Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Wmoua6Bek1BvL5BzT3hBNIdVtPE.roa
File: Wmoua6Bek1BvL5BzT3hBNIdVtPE.roa (raw, json)
Hash identifier: QWQ5/ZJfO47Ea0W1h4jxe7swaA6tftuCEXI4M08N2Ik=
Subject key identifier: 5A:6A:2E:6B:A0:5E:93:50:6F:2F:90:73:4F:78:41:34:87:55:B4:F1
Certificate issuer: /CN=63e24977993c15bcc134b174937f41b2129f56d1
Certificate serial: 0194206832C97E3C38E1F85DD7C3D0B0F4BF
Authority key identifier: 63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Wmoua6Bek1BvL5BzT3hBNIdVtPE.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15704
IP address blocks: 185.208.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:32:c9:7e:3c:38:e1:f8:5d:d7:c3:d0:b0:f4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e24977993c15bcc134b174937f41b2129f56d1
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a6a2e6ba05e93506f2f90734f7841348755b4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:ed:87:ef:73:22:72:82:d4:10:b9:0d:9f:
a6:55:ce:55:ad:4c:50:0c:c0:1b:87:01:31:58:73:
17:03:ee:0f:32:f7:c6:cb:ff:ac:d4:fa:5f:78:c9:
1c:95:9c:d1:c1:d8:50:2c:42:4d:c1:f0:47:24:c9:
d1:25:53:ef:d8:c5:b0:b4:2c:96:12:1f:f3:71:9b:
c3:64:db:87:eb:86:3e:17:37:ed:c8:bd:91:e8:b4:
ce:34:85:86:89:30:8f:4b:2e:53:32:56:85:50:d4:
ca:12:05:b7:3a:b6:62:05:ac:1c:73:40:d4:9e:9d:
30:c2:9d:ad:9b:0b:f9:55:bf:f7:97:e8:15:1d:7e:
96:0c:50:da:c3:4f:f8:09:ee:ac:5e:a8:02:4b:95:
42:72:b5:b8:8d:4e:30:6b:45:4f:36:1d:a9:d9:13:
60:9d:c4:5d:59:7b:cf:83:05:5e:b0:a6:df:55:b9:
bd:e3:16:d4:cd:b6:5f:5f:43:6d:ee:51:40:6c:ef:
c3:1a:76:8c:7d:29:d7:d7:3a:7c:8d:f3:73:16:c7:
5b:50:1a:ce:ad:5b:85:dd:21:78:45:40:b9:cd:ca:
50:9b:89:fa:4a:06:12:53:4d:16:b6:52:6b:52:f8:
85:d5:a0:29:55:39:e0:1f:ab:d7:84:9a:87:e3:f1:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6A:2E:6B:A0:5E:93:50:6F:2F:90:73:4F:78:41:34:87:55:B4:F1
X509v3 Authority Key Identifier:
keyid:63:E2:49:77:99:3C:15:BC:C1:34:B1:74:93:7F:41:B2:12:9F:56:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-JJd5k8FbzBNLF0k39BshKfVtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Wmoua6Bek1BvL5BzT3hBNIdVtPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd8116-5e98-45ef-af74-073a5db0efb5/1/Y-JJd5k8FbzBNLF0k39BshKfVtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.208.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d6:c1:6d:9d:8a:8e:8c:1e:34:75:28:b9:41:a1:5a:b3:2d:
d7:de:25:70:bc:e2:df:2f:d4:57:54:a6:e3:61:5a:23:5b:7e:
e4:8c:7c:a6:35:a6:50:a3:3c:a7:21:49:89:83:b5:4f:9b:d8:
69:40:d0:bd:0a:76:b9:34:31:9c:3b:4d:e7:95:a7:d6:65:d8:
81:d0:e9:1b:17:10:d9:c5:3a:16:f2:8c:96:7e:75:6c:3a:a1:
1b:e4:41:ad:2a:36:27:0d:f7:8a:4f:ac:3d:16:cf:ed:9f:d3:
09:2f:ef:d9:05:87:75:33:14:e7:12:75:33:7f:73:17:0d:7a:
e5:66:60:17:93:cc:d0:51:b8:93:68:3e:0a:71:52:f1:ae:b0:
97:1a:78:37:d8:5a:be:75:21:fd:aa:93:62:1a:ac:df:43:38:
15:66:ab:91:d4:a8:d2:38:9e:bf:14:fe:c9:97:0f:7d:7d:fb:
1a:c3:a2:23:e5:97:5e:4a:07:52:45:bc:c7:7d:df:69:f6:74:
0f:aa:c0:99:9d:6a:3d:98:a2:ee:e1:17:17:69:70:db:b1:0d:
10:cf:eb:ba:f0:f6:fc:e0:f1:f2:76:40:97:2b:76:7b:79:b1:
71:c2:9a:42:96:68:cd:49:54:4e:14:6f:71:9b:c7:2e:cd:c8:
2d:a2:7f:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaDLJfjw44fhd18PQsPS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTI0OTc3OTkzYzE1YmNjMTM0YjE3NDkzN2Y0MWIyMTI5
ZjU2ZDEwHhcNMjUwMTAxMDU0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTZhMmU2YmEwNWU5MzUwNmYyZjkwNzM0Zjc4NDEzNDg3NTViNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qbth+9zInKC1BC5DZ+mVc5VrUxQ
DMAbhwExWHMXA+4PMvfGy/+s1PpfeMkclZzRwdhQLEJNwfBHJMnRJVPv2MWwtCyW
Eh/zcZvDZNuH64Y+FzftyL2R6LTONIWGiTCPSy5TMlaFUNTKEgW3OrZiBawcc0DU
np0wwp2tmwv5Vb/3l+gVHX6WDFDaw0/4Ce6sXqgCS5VCcrW4jU4wa0VPNh2p2RNg
ncRdWXvPgwVesKbfVbm94xbUzbZfX0Nt7lFAbO/DGnaMfSnX1zp8jfNzFsdbUBrO
rVuF3SF4RUC5zcpQm4n6SgYSU00WtlJrUviF1aApVTngH6vXhJqH4/GLPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpqLmugXpNQby+Qc094QTSHVbTxMB8GA1UdIwQY
MBaAFGPiSXeZPBW8wTSxdJN/QbISn1bRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1KSmQ1azhGYnpCTkxGMGszOUJzaEtmVnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mZDgxMTYtNWU5OC00NWVmLWFmNzQt
MDczYTVkYjBlZmI1LzEvV21vdWE2QmVrMUJ2TDVCelQzaEJOSWRWdFBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9mZDgxMTYtNWU5OC00NWVmLWFmNzQtMDczYTVkYjBlZmI1
LzEvWS1KSmQ1azhGYnpCTkxGMGszOUJzaEtmVnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudCSMA0G
CSqGSIb3DQEBCwUAA4IBAQBa1sFtnYqOjB40dSi5QaFasy3X3iVwvOLfL9RXVKbj
YVojW37kjHymNaZQozynIUmJg7VPm9hpQNC9Cna5NDGcO03nlafWZdiB0OkbFxDZ
xToW8oyWfnVsOqEb5EGtKjYnDfeKT6w9Fs/tn9MJL+/ZBYd1MxTnEnUzf3MXDXrl
ZmAXk8zQUbiTaD4KcVLxrrCXGng32Fq+dSH9qpNiGqzfQzgVZquR1KjSOJ6/FP7J
lw99ffsaw6Ij5ZdeSgdSRbzHfd9p9nQPqsCZnWo9mKLu4RcXaXDbsQ0Qz+u68Pb8
4PHydkCXK3Z7ebFxwppClmjNSVROFG9xm8cuzcgton8V
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:33 2025 by rpki-client