Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/l-WUwIMHtSNjbCJJSwHSu8wuoN8.roa
File: l-WUwIMHtSNjbCJJSwHSu8wuoN8.roa (raw, json)
Hash identifier: +otAGyK/UGuwrC0SrbJxY2RrkPU7YnkT3XDpoHinxLs=
Subject key identifier: 97:E5:94:C0:83:07:B5:23:63:6C:22:49:4B:01:D2:BB:CC:2E:A0:DF
Certificate issuer: /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial: 06602469
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/l-WUwIMHtSNjbCJJSwHSu8wuoN8.roa
Signing time: Tue 24 May 2022 10:15:16 +0000
ROA not before: Tue 24 May 2022 10:15:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59711
IP address blocks: 185.80.54.0/23 maxlen: 23
185.174.133.0/24 maxlen: 24
185.80.52.0/23 maxlen: 23
185.174.135.0/24 maxlen: 24
91.193.18.0/24 maxlen: 24
185.117.90.0/23 maxlen: 23
185.104.194.0/24 maxlen: 24
185.104.193.0/24 maxlen: 24
77.83.196.0/24 maxlen: 24
77.83.198.0/24 maxlen: 24
193.42.36.0/24 maxlen: 24
5.149.248.0/23 maxlen: 23
5.149.254.0/23 maxlen: 23
79.141.164.0/23 maxlen: 23
79.141.172.0/24 maxlen: 24
185.81.114.0/23 maxlen: 23
2a01:8640:2::/48 maxlen: 48
2a01:8640:12::/48 maxlen: 48
2a01:8640:11::/48 maxlen: 48
2a01:8640:f::/48 maxlen: 48
2a01:8640:a::/48 maxlen: 48
2a01:8640::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106964073 (0x6602469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Validity
Not Before: May 24 10:15:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97e594c08307b523636c22494b01d2bbcc2ea0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:8b:d7:a4:31:4d:c6:e6:ad:a4:3c:d6:30:
b4:ab:b4:98:48:d7:de:fc:d1:d8:dc:2e:e4:a0:87:
65:42:ed:49:3f:88:65:a4:a6:41:c3:40:15:df:13:
e7:20:e4:7b:9b:9c:88:c8:43:ac:a8:00:97:c6:e9:
a4:29:c5:64:cc:40:89:92:0d:ca:c7:80:cd:20:3d:
73:07:69:6d:98:84:45:f6:41:56:b0:59:cf:27:7b:
21:5f:93:ce:c1:f0:06:3b:1d:cd:fc:a2:28:1f:5d:
81:d4:08:f5:51:17:bf:26:a4:aa:6b:0d:9a:8d:8b:
7d:aa:f2:1b:2b:aa:03:2b:34:e8:00:af:33:c8:04:
b0:67:d7:38:b7:18:d1:40:f5:7a:6f:87:21:19:b6:
69:99:8a:5b:64:88:52:44:ac:6a:ee:cf:1b:1d:76:
76:5a:07:40:a8:17:c4:89:b7:e9:87:f1:a8:af:42:
f3:7c:5b:b6:72:c2:06:97:87:75:2e:19:ac:3d:ec:
fe:57:37:ee:8e:d1:f5:a4:24:e4:83:80:05:bf:9f:
45:86:87:be:93:b7:0c:cb:27:53:74:7e:c6:dc:3d:
21:96:2c:35:0c:42:b8:e5:36:79:b0:c3:24:da:89:
81:0f:c2:50:a3:78:f1:11:3f:45:b1:83:fb:d5:15:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E5:94:C0:83:07:B5:23:63:6C:22:49:4B:01:D2:BB:CC:2E:A0:DF
X509v3 Authority Key Identifier:
keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/l-WUwIMHtSNjbCJJSwHSu8wuoN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.248.0/23
5.149.254.0/23
77.83.196.0/24
77.83.198.0/24
79.141.164.0/23
79.141.172.0/24
91.193.18.0/24
185.80.52.0/22
185.81.114.0/23
185.104.193.0-185.104.194.255
185.117.90.0/23
185.174.133.0/24
185.174.135.0/24
193.42.36.0/24
IPv6:
2a01:8640::/48
2a01:8640:2::/48
2a01:8640:a::/48
2a01:8640:f::/48
2a01:8640:11::-2a01:8640:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:b5:76:29:d0:b2:c6:9c:57:ba:5b:af:55:3d:f7:bd:43:23:
69:10:57:e4:1e:3d:0b:c4:8e:03:e0:05:78:a1:e5:92:c8:63:
10:c5:c3:6f:52:1c:3f:1b:00:71:e3:b5:56:94:e2:43:2d:98:
2c:62:d9:a7:e9:24:96:01:a9:63:79:d0:7d:27:68:69:64:8c:
83:9f:6d:f4:53:46:06:b1:a7:10:f9:cd:88:54:88:6e:db:89:
87:ac:df:53:08:78:9e:b1:d5:fd:d2:80:31:03:b1:99:2d:ae:
1c:43:cc:11:e3:21:4b:5a:7e:31:72:c2:2e:df:b0:97:48:6a:
35:07:e8:b6:33:2a:b3:8f:93:eb:c1:f8:3f:be:95:4a:88:f2:
a4:e1:b8:a2:e7:9c:14:ec:60:f8:7a:1c:fd:e4:87:08:25:52:
0a:c1:06:ba:78:ce:3a:1b:0b:5a:23:7d:13:9f:ce:48:51:ce:
da:5c:3f:30:0d:dd:0a:4d:ef:28:b3:9a:41:8a:f3:4a:40:d0:
c6:d4:43:2b:35:80:4e:b5:ae:81:51:16:76:7a:44:52:50:f1:
4c:1e:eb:d4:81:34:15:9a:f5:53:20:03:91:6a:59:7b:b6:c5:
00:65:f3:b6:87:80:51:47:1d:04:55:dc:5a:aa:54:05:42:10:
45:af:63:d3
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIEBmAkaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
OTEyNDJjMzNiYzJlMmU5ZTQ1ODUwYTBmYzY0YWIyYzc1MDZhNGI4MB4XDTIyMDUy
NDEwMTUxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTdlNTk0YzA4MzA3
YjUyMzYzNmMyMjQ5NGIwMWQyYmJjYzJlYTBkZjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALQYi9ekMU3G5q2kPNYwtKu0mEjX3vzR2Nwu5KCHZULtST+I
ZaSmQcNAFd8T5yDke5uciMhDrKgAl8bppCnFZMxAiZINyseAzSA9cwdpbZiERfZB
VrBZzyd7IV+TzsHwBjsdzfyiKB9dgdQI9VEXvyakqmsNmo2LfaryGyuqAys06ACv
M8gEsGfXOLcY0UD1em+HIRm2aZmKW2SIUkSsau7PGx12dloHQKgXxIm36YfxqK9C
83xbtnLCBpeHdS4ZrD3s/lc37o7R9aQk5IOABb+fRYaHvpO3DMsnU3R+xtw9IZYs
NQxCuOU2ebDDJNqJgQ/CUKN48RE/RbGD+9UVMkUCAwEAAaOCAqIwggKeMB0GA1Ud
DgQWBBSX5ZTAgwe1I2NsIklLAdK7zC6g3zAfBgNVHSMEGDAWgBRpEkLDO8Li6eRY
UKD8ZKssdQakuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FSSkN3enZDNHVua1dGQ2dfR1NyTEhVR3BMZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvNjM1NmI5LWM0OWYtNGI0ZC04ZTI5LTM2MmZmZThlZTI3MC8x
L2wtV1V3SU1IdFNOamJDSkpTd0hTdTh3dW9OOC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
NjM1NmI5LWM0OWYtNGI0ZC04ZTI5LTM2MmZmZThlZTI3MC8xL2FSSkN3enZDNHVu
a1dGQ2dfR1NyTEhVR3BMZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
twYIKwYBBQUHAQcBAf8EgacwgaQwYgQCAAEwXAMEAQWV+AMEAQWV/gMEAE1TxAME
AE1TxgMEAU+NpAMEAE+NrAMEAFvBEgMEArlQNAMEAblRcjAMAwQAuWjBAwQAuWjC
AwQBuXVaAwQAua6FAwQAua6HAwQAwSokMD4EAgACMDgDBwAqAYZAAAADBwAqAYZA
AAIDBwAqAYZAAAoDBwAqAYZAAA8wEgMHACoBhkAAEQMHACoBhkAAEjANBgkqhkiG
9w0BAQsFAAOCAQEAErV2KdCyxpxXuluvVT33vUMjaRBX5B49C8SOA+AFeKHlkshj
EMXDb1IcPxsAceO1VpTiQy2YLGLZp+kklgGpY3nQfSdoaWSMg59t9FNGBrGnEPnN
iFSIbtuJh6zfUwh4nrHV/dKAMQOxmS2uHEPMEeMhS1p+MXLCLt+wl0hqNQfotjMq
s4+T68H4P76VSojypOG4ouecFOxg+Hoc/eSHCCVSCsEGunjOOhsLWiN9E5/OSFHO
2lw/MA3dCk3vKLOaQYrzSkDQxtRDKzWATrWugVEWdnpEUlDxTB7r1IE0FZr1UyAD
kWpZe7bFAGXztoeAUUcdBFXcWqpUBUIQRa9j0w==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:11 2025 by rpki-client