Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8a54cc-7aba-4ed5-a5f8-02bd410e0795/1/whrnesgirOi4hPoLrs2qWYCVjcg.roa
File: whrnesgirOi4hPoLrs2qWYCVjcg.roa (raw, json)
Hash identifier: EmLRtD5aJkRqDVL/80hnAzDPRmfWwfwZzViZYTTWHjU=
Subject key identifier: C2:1A:E7:7A:C8:22:AC:E8:B8:84:FA:0B:AE:CD:AA:59:80:95:8D:C8
Certificate issuer: /CN=5b2bc48c70c271d3fea8a8e18d1a088d73647854
Certificate serial: 7B06DB
Authority key identifier: 5B:2B:C4:8C:70:C2:71:D3:FE:A8:A8:E1:8D:1A:08:8D:73:64:78:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyvEjHDCcdP-qKjhjRoIjXNkeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8a54cc-7aba-4ed5-a5f8-02bd410e0795/1/whrnesgirOi4hPoLrs2qWYCVjcg.roa
Signing time: Sat 01 Jan 2022 00:55:11 +0000
ROA not before: Sat 01 Jan 2022 00:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16169
IP address blocks: 185.114.90.0/24 maxlen: 24
185.114.91.0/24 maxlen: 24
185.114.88.0/24 maxlen: 24
185.114.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8062683 (0x7b06db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2bc48c70c271d3fea8a8e18d1a088d73647854
Validity
Not Before: Jan 1 00:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c21ae77ac822ace8b884fa0baecdaa5980958dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:76:23:4e:7f:b9:ca:b6:2d:d0:f5:a1:25:
f1:19:ae:b4:3a:d4:0d:ed:8a:75:4c:28:98:c7:58:
bf:ef:68:5e:e9:7e:ef:86:84:6a:01:45:5a:06:34:
b2:78:94:33:52:30:d6:05:2f:95:e2:bc:3e:93:2f:
a3:d7:d2:85:04:f1:e5:c3:8a:28:0c:6e:6e:78:e1:
d3:7a:9a:ff:61:1a:56:86:c3:d5:de:12:5a:d2:b1:
e6:90:d1:b9:0a:59:c1:2f:74:73:b8:68:fe:5c:54:
a3:35:ff:18:9b:b3:76:d1:f7:bb:13:59:39:45:b5:
9b:4d:f2:ac:1d:a6:ee:b4:8b:ef:ee:d6:c7:83:83:
0c:e6:fd:b1:a1:a4:6b:36:1d:52:c5:a7:88:bd:0b:
46:58:cb:f7:80:28:64:d3:3a:68:83:31:15:bb:dd:
0a:f8:5a:ea:0d:27:91:66:91:08:77:6c:82:64:79:
a4:07:8b:1d:21:ee:7c:a8:67:cd:f1:8a:05:4f:55:
99:66:33:73:34:78:c8:de:97:8c:53:5b:f8:0c:80:
13:ba:dc:a9:f1:c0:23:5e:0e:e1:0e:91:ca:c4:e0:
0a:29:34:a8:b5:8a:2b:a4:9d:3a:ee:7c:48:a6:e7:
36:9d:4f:29:59:28:68:44:22:44:44:1f:1c:00:ad:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:E7:7A:C8:22:AC:E8:B8:84:FA:0B:AE:CD:AA:59:80:95:8D:C8
X509v3 Authority Key Identifier:
keyid:5B:2B:C4:8C:70:C2:71:D3:FE:A8:A8:E1:8D:1A:08:8D:73:64:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyvEjHDCcdP-qKjhjRoIjXNkeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8a54cc-7aba-4ed5-a5f8-02bd410e0795/1/whrnesgirOi4hPoLrs2qWYCVjcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8a54cc-7aba-4ed5-a5f8-02bd410e0795/1/WyvEjHDCcdP-qKjhjRoIjXNkeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:5d:c4:e5:ff:5f:84:95:7a:e8:f6:e3:d2:72:70:e1:55:11:
