Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wLPS1_2_VrvTYAbUWdnXe9NZsl8.roa
File: wLPS1_2_VrvTYAbUWdnXe9NZsl8.roa (raw, json)
Hash identifier: DK5Yf4O80hmcNk3vxB6nhDlLORl13hWRP7YMy7CrExo=
Subject key identifier: C0:B3:D2:D7:FD:BF:56:BB:D3:60:06:D4:59:D9:D7:7B:D3:59:B2:5F
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64ACD81966EAF398B5477B8C9105C6
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wLPS1_2_VrvTYAbUWdnXe9NZsl8.roa
Signing time: Thu 09 Jan 2025 09:28:19 +0000
ROA not before: Thu 09 Jan 2025 09:28:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34524
IP address blocks: 5.104.176.0/24 maxlen: 24
5.104.177.0/24 maxlen: 24
5.104.178.0/24 maxlen: 24
5.104.179.0/24 maxlen: 24
5.104.180.0/24 maxlen: 24
5.104.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:ac:d8:19:66:ea:f3:98:b5:47:7b:8c:91:05:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0b3d2d7fdbf56bbd36006d459d9d77bd359b25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:3d:1b:f1:aa:7d:5d:ff:f1:66:ff:7c:b3:
7f:63:2b:c9:3e:dd:81:a3:ef:1c:2a:bb:d5:41:19:
b7:e7:28:4c:ae:db:86:b9:84:45:ce:ff:ef:97:7e:
d5:e3:0d:74:a4:36:19:f0:4d:c5:4e:17:77:42:4b:
46:db:63:e4:58:2f:46:20:ed:fd:70:19:1c:30:ea:
53:67:cb:e0:48:87:fa:38:c3:d6:d6:2f:6b:2f:8b:
a9:d5:36:c4:e3:e3:b9:54:95:2a:bf:3a:83:69:e5:
b6:ac:cd:5c:51:6c:f7:01:16:9e:18:3a:90:6f:22:
d4:97:07:1e:ef:13:79:ae:d3:de:df:2e:be:61:8b:
43:dd:8b:ec:dc:cd:c1:fb:c3:85:6c:24:9d:99:14:
e5:82:c2:17:7c:04:7a:49:6e:b6:4d:31:8d:16:fe:
6c:ee:41:8a:ef:97:ac:16:4a:8c:89:97:d1:27:9a:
b5:4e:3e:d0:d9:8f:21:b9:12:33:59:c0:7c:44:b3:
43:71:ca:8e:9d:df:8f:1c:7d:42:f7:f5:89:5b:46:
94:b6:84:19:f3:ef:10:dc:bd:c3:e4:9f:20:a6:d7:
d8:53:e7:0f:12:69:37:db:f9:41:bf:a9:11:6c:1f:
a1:d3:2a:2c:89:e0:6d:37:06:c7:5f:02:3f:14:11:
a9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B3:D2:D7:FD:BF:56:BB:D3:60:06:D4:59:D9:D7:7B:D3:59:B2:5F
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/wLPS1_2_VrvTYAbUWdnXe9NZsl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.176.0-5.104.181.255
Signature Algorithm: sha256WithRSAEncryption
6d:4e:17:73:9a:16:34:d4:87:64:18:ce:8b:83:0d:17:9a:66:
ca:ba:96:89:4b:66:9a:5a:cd:8a:fc:34:de:4f:6e:c2:cf:bb:
a6:f9:48:16:a3:e0:cc:3d:71:67:0a:cd:98:49:9e:89:c4:83:
28:db:1d:e1:fd:df:61:9f:c2:d1:d3:60:69:10:61:9c:39:a1:
eb:64:f0:e7:07:6d:ba:5c:0d:c6:81:76:95:fb:24:28:74:cf:
c6:8c:5a:48:06:45:28:19:ee:16:75:16:89:ab:50:2a:9e:0f:
3e:70:0f:ba:bb:ea:f3:50:bb:60:c6:0a:3c:45:21:3c:0b:c6:
9a:a0:6f:8c:9d:fa:6b:ac:55:2c:4b:d3:4f:45:f3:69:32:95:
5b:ae:cf:f2:fa:bf:bc:fe:be:ee:29:03:b8:20:3c:68:8f:7b:
74:0f:c0:3f:b9:b2:60:b0:7f:e0:9a:90:b4:a3:ce:32:43:ae:
cf:d0:b3:a0:c5:1e:83:b2:ef:55:f5:9a:66:b3:85:fa:12:37:
e4:a1:28:d9:2b:50:f0:9e:0a:cd:6e:23:8a:6a:6a:b1:6e:9a:
6c:6f:d0:68:ae:3b:b6:c8:fc:f2:8a:b5:ae:f1:77:94:83:0b:
52:f0:cf:3b:c0:1e:bc:4f:e8:93:32:f8:d2:24:3f:0a:36:79:
d9:71:17:cd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZRKZKzYGWbq85i1R3uMkQXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjUwMTA5MDkyODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGIzZDJkN2ZkYmY1NmJiZDM2MDA2ZDQ1OWQ5ZDc3YmQzNTliMjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GI9G/GqfV3/8Wb/fLN/YyvJPt2B
o+8cKrvVQRm35yhMrtuGuYRFzv/vl37V4w10pDYZ8E3FThd3QktG22PkWC9GIO39
cBkcMOpTZ8vgSIf6OMPW1i9rL4up1TbE4+O5VJUqvzqDaeW2rM1cUWz3ARaeGDqQ
byLUlwce7xN5rtPe3y6+YYtD3Yvs3M3B+8OFbCSdmRTlgsIXfAR6SW62TTGNFv5s
7kGK75esFkqMiZfRJ5q1Tj7Q2Y8huRIzWcB8RLNDccqOnd+PHH1C9/WJW0aUtoQZ
8+8Q3L3D5J8gptfYU+cPEmk32/lBv6kRbB+h0yosieBtNwbHXwI/FBGpXwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMCz0tf9v1a702AG1FnZ13vTWbJfMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvd0xQUzFfMl9WcnZUWUFiVVdkblhlOU5ac2w4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQFaLAD
BAEFaLQwDQYJKoZIhvcNAQELBQADggEBAG1OF3OaFjTUh2QYzouDDReaZsq6lolL
ZppazYr8NN5PbsLPu6b5SBaj4Mw9cWcKzZhJnonEgyjbHeH932GfwtHTYGkQYZw5
oetk8OcHbbpcDcaBdpX7JCh0z8aMWkgGRSgZ7hZ1FomrUCqeDz5wD7q76vNQu2DG
CjxFITwLxpqgb4yd+musVSxL009F82kylVuuz/L6v7z+vu4pA7ggPGiPe3QPwD+5
smCwf+CakLSjzjJDrs/Qs6DFHoOy71X1mmazhfoSN+ShKNkrUPCeCs1uI4pqarFu
mmxv0GiuO7bI/PKKta7xd5SDC1LwzzvAHrxP6JMy+NIkPwo2edlxF80=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:41 2025 by rpki-client