Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wcPP5RC8-6vVh1GCTIZeVwo_vu8.roa
File: wcPP5RC8-6vVh1GCTIZeVwo_vu8.roa (raw, json)
Hash identifier: vpG1Y9+EL0/+fDWHaiexcQGTp7DX/JMcIdYlqTWx38Q=
Subject key identifier: C1:C3:CF:E5:10:BC:FB:AB:D5:87:51:82:4C:86:5E:57:0A:3F:BE:EF
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 0194258EB2155801BB58DD8FDA32340D6F0C
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wcPP5RC8-6vVh1GCTIZeVwo_vu8.roa
Signing time: Thu 02 Jan 2025 05:48:16 +0000
ROA not before: Thu 02 Jan 2025 05:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 158.46.132.0/22 maxlen: 22
158.46.136.0/21 maxlen: 21
158.46.144.0/20 maxlen: 24
158.46.148.0/24 maxlen: 24
158.46.152.0/24 maxlen: 24
158.46.156.0/24 maxlen: 24
158.46.158.0/24 maxlen: 24
158.46.160.0/23 maxlen: 23
158.46.164.0/22 maxlen: 22
158.46.168.0/21 maxlen: 21
158.46.184.0/23 maxlen: 23
158.46.186.0/23 maxlen: 23
158.46.188.0/22 maxlen: 24
158.46.204.0/24 maxlen: 24
158.46.205.0/24 maxlen: 24
158.46.207.0/24 maxlen: 24
178.171.20.0/22 maxlen: 24
178.171.36.0/23 maxlen: 23
178.171.86.0/24 maxlen: 24
178.171.103.0/24 maxlen: 24
178.171.105.0/24 maxlen: 24
178.171.106.0/23 maxlen: 23
178.171.108.0/23 maxlen: 23
178.171.112.0/23 maxlen: 23
178.171.114.0/23 maxlen: 23
178.171.116.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b2:15:58:01:bb:58:dd:8f:da:32:34:0d:6f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Jan 2 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1c3cfe510bcfbabd58751824c865e570a3fbeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:c8:08:1b:5f:14:da:6e:69:18:ff:3a:c2:
5b:96:19:44:e7:30:43:11:8f:2b:6d:25:11:22:2b:
51:ff:11:8a:b0:76:e4:37:88:6f:37:f6:7d:b6:4b:
ee:44:c0:42:64:fb:7d:00:0b:20:35:66:f1:99:36:
22:57:9b:e8:0f:06:51:53:7e:32:de:47:23:cd:6a:
4c:68:1c:3e:54:91:73:24:f6:81:bf:c5:13:b1:54:
72:79:9b:28:d6:8a:8a:16:3b:99:ee:3e:bd:e7:f4:
e9:5d:9b:a7:d0:57:1a:04:64:e0:7d:e4:a0:0f:d2:
8d:76:2f:4e:f7:8a:fe:9c:4a:b9:a8:cd:0e:a1:bf:
7f:bc:0f:43:0e:88:b8:6f:39:9b:21:49:9f:24:75:
e0:fb:f4:3e:b1:bf:ca:e6:32:60:9a:8c:5d:1d:3e:
0d:5b:64:2c:7e:df:88:e0:b9:ae:1b:b6:f6:a7:a9:
8b:f8:59:7f:58:a1:8d:ca:94:ff:59:62:82:28:72:
13:dc:07:ea:ad:62:cb:87:4a:3b:bc:99:25:71:df:
b2:12:a0:5b:cc:d3:b8:04:77:23:38:af:ea:40:42:
0c:72:35:e6:5c:19:f5:58:b9:af:50:f0:99:b0:f5:
86:75:9a:7d:f4:03:e4:ec:7e:92:2f:0a:8c:d0:a0:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C3:CF:E5:10:BC:FB:AB:D5:87:51:82:4C:86:5E:57:0A:3F:BE:EF
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/wcPP5RC8-6vVh1GCTIZeVwo_vu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.132.0-158.46.161.255
158.46.164.0-158.46.175.255
158.46.184.0/21
158.46.204.0/23
158.46.207.0/24
178.171.20.0/22
178.171.36.0/23
178.171.86.0/24
178.171.103.0/24
178.171.105.0-178.171.109.255
178.171.112.0-178.171.117.255
Signature Algorithm: sha256WithRSAEncryption
12:e6:98:46:49:1d:4d:3a:cf:c0:94:4e:58:c6:2c:77:66:52:
88:68:25:0c:73:31:ee:7b:fe:f6:40:ec:16:d1:af:d8:c8:0d:
89:b4:99:6a:c8:02:fc:95:2f:5d:d2:c3:5a:15:a4:39:50:5f:
4a:4e:a3:f9:83:a9:6f:c6:5b:8a:ad:bb:cb:84:c1:f3:10:66:
e9:aa:55:3a:23:2c:93:99:c9:dc:51:f1:6b:01:75:ac:4f:a7:
5f:66:cd:5f:da:f3:07:e1:83:78:da:2e:08:60:c6:21:ac:e3:
e3:eb:19:1e:1f:60:67:67:b7:24:d3:b3:63:68:9c:6c:11:10:
9f:b1:01:b3:ce:ae:69:34:52:d0:3b:97:74:b4:08:ee:67:92:
33:02:38:4d:9c:51:66:29:79:c2:19:d3:f5:29:e5:d2:c4:71:
b2:37:5d:a0:93:17:0a:9e:51:01:3c:c1:79:4e:fb:ea:70:63:
ce:eb:e5:7e:97:f3:9c:dc:7b:18:d5:40:5a:35:53:26:0b:a8:
76:f5:60:30:01:d7:42:ac:2d:b4:40:a2:0c:92:29:3f:df:4c:
ca:51:d0:ca:6f:a2:e9:9f:a1:26:6e:d6:9a:84:7d:30:62:98:
5c:cd:78:d6:18:a4:27:59:74:30:b1:8a:7e:99:9c:ce:7b:26:
12:27:e5:fa
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZQljrIVWAG7WN2P2jI0DW8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl
NjNjMTMwHhcNMjUwMTAyMDU0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWMzY2ZlNTEwYmNmYmFiZDU4NzUxODI0Yzg2NWU1NzBhM2ZiZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhDICBtfFNpuaRj/OsJblhlE5zBD
EY8rbSURIitR/xGKsHbkN4hvN/Z9tkvuRMBCZPt9AAsgNWbxmTYiV5voDwZRU34y
3kcjzWpMaBw+VJFzJPaBv8UTsVRyeZso1oqKFjuZ7j695/TpXZun0FcaBGTgfeSg
D9KNdi9O94r+nEq5qM0Oob9/vA9DDoi4bzmbIUmfJHXg+/Q+sb/K5jJgmoxdHT4N
W2Qsft+I4LmuG7b2p6mL+Fl/WKGNypT/WWKCKHIT3AfqrWLLh0o7vJklcd+yEqBb
zNO4BHcjOK/qQEIMcjXmXBn1WLmvUPCZsPWGdZp99APk7H6SLwqM0KBbfwIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFMHDz+UQvPur1YdRgkyGXlcKP77vMB8GA1UdIwQY
MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt
YmE3NzFmZmQyNjljLzEvd2NQUDVSQzgtNnZWaDFHQ1RJWmVWd29fdnU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj
LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiMAwDBAKeLoQD
BAGeLqAwDAMEAp4upAMEBJ4uoAMEA54uuAMEAZ4uzAMEAJ4uzwMEArKrFAMEAbKr
JAMEALKrVgMEALKrZzAMAwQAsqtpAwQBsqtsMAwDBASyq3ADBAGyq3QwDQYJKoZI
hvcNAQELBQADggEBABLmmEZJHU06z8CUTljGLHdmUohoJQxzMe57/vZA7BbRr9jI
DYm0mWrIAvyVL13Sw1oVpDlQX0pOo/mDqW/GW4qtu8uEwfMQZumqVTojLJOZydxR
8WsBdaxPp19mzV/a8wfhg3jaLghgxiGs4+PrGR4fYGdntyTTs2NonGwREJ+xAbPO
rmk0UtA7l3S0CO5nkjMCOE2cUWYpecIZ0/Up5dLEcbI3XaCTFwqeUQE8wXlO++pw
Y87r5X6X85zcexjVQFo1UyYLqHb1YDAB10KsLbRAogySKT/fTMpR0MpvoumfoSZu
1pqEfTBimFzNeNYYpCdZdDCxin6ZnM57JhIn5fo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:07 2025 by rpki-client