Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/W5nu10iQUnq2WyeNqh0FW5pghzg.roa
File: W5nu10iQUnq2WyeNqh0FW5pghzg.roa (raw, json)
Hash identifier: ACfKtWV/LqUk5Me2H3s1q6ll6Bv01sLwUkPbncMCuVs=
Subject key identifier: 5B:99:EE:D7:48:90:52:7A:B6:5B:27:8D:AA:1D:05:5B:9A:60:87:38
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 01958B0C3C5DB06BEDA70ED253430BED838C
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/W5nu10iQUnq2WyeNqh0FW5pghzg.roa
Signing time: Wed 12 Mar 2025 15:49:49 +0000
ROA not before: Wed 12 Mar 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59711
IP address blocks: 5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
77.83.196.0/24 maxlen: 24
77.83.197.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
79.141.164.0/23 maxlen: 23
79.141.174.0/23 maxlen: 23
85.158.108.0/24 maxlen: 24
85.158.109.0/24 maxlen: 24
85.158.110.0/24 maxlen: 24
89.150.40.0/24 maxlen: 24
89.150.45.0/24 maxlen: 24
89.150.48.0/24 maxlen: 24
89.150.57.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
91.220.8.0/24 maxlen: 24
185.40.86.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.80.54.0/23 maxlen: 23
185.81.114.0/23 maxlen: 23
185.81.114.0/24 maxlen: 24
185.81.115.0/24 maxlen: 24
185.104.192.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
185.104.194.0/24 maxlen: 24
185.117.88.0/23 maxlen: 23
185.117.90.0/23 maxlen: 23
185.123.102.0/24 maxlen: 24
185.174.133.0/24 maxlen: 24
185.174.135.0/24 maxlen: 24
185.235.137.0/24 maxlen: 24
185.235.138.0/24 maxlen: 24
185.253.116.0/24 maxlen: 24
185.253.117.0/24 maxlen: 24
185.253.118.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
193.42.39.0/24 maxlen: 24
193.111.208.0/24 maxlen: 24
195.95.155.0/24 maxlen: 24
2a01:8640::/48 maxlen: 48
2a01:8640:2::/48 maxlen: 48
2a01:8640:6::/48 maxlen: 48
2a01:8640:9::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:13::/48 maxlen: 48
2a01:8640:14::/48 maxlen: 48
2a01:8640:15::/48 maxlen: 48
2a01:8640:17::/48 maxlen: 48
2a01:8640:18::/48 maxlen: 48
2a01:8640:1a::/48 maxlen: 48
2a01:8640:1b::/48 maxlen: 48
2a01:8640:1c::/48 maxlen: 48
2a01:8640:1d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:0c:3c:5d:b0:6b:ed:a7:0e:d2:53:43:0b:ed:83:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: Mar 12 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b99eed74890527ab65b278daa1d055b9a608738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:de:a2:eb:70:cb:ff:e1:39:92:fe:7a:53:e5:
c4:62:b2:c7:99:f2:9f:0b:2f:9b:e9:ac:07:50:d5:
79:67:e4:4e:ad:4e:9a:d6:54:6e:47:4a:66:94:cd:
d4:f6:83:98:26:0c:ce:a0:b4:83:9b:71:20:ef:b8:
90:a6:43:06:e3:48:68:f5:81:51:9b:eb:a1:8f:f7:
54:44:f9:fd:d4:0b:21:65:89:3d:6a:09:8e:27:2d:
25:20:88:e9:0c:8e:97:4c:8d:38:19:f6:89:01:13:
f7:4f:6d:53:40:9e:cc:0f:7d:ba:d1:ff:f6:e1:fb:
c7:30:8d:3b:44:28:ef:a5:4e:f1:2e:57:e4:c7:80:
5b:75:fa:f5:fb:0e:8d:2d:dd:3d:f5:6b:fb:b5:90:
90:b4:50:a9:95:9a:7b:86:d1:2e:d9:a7:31:55:15:
d1:3a:dd:11:09:dd:e1:a8:0a:06:15:8b:a9:39:6a:
39:c5:74:1d:e3:ea:51:7c:65:e0:9b:7a:70:81:96:
59:e3:00:66:55:d1:51:37:f4:2c:e8:77:40:b1:b3:
4b:37:cb:bf:0d:47:ac:ab:93:95:d3:58:ca:33:e4:
ef:0d:e5:38:dc:93:c2:eb:5e:f0:b8:46:7d:f6:1c:
ed:a2:27:d8:f0:df:11:3c:92:8f:5e:f5:43:6c:58:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:99:EE:D7:48:90:52:7A:B6:5B:27:8D:AA:1D:05:5B:9A:60:87:38
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/W5nu10iQUnq2WyeNqh0FW5pghzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0-77.83.198.255
79.141.164.0/23
79.141.174.0/23
85.158.108.0-85.158.110.255
89.150.40.0/24
89.150.45.0/24
89.150.48.0/24
89.150.57.0/24
91.193.18.0/24
91.220.8.0/24
185.40.86.0/24
185.80.52.0/22
185.81.114.0/23
185.104.192.0-185.104.194.255
185.117.88.0/22
185.123.102.0/24
185.174.133.0/24
185.174.135.0/24
185.235.137.0-185.235.138.255
185.253.116.0-185.253.118.255
193.42.36.0/24
193.42.39.0/24
193.111.208.0/24
195.95.155.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:6::/48
2a01:8640:9::-2a01:8640:a:ffff:ffff:ffff:ffff:ffff
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:15:ffff:ffff:ffff:ffff:ffff
2a01:8640:17::-2a01:8640:18:ffff:ffff:ffff:ffff:ffff
2a01:8640:1a::-2a01:8640:1d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
17:e7:b1:06:e6:84:fc:99:21:a1:08:4c:04:10:82:e5:46:94:
dc:f4:1f:f2:72:7e:93:13:73:b8:55:0c:ea:c9:5f:59:c3:6d:
22:f1:c3:5a:db:dc:45:91:85:97:31:66:fb:26:34:48:6f:fe:
92:fd:7d:fc:39:96:c1:91:df:72:74:d0:e9:0f:57:4b:16:4c:
83:a7:01:6a:e6:21:f4:d8:69:b9:34:42:52:5e:b0:e5:71:85:
73:bd:7a:be:c5:ba:df:5b:cf:30:da:df:ff:99:a2:fe:bc:3f:
73:6d:65:44:f2:ea:d2:37:a4:a9:90:b5:97:28:70:9b:c2:4e:
8b:41:e6:b9:f0:c8:3d:9c:d5:4c:b9:42:1f:78:48:30:08:6c:
aa:44:bd:69:2b:1c:5c:41:d4:a6:72:fa:18:00:5c:7a:e0:4d:
c5:c7:2d:7b:c8:e2:c8:e1:b2:c4:f0:5f:28:a2:29:a3:87:bf:
ea:e5:9c:ae:29:96:9a:4d:ad:a9:7e:04:40:f8:02:51:30:ce:
fa:bf:f5:19:9a:bb:bc:30:be:22:aa:da:fb:10:65:db:33:a7:
fc:6d:cc:00:a5:3c:cb:07:ae:5e:04:19:4e:72:60:1b:fd:86:
8e:15:72:cd:4c:12:57:59:a0:44:7b:09:0c:04:99:20:16:f6:
f1:64:f8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:41:51 2025 by rpki-client