c6:4e:ef:d0:06:2a:97:2e:2e:f3:fe:d7:3c:c2:d2:ae:63:a7:
62:6e:d1:19:22:c7:a9:65:62:0f:af:f7:54:f6:7e:a0:79:a5:
9a:ec:dd:56:e3:c5:d8:99:38:a9:77:e4:13:ab:51:6a:fa:c4:
43:45:50:86:3b:07:59:58:96:a3:3e:9c:59:a8:e9:f1:d4:ac:
a9:d0:1e:bd:9f:9c:2e:24:7f:f4:eb:81:21:62:4b:3c:7e:98:
ac:2c:ca:3d:a6:b4:f6:71:7d:bb:a9:75:95:4f:8d:2c:5d:44:
0f:9a:99:6a:62:97:4c:cd:4c:ee:07:9d:19:f1:f5:6b:09:d5:
08:6f:ec:1a:2e:a0:ad:5d:da:f6:70:a2:ed:b2:5a:ae:ef:1d:
c0:da:95:f2:58:f0:ad:3d:97:6a:13:04:22:fa:e5:58:0a:45:
18:b6:0c:0f:fe:8c:c4:b4:be:b2:e0:e3:ca:bf:b4:9a:08:32:
56:30:b2:51:32:a0:d0:af:ff:42:49:ea:ef:7c:63:c3:89:1f:
89:11:a3:ac:8c:dc:07:02:fb:0e:71:00:87:cc:60:1c:76:31:
06:ee:d0:71:ab:d4:be:64:57:15:03:88:ab:6c:03:af:22:f7:
f5:eb:37:87
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDewbbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDVi
MmJjNDhjNzBjMjcxZDNmZWE4YThlMThkMWEwODhkNzM2NDc4NTQwHhcNMjIwMTAx
MDA1NTExWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMjFhZTc3YWM4MjJh
Y2U4Yjg4NGZhMGJhZWNkYWE1OTgwOTU4ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA3qx2I05/ucq2LdD1oSXxGa60OtQN7Yp1TCiYx1i/72he6X7v
hoRqAUVaBjSyeJQzUjDWBS+V4rw+ky+j19KFBPHlw4ooDG5ueOHTepr/YRpWhsPV
3hJa0rHmkNG5ClnBL3RzuGj+XFSjNf8Ym7N20fe7E1k5RbWbTfKsHabutIvv7tbH
g4MM5v2xoaRrNh1SxaeIvQtGWMv3gChk0zpogzEVu90K+FrqDSeRZpEId2yCZHmk
B4sdIe58qGfN8YoFT1WZZjNzNHjI3peMU1v4DIATutyp8cAjXg7hDpHKxOAKKTSo
tYorpJ067nxIpuc2nU8pWShoRCJERB8cAK0QMQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMIa53rIIqzouIT6C67NqlmAlY3IMB8GA1UdIwQYMBaAFFsrxIxwwnHT/qio
4Y0aCI1zZHhUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
V3l2RWpIRENjZFAtcUtqaGpSb0lqWE5rZUZRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kZS84YTU0Y2MtN2FiYS00ZWQ1LWE1ZjgtMDJiZDQxMGUwNzk1LzEv
d2hybmVzZ2lyT2k0aFBvTHJzMnFXWUNWamNnLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS84
YTU0Y2MtN2FiYS00ZWQ1LWE1ZjgtMDJiZDQxMGUwNzk1LzEvV3l2RWpIRENjZFAt
cUtqaGpSb0lqWE5rZUZRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXJYMA0GCSqGSIb3DQEBCwUAA4IB
AQBcXcTl/1+ElXro9uPScnDhVRHGTu/QBiqXLi7z/tc8wtKuY6dibtEZIsepZWIP
r/dU9n6geaWa7N1W48XYmTipd+QTq1Fq+sRDRVCGOwdZWJajPpxZqOnx1Kyp0B69
n5wuJH/064EhYks8fpisLMo9prT2cX27qXWVT40sXUQPmplqYpdMzUzuB50Z8fVr
CdUIb+waLqCtXdr2cKLtslqu7x3A2pXyWPCtPZdqEwQi+uVYCkUYtgwP/ozEtL6y
4OPKv7SaCDJWMLJRMqDQr/9CServfGPDiR+JEaOsjNwHAvsOcQCHzGAcdjEG7tBx
q9S+ZFcVA4irbAOvIvf16zeH
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:52 2025 by rpki-client