Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/8WKeNRHKfnPMtDPrJe2tbs0peW8.roa
File: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (raw, json)
Hash identifier: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=
Subject key identifier: F1:62:9E:35:11:CA:7E:73:CC:B4:33:EB:25:ED:AD:6E:CD:29:79:6F
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 0194222019D88DC10E7431E20EAF2B38038E
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/8WKeNRHKfnPMtDPrJe2tbs0peW8.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59499
IP address blocks: 5.159.8.0/21 maxlen: 21
5.159.8.0/22 maxlen: 22
5.159.12.0/22 maxlen: 22
185.141.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:19:d8:8d:c1:0e:74:31:e2:0e:af:2b:38:03:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1629e3511ca7e73ccb433eb25edad6ecd29796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:d7:1f:51:11:9a:84:c4:f0:15:e5:0c:41:
22:58:39:c3:ea:53:58:44:49:4a:f2:05:f4:47:84:
2c:8e:cf:9d:57:45:9c:2f:98:f0:9e:c8:9c:81:c1:
68:00:73:9b:dd:90:3f:da:af:b6:96:1c:08:24:09:
95:52:a4:5a:eb:3d:ab:f8:3d:01:69:fd:63:80:5f:
31:47:6d:46:98:30:b2:66:b7:f1:c6:4d:33:46:8a:
4b:1c:77:34:10:34:67:30:8a:52:47:2a:cc:59:47:
b8:b4:96:cb:8d:62:91:62:00:fa:2a:05:d9:7d:eb:
a9:c0:a8:5f:db:26:f7:3c:39:ef:33:bd:c9:f6:5c:
84:2b:63:45:82:97:d3:a2:f9:a1:52:4d:c8:56:bc:
63:32:16:4f:c3:54:56:d4:89:27:eb:c0:4c:d3:a5:
64:8f:dd:c2:da:5a:40:ab:47:cd:c7:c4:cb:83:91:
29:22:f8:08:75:6a:a4:dd:5d:cc:0d:27:52:af:1d:
93:2c:36:ab:ff:6c:ee:41:3f:64:71:63:b3:be:f2:
9f:cd:be:b4:5b:b6:47:2a:6f:80:03:52:93:18:ef:
b0:a6:a3:f4:b5:c3:32:6c:a5:e3:93:0e:a1:20:24:
bc:a4:5d:3f:62:0c:a8:6c:77:01:bf:5e:05:a7:dc:
1f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:62:9E:35:11:CA:7E:73:CC:B4:33:EB:25:ED:AD:6E:CD:29:79:6F
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/8WKeNRHKfnPMtDPrJe2tbs0peW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.8.0/21
185.141.16.0/22
Signature Algorithm: sha256WithRSAEncryption
65:4a:ac:c7:16:1e:5f:8a:96:f1:16:0c:41:f2:dc:e1:94:86:
30:ac:d7:4d:bb:08:ea:17:7e:cf:30:f7:08:89:f0:77:fb:a4:
27:04:a9:77:50:11:59:da:f0:f1:78:a5:33:9e:b8:37:64:c5:
24:47:a6:53:76:64:e9:10:df:5b:44:d4:c3:9f:d2:09:23:58:
37:9c:dc:d5:90:6d:fc:92:39:36:72:09:94:2d:ca:84:ce:38:
6a:c1:c7:1d:33:59:a8:81:f6:ae:13:85:b1:fc:d3:d6:69:f0:
ab:c1:2b:e9:e5:1f:ac:45:9f:3c:c8:f4:b8:a3:ef:72:af:73:
54:67:29:3f:03:6b:90:4a:39:a9:1e:90:02:e6:dc:38:05:9b:
73:43:3a:7a:9d:93:72:a8:a4:03:e9:a3:95:aa:93:43:d1:a9:
23:d4:97:d7:ac:c6:2e:cc:22:2f:de:12:e7:86:d2:80:a1:76:
bd:15:24:76:d4:31:01:46:92:6e:d6:8f:f3:a1:6f:94:f6:9c:
ff:52:da:a6:83:05:63:23:2f:79:a2:c2:b2:74:7d:38:ab:90:
17:9a:92:6f:e4:55:c8:85:61:8d:04:21:d9:45:b6:60:a4:21:
26:71:fe:98:f5:dc:53:9a:6c:12:e7:b5:83:b7:77:50:f2:90:
20:40:be:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIBnYjcEOdDHiDq8rOAOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0
ZmMzZmEwHhcNMjUwMTAxMTM0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTYyOWUzNTExY2E3ZTczY2NiNDMzZWIyNWVkYWQ2ZWNkMjk3OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhbXH1ERmoTE8BXlDEEiWDnD6lNY
RElK8gX0R4Qsjs+dV0WcL5jwnsicgcFoAHOb3ZA/2q+2lhwIJAmVUqRa6z2r+D0B
af1jgF8xR21GmDCyZrfxxk0zRopLHHc0EDRnMIpSRyrMWUe4tJbLjWKRYgD6KgXZ
feupwKhf2yb3PDnvM73J9lyEK2NFgpfTovmhUk3IVrxjMhZPw1RW1Ikn68BM06Vk
j93C2lpAq0fNx8TLg5EpIvgIdWqk3V3MDSdSrx2TLDar/2zuQT9kcWOzvvKfzb60
W7ZHKm+AA1KTGO+wpqP0tcMybKXjkw6hICS8pF0/YgyobHcBv14Fp9wfUwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPFinjURyn5zzLQz6yXtrW7NKXlvMB8GA1UdIwQY
MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt
ZTgwOTJkZDY1YzdmLzEvOFdLZU5SSEtmblBNdERQckplMnRiczBwZVc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm
LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBZ8IAwQC
uY0QMA0GCSqGSIb3DQEBCwUAA4IBAQBlSqzHFh5fipbxFgxB8tzhlIYwrNdNuwjq
F37PMPcIifB3+6QnBKl3UBFZ2vDxeKUznrg3ZMUkR6ZTdmTpEN9bRNTDn9IJI1g3
nNzVkG38kjk2cgmULcqEzjhqwccdM1mogfauE4Wx/NPWafCrwSvp5R+sRZ88yPS4
o+9yr3NUZyk/A2uQSjmpHpAC5tw4BZtzQzp6nZNyqKQD6aOVqpND0akj1JfXrMYu
zCIv3hLnhtKAoXa9FSR21DEBRpJu1o/zoW+U9pz/UtqmgwVjIy95osKydH04q5AX
mpJv5FXIhWGNBCHZRbZgpCEmcf6Y9dxTmmwS57WDt3dQ8pAgQL70
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:00:17 2025 by rpki-client