Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/wfdlsKAAvesnWvTDvia3MLYX62E.roa
File: wfdlsKAAvesnWvTDvia3MLYX62E.roa (raw, json)
Hash identifier: /q1g066kiwFYosKzhe1K4+rG1+igVMTmtZs6afix28U=
Subject key identifier: C1:F7:65:B0:A0:00:BD:EB:27:5A:F4:C3:BE:26:B7:30:B6:17:EB:61
Certificate issuer: /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial: 019420D5F665288F3A0532E32995C9B5CA23
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/wfdlsKAAvesnWvTDvia3MLYX62E.roa
Signing time: Wed 01 Jan 2025 07:48:00 +0000
ROA not before: Wed 01 Jