Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa
File: WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa (raw, json)
Hash identifier: 9FkYuv3N9sKiJBFCLi9r1CgkkKmg2nuXBs/YrWrih48=
Subject key identifier: 59:D5:B2:33:D9:3A:29:C2:E8:CF:91:54:AD:28:22:6B:17:74:49:43
Certificate issuer: /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial: 019421B1E35A47A1C80FF0E172C0EA638192
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa
Signing time: Wed 01 Jan 2025 11:48:13 +0000
ROA not before: Wed 01 Jan 2025 11:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56476
IP address blocks: 31.42.192.0/19 maxlen: 19
31.42.192.0/24 maxlen: 24
31.42.193.0/24 maxlen: 24
31.42.194.0/24 maxlen: 24
31.42.195.0/24 maxlen: 24
31.42.196.0/24 maxlen: 24
31.42.197.0/24 maxlen: 24
31.42.198.0/24 maxlen: 24
31.42.199.0/24 maxlen: 24
31.42.200.0/24 maxlen: 24
31.42.201.0/24 maxlen: 24
31.42.202.0/24 maxlen: 24
31.42.203.0/24 maxlen: 24
31.42.204.0/24 maxlen: 24
31.42.205.0/24 maxlen: 24
31.42.206.0/24 maxlen: 24
31.42.207.0/24 maxlen: 24
31.42.208.0/24 maxlen: 24
31.42.209.0/24 maxlen: 24
31.42.210.0/24 maxlen: 24
31.42.211.0/24 maxlen: 24
31.42.212.0/24 maxlen: 24
31.42.213.0/24 maxlen: 24
31.42.214.0/24 maxlen: 24
31.42.215.0/24 maxlen: 24
31.42.216.0/24 maxlen: 24
31.42.217.0/24 maxlen: 24
31.42.218.0/24 maxlen: 24
31.42.219.0/24 maxlen: 24
31.42.220.0/24 maxlen: 24
31.42.221.0/24 maxlen: 24
31.42.222.0/24 maxlen: 24
31.42.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e3:5a:47:a1:c8:0f:f0:e1:72:c0:ea:63:81:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59d5b233d93a29c2e8cf9154ad28226b17744943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:8f:83:ea:bb:8c:bb:29:ec:40:a8:21:f1:
8b:70:b2:d5:20:cd:cf:16:d8:09:a8:28:5f:5e:98:
2d:e8:ad:1f:65:ec:54:e2:34:b1:c3:1a:6d:93:1e:
be:9a:49:71:00:30:8b:9f:e7:35:9a:e9:40:8d:e1:
4b:c8:de:34:e6:d0:ad:89:ca:1d:58:44:74:44:0f:
a4:43:f8:1f:f6:75:2c:a8:e3:5d:6d:89:de:e3:fb:
15:9d:64:f0:65:b2:93:f1:0b:17:02:00:d5:be:6e:
06:9d:7f:bf:e2:5a:ea:df:7b:f5:c9:1a:7a:0a:5f:
d8:59:77:d3:3d:14:52:57:9f:fc:88:37:ba:2a:46:
2c:03:ee:04:ad:1f:92:33:99:64:72:6c:92:93:5f:
8f:e1:f9:3a:ac:99:62:24:47:62:4a:ab:62:5f:d7:
21:62:bc:29:05:4f:cc:22:e2:e4:54:05:65:37:90:
59:60:cc:17:7d:27:d2:b5:39:1f:c8:b3:c1:36:b3:
0e:f3:cf:46:0e:19:4c:6e:36:ed:fa:6a:a8:f9:ac:
b1:09:a3:af:f8:fc:82:fc:45:aa:cb:b2:2d:79:0b:
59:0a:86:b4:b5:69:f7:cb:58:c1:54:21:a2:c1:4a:
9c:93:8f:34:a0:2c:4d:d4:86:df:5c:46:85:25:0e:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D5:B2:33:D9:3A:29:C2:E8:CF:91:54:AD:28:22:6B:17:74:49:43
