0CWMpVZPNfhtQ8RglbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMKTtoFh3e3yIiWNlJsAYIbilPD5MB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvd3BPMmdXSGQ3ZklpSlkyVW13QmdodUtVOFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuSMA0G
CSqGSIb3DQEBCwUAA4IBAQBqIVnjgBo3wwN8b5ldalRO5y2eaTwlS3sOGX/Y7UPg
uMlB/meye8q97X67y+z5mSXKRPB1skSpQbVcPo1VFAx6AtNl228D4TnOVdBbIz3t
MEDP0XLdCEWFI6mE8YyyUgQgqU/hbLgZPm5m4r08NvmQbqi4WD8PckEbuTTX3PA/
CfDOAsZQBtV0yxEeEzIuB2EqtfGLlsNnmaNGT8MypDKEhPWFXkr/J0NxWyzNuzoE
C/IFKJMILv1o/SrqZiU6/zN7GAZyzM8nS2N8DJlmX5FP6j6aKUEKwv2yv5RymFuA
3MLZY4Z1BSYh1Ja1eCTZtYvClDmiUpvJvFsonUwWuXRa
-----END CERTIFICATE-----
Generated at Thu Apr 10 01:35:08 2025 by rpki-client