Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/wwVo8xN6IGMYTagl4rusidPI9YM.roa
File: wwVo8xN6IGMYTagl4rusidPI9YM.roa (raw, json)
Hash identifier: YvEjIZcdqhpTgMtvazTr/hlziSYSTQFBiolpcxm3kbk=
Subject key identifier: C3:05:68:F3:13:7A:20:63:18:4D:A8:25:E2:BB:AC:89:D3:C8:F5:83
Certificate issuer: /CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Certificate serial: 01856CF87D15B5DED5E8AABAED2DE6B38286
Authority key identifier: 67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/wwVo8xN6IGMYTagl4rusidPI9YM.roa
Signing time: Sun 01 Jan 2023 10:55:02 +0000
ROA not before: Sun 01 Jan 2023 10:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199608
IP address blocks: 185.9.37.0/24 maxlen: 24
185.9.36.0/24 maxlen: 24
185.9.38.0/24 maxlen: 24
185.9.39.0/24 maxlen: 24
185.244.145.0/24 maxlen: 24
185.244.144.0/24 maxlen: 24
185.244.147.0/24 maxlen: 24
185.244.146.0/24 maxlen: 24
2a03:48c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:7d:15:b5:de:d5:e8:aa:ba:ed:2d:e6:b3:82:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=671ef78adc0c4fbc70babd3d36b63ce130b90935
Validity
Not Before: Jan 1 10:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c30568f3137a2063184da825e2bbac89d3c8f583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:af:e7:c4:f5:8b:21:c3:9a:d7:ff:58:0d:
ec:eb:90:3a:96:8c:df:a1:0f:65:48:da:a5:8d:ff:
49:e8:d0:8f:7d:0e:c3:b4:2b:19:6c:07:99:64:97:
ef:ee:e4:30:13:2b:78:e6:ea:c1:15:2d:55:b5:09:
9d:c6:bd:45:63:dc:97:4c:33:f5:5a:c1:38:35:ab:
f5:5e:a2:4e:4c:9a:48:57:c8:ba:c7:31:15:62:1f:
eb:58:52:f2:5b:a5:95:97:1f:2d:e4:33:c7:14:b5:
2a:4b:1b:c5:7c:ca:65:07:07:2c:6d:76:bb:6b:9f:
ac:c8:4f:c4:ee:a5:95:ee:02:1e:19:7b:37:9f:44:
e7:ac:1f:61:c7:9a:73:62:11:a9:ed:65:74:74:9a:
f5:9d:43:8d:63:5a:73:05:55:39:b7:f1:bd:c8:ee:
76:46:e0:2d:69:1b:5e:ad:cb:0f:7c:b8:74:d4:37:
57:fe:39:68:e3:8f:5b:4e:fc:83:32:68:8f:2c:1b:
8b:66:ac:ed:32:15:cc:d0:97:46:7b:cd:96:69:8c:
e6:7c:b1:3d:9c:38:79:70:83:0a:94:dc:c7:b8:4b:
cc:72:b2:35:10:79:a5:e5:23:45:b3:4d:0e:c3:6b:
12:9a:3b:49:9f:5f:33:4d:b4:0c:ef:29:bc:1c:54:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:05:68:F3:13:7A:20:63:18:4D:A8:25:E2:BB:AC:89:D3:C8:F5:83
X509v3 Authority Key Identifier:
keyid:67:1E:F7:8A:DC:0C:4F:BC:70:BA:BD:3D:36:B6:3C:E1:30:B9:09:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zx73itwMT7xwur09NrY84TC5CTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/wwVo8xN6IGMYTagl4rusidPI9YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c73c-327f-4da5-b14d-c77f64ab302b/1/Zx73itwMT7xwur09NrY84TC5CTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.36.0/22
185.244.144.0/22
IPv6:
2a03:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
b8:1e:4f:07:e9:96:f0:da:09:3c:98:a9:22:09:75:c8:62:01:
26:a0:79:82:43:da:b9:0f:5a:81:a0:fb:0f:60:9c:f5:54:bc:
38:f4:29:d8:7f:9b:77:74:32:70:d0:6a:8c:94:80:4f:a7:c0:
e1:82:58:6f:a2:f2:b0:bb:a3:62:6b:35:75:90:ec:70:95:69:
74:56:68:db:9a:30:98:56:58:c4:27:c5:fb:c3:29:3c:12:5d:
0f:da:cd:b3:a9:ce:3f:d2:c1:50:87:94:01:e3:0f:07:ff:e4:
b1:b9:12:1b:53:ae:df:5f:dc:91:09:2f:03:a3:84:39:d9:cc:
a2:0c:00:f8:97:73:98:07:7a:9c:e2:50:24:48:60:c6:37:5f:
75:47:e3:13:41:31:1c:4f:1f:ce:38:1d:d0:d1:d8:7b:2a:67:
d9:ae:9f:c3:31:69:ec:99:b9:5b:1c:ad:78:f3:9d:4e:23:f3:
34:f5:55:7b:63:c4:4f:b4:a6:17:10:b9:6d:fd:fa:b5:14:3d:
f7:b9:3b:d5:4a:90:26:7a:a2:29:57:87:44:4f:74:ff:73:46:
b0:1d:5b:99:b8:8a:e4:94:70:85:97:2e:cf:5b:c6:c0:87:63:
44:d4:20:82:09:6a:2a:86:10:ce:a8:42:a1:6f:f5:31:d6:f5:
93:35:b7:05
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVs+H0Vtd7V6Kq67S3ms4KGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MWVmNzhhZGMwYzRmYmM3MGJhYmQzZDM2YjYzY2UxMzBi
OTA5MzUwHhcNMjMwMTAxMTA1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzA1NjhmMzEzN2EyMDYzMTg0ZGE4MjVlMmJiYWM4OWQzYzhmNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zuv58T1iyHDmtf/WA3s65A6lozf
oQ9lSNqljf9J6NCPfQ7DtCsZbAeZZJfv7uQwEyt45urBFS1VtQmdxr1FY9yXTDP1
WsE4Nav1XqJOTJpIV8i6xzEVYh/rWFLyW6WVlx8t5DPHFLUqSxvFfMplBwcsbXa7
a5+syE/E7qWV7gIeGXs3n0TnrB9hx5pzYhGp7WV0dJr1nUONY1pzBVU5t/G9yO52
RuAtaRtercsPfLh01DdX/jlo449bTvyDMmiPLBuLZqztMhXM0JdGe82WaYzmfLE9
nDh5cIMKlNzHuEvMcrI1EHml5SNFs00Ow2sSmjtJn18zTbQM7ym8HFTd+wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMMFaPMTeiBjGE2oJeK7rInTyPWDMB8GA1UdIwQY
MBaAFGce94rcDE+8cLq9PTa2POEwuQk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWng3M2l0d01UN3h3dXIwOU5yWTg0VEM1Q1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80M2M3M2MtMzI3Zi00ZGE1LWIxNGQt
Yzc3ZjY0YWIzMDJiLzEvd3dWbzh4TjZJR01ZVGFnbDRydXNpZFBJOVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80M2M3M2MtMzI3Zi00ZGE1LWIxNGQtYzc3ZjY0YWIzMDJi
LzEvWng3M2l0d01UN3h3dXIwOU5yWTg0VEM1Q1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQkkAwQC
ufSQMA0EAgACMAcDBQAqA0jAMA0GCSqGSIb3DQEBCwUAA4IBAQC4Hk8H6Zbw2gk8
mKkiCXXIYgEmoHmCQ9q5D1qBoPsPYJz1VLw49CnYf5t3dDJw0GqMlIBPp8Dhglhv
ovKwu6NiazV1kOxwlWl0VmjbmjCYVljEJ8X7wyk8El0P2s2zqc4/0sFQh5QB4w8H
/+SxuRIbU67fX9yRCS8Do4Q52cyiDAD4l3OYB3qc4lAkSGDGN191R+MTQTEcTx/O
OB3Q0dh7KmfZrp/DMWnsmblbHK14851OI/M09VV7Y8RPtKYXELlt/fq1FD33uTvV
SpAmeqIpV4dET3T/c0awHVuZuIrklHCFly7PW8bAh2NE1CCCCWoqhhDOqEKhb/Ux
1vWTNbcF
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:33 2025 by rpki-client