Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/WgYDhL0i6U8cqNQpr57kES37q38.roa
File: WgYDhL0i6U8cqNQpr57kES37q38.roa (raw, json)
Hash identifier: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=
Subject key identifier: 5A:06:03:84:BD:22:E9:4F:1C:A8:D4:29:AF:9E:E4:11:2D:FB:AB:7F
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 019422FB1D7580C8A9DFACF2B13018F3F13E
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/WgYDhL0i6U8cqNQpr57kES37q38.roa
Signing time: Wed 01 Jan 2025 17:47:49 +0000
ROA not before: Wed 01 Jan 2025 17:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15605
IP address blocks: 2.58.128.0/22 maxlen: 24
5.154.192.0/19 maxlen: 24
5.154.237.0/24 maxlen: 24
5.181.68.0/22 maxlen: 24
37.77.96.0/22 maxlen: 24
37.77.100.0/24 maxlen: 24
37.77.101.0/24 maxlen: 24
37.77.102.0/24 maxlen: 24
46.30.168.0/21 maxlen: 24
91.151.86.0/23 maxlen: 24
109.73.80.0/20 maxlen: 24
185.5.244.0/22 maxlen: 24
185.37.180.0/22 maxlen: 24
2a00:1cc8::/29 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:1d:75:80:c8:a9:df:ac:f2:b1:30:18:f3:f1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Jan 1 17:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a060384bd22e94f1ca8d429af9ee4112dfbab7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:ec:99:f2:e4:ca:f6:e2:d5:9e:27:f0:7f:
81:d8:d6:47:02:32:97:4f:43:ea:a9:b5:9f:2b:6b:
81:c2:c7:aa:e3:96:57:bb:06:25:dd:f3:f0:c9:ef:
09:2f:e1:df:fd:60:c1:af:76:90:28:20:22:da:a9:
30:64:8a:b3:63:3b:4a:1c:de:76:d8:2b:22:db:39:
60:72:3d:62:ba:e6:14:df:2b:7a:84:7c:1e:7c:51:
90:5c:53:55:48:ac:1f:9c:49:e6:51:cf:a8:d2:f0:
15:b6:0c:e7:b9:fe:2f:01:c9:2d:fc:48:7e:60:8c:
74:dd:69:06:c7:8c:4c:55:98:7d:17:d7:69:4c:50:
45:3c:9c:2e:07:1b:de:3f:21:7c:c4:20:cf:b4:45:
f3:88:4a:e5:82:e2:da:b9:16:ff:bb:f6:6e:ad:02:
f6:50:05:b8:07:64:c9:78:43:c1:7d:eb:0d:91:90:
be:14:fb:1a:20:e8:a4:b9:1f:81:be:31:53:65:25:
60:e3:5f:68:4d:a9:03:ef:9d:4e:fa:8b:2c:60:97:
0f:8d:45:e2:35:49:07:98:3e:71:54:ca:ef:28:7c:
0f:45:84:17:79:5b:b7:c7:b9:b6:3b:4e:a4:34:d5:
e7:21:b5:07:c9:78:a0:13:b2:cc:98:55:62:43:e3:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:06:03:84:BD:22:E9:4F:1C:A8:D4:29:AF:9E:E4:11:2D:FB:AB:7F
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/WgYDhL0i6U8cqNQpr57kES37q38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.128.0/22
5.154.192.0/19
5.154.237.0/24
5.181.68.0/22
37.77.96.0-37.77.102.255
46.30.168.0/21
91.151.86.0/23
109.73.80.0/20
185.5.244.0/22
185.37.180.0/22
IPv6:
2a00:1cc8::/29
Signature Algorithm: sha256WithRSAEncryption
39:3d:34:ef:4e:e3:b7:b6:ee:f8:01:a8:5e:a2:9b:07:80:3d:
e0:b7:97:4d:f8:66:7c:c5:0b:11:e8:a3:1e:61:22:4e:80:ad:
31:e8:92:c1:3d:b2:34:49:7b:18:3d:dd:fd:09:2b:1f:d2:ea:
ae:46:d7:c9:88:48:38:31:ec:97:67:ad:78:11:11:8c:fa:c0:
f1:c6:9b:23:ab:99:56:8e:0a:1a:54:6b:12:e3:3e:bd:d4:2c:
04:a7:c6:ab:11:d6:6d:f5:fb:89:5b:21:0d:2d:60:fc:23:7b:
d2:3f:2d:20:8e:7a:2c:d5:40:f7:0c:67:a2:86:21:31:ba:73:
0c:0e:c8:ed:48:2a:6f:b6:d9:b4:25:99:c0:dd:8d:36:9a:33:
73:c1:61:a8:66:dd:91:f3:e7:3a:e0:b4:f9:a3:53:91:c4:ee:
d5:9b:a5:e8:2b:e1:7a:56:95:06:58:bf:5a:0e:b1:2c:54:ac:
ce:76:45:6c:42:7f:66:1b:5c:6c:81:56:9f:2a:bb:29:bb:2a:
df:90:91:48:04:e0:5f:18:c7:f7:a1:7e:38:6c:da:d8:7a:d3:
fa:d2:0d:e4:51:e7:89:31:99:11:3e:8d:95:19:36:3c:57:b6:
7d:ff:0d:3a:89:24:21:39:15:97:a9:78:d2:db:6d:78:9d:ff:
ad:0c:fb:51
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAZQi+x11gMip36zysTAY8/E+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3Y2UxZTlhNjUyMjYxNmFiMzBiMGYxMjNlMDlkMzA1YTgy
MzA0YWYwHhcNMjUwMTAxMTc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTA2MDM4NGJkMjJlOTRmMWNhOGQ0MjlhZjllZTQxMTJkZmJhYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaTsmfLkyvbi1Z4n8H+B2NZHAjKX
T0PqqbWfK2uBwseq45ZXuwYl3fPwye8JL+Hf/WDBr3aQKCAi2qkwZIqzYztKHN52
2Csi2zlgcj1iuuYU3yt6hHwefFGQXFNVSKwfnEnmUc+o0vAVtgznuf4vAckt/Eh+
YIx03WkGx4xMVZh9F9dpTFBFPJwuBxvePyF8xCDPtEXziErlguLauRb/u/ZurQL2
UAW4B2TJeEPBfesNkZC+FPsaIOikuR+BvjFTZSVg419oTakD751O+ossYJcPjUXi
NUkHmD5xVMrvKHwPRYQXeVu3x7m2O06kNNXnIbUHyXigE7LMmFViQ+MFFwIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFFoGA4S9IulPHKjUKa+e5BEt+6t/MB8GA1UdIwQY
MBaAFCfOHpplImFqswsPEj4J0wWoIwSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85ZTIyYTItOTM2NS00OTU2LThlNjYt
Y2U0ZjI1YWNlMjUyLzEvV2dZRGhMMGk2VThjcU5RcHI1N2tFUzM3cTM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85ZTIyYTItOTM2NS00OTU2LThlNjYtY2U0ZjI1YWNlMjUy
LzEvSjg0ZW1tVWlZV3F6Q3c4U1BnblRCYWdqQks4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEAwQCAjqAAwQF
BZrAAwQABZrtAwQCBbVEMAwDBAUlTWADBAAlTWYDBAMuHqgDBAFbl1YDBARtSVAD
BAK5BfQDBAK5JbQwDQQCAAIwBwMFAyoAHMgwDQYJKoZIhvcNAQELBQADggEBADk9
NO9O47e27vgBqF6imweAPeC3l034ZnzFCxHoox5hIk6ArTHoksE9sjRJexg93f0J
Kx/S6q5G18mISDgx7JdnrXgREYz6wPHGmyOrmVaOChpUaxLjPr3ULASnxqsR1m31
+4lbIQ0tYPwje9I/LSCOeizVQPcMZ6KGITG6cwwOyO1IKm+22bQlmcDdjTaaM3PB
Yahm3ZHz5zrgtPmjU5HE7tWbpegr4XpWlQZYv1oOsSxUrM52RWxCf2YbXGyBVp8q
uym7Kt+QkUgE4F8Yx/ehfjhs2th60/rSDeRR54kxmRE+jZUZNjxXtn3/DTqJJCE5
FZepeNLbbXid/60M+1E=
-----END CERTIFICATE-----
Generated at Fri Feb 21 12:59:18 2025 by rpki-client