X509v3 Authority Key Identifier:
keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/WdWyM9k6KcLoz5FUrSgiaxd0SUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9e:59:8f:18:ed:6a:77:9c:9d:a4:3b:a2:ed:9a:96:cb:0c:02:
7c:10:2b:f3:c3:a3:82:5b:db:72:cc:eb:b9:72:b6:bc:fb:5f:
5f:3e:a2:42:8d:db:81:1a:bd:cf:a6:f7:40:bc:35:38:ad:52:
e0:c1:ef:1a:e0:c3:a0:33:e5:fc:c0:2e:10:f4:c4:ea:06:eb:
b2:9e:09:eb:e0:b9:b7:45:7b:f5:2f:ec:f9:65:fc:c1:fb:b4:
65:9c:40:90:41:bc:c5:3d:9b:73:15:44:3f:da:d7:55:f7:8b:
3d:e6:d4:b7:bd:36:a3:c9:0c:9c:7e:45:36:31:fb:41:de:55:
ea:af:40:53:0d:0f:c3:39:5b:ad:aa:8b:8a:cb:d1:88:9e:2c:
af:c2:a1:07:93:a6:8f:9c:bc:61:d5:df:e1:7a:9d:77:48:12:
f7:a2:7c:39:75:d9:9f:0f:cd:8c:a7:44:54:b0:6f:74:da:86:
21:8b:25:9f:b2:53:6d:5c:2a:34:17:c3:4a:18:09:bf:c2:79:
c1:ad:73:ea:c2:8a:cb:3e:5a:e5:f4:f7:30:9d:43:7c:5a:bb:
9e:15:d9:87:53:d2:32:9b:b1:ce:41:4c:a8:32:11:41:1d:67:
12:f5:7f:38:16:84:7a:b0:73:7d:ee:bb:89:ce:9c:90:f2:36:
bb:24:a6:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhseNaR6HID/DhcsDqY4GSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZGM0MTY3NGQ2NWQyYWY5MTc0YjFhYmFjZTBiMzcxMzYy
YjQ4NTEwHhcNMjUwMTAxMTE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWQ1YjIzM2Q5M2EyOWMyZThjZjkxNTRhZDI4MjI2YjE3NzQ0OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CmPg+q7jLsp7ECoIfGLcLLVIM3P
FtgJqChfXpgt6K0fZexU4jSxwxptkx6+mklxADCLn+c1mulAjeFLyN405tCticod
WER0RA+kQ/gf9nUsqONdbYne4/sVnWTwZbKT8QsXAgDVvm4GnX+/4lrq33v1yRp6
Cl/YWXfTPRRSV5/8iDe6KkYsA+4ErR+SM5lkcmySk1+P4fk6rJliJEdiSqtiX9ch
YrwpBU/MIuLkVAVlN5BZYMwXfSfStTkfyLPBNrMO889GDhlMbjbt+mqo+ayxCaOv
+PyC/EWqy7IteQtZCoa0tWn3y1jBVCGiwUqck480oCxN1IbfXEaFJQ4VwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFnVsjPZOinC6M+RVK0oImsXdElDMB8GA1UdIwQY
MBaAFFvcQWdNZdKvkXSxq6zgs3E2K0hRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWIt
OWY2N2ZmNmFmZDUwLzEvV2RXeU05azZLY0xvejVGVXJTZ2lheGQwU1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWItOWY2N2ZmNmFmZDUw
LzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFHyrAMA0G
CSqGSIb3DQEBCwUAA4IBAQCeWY8Y7Wp3nJ2kO6LtmpbLDAJ8ECvzw6OCW9tyzOu5
cra8+19fPqJCjduBGr3PpvdAvDU4rVLgwe8a4MOgM+X8wC4Q9MTqBuuyngnr4Lm3
RXv1L+z5ZfzB+7RlnECQQbzFPZtzFUQ/2tdV94s95tS3vTajyQycfkU2MftB3lXq
r0BTDQ/DOVutqouKy9GIniyvwqEHk6aPnLxh1d/hep13SBL3onw5ddmfD82Mp0RU
sG902oYhiyWfslNtXCo0F8NKGAm/wnnBrXPqworLPlrl9PcwnUN8WrueFdmHU9Iy
m7HOQUyoMhFBHWcS9X84FoR6sHN97ruJzpyQ8ja7JKaC
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:08 2025 by rpki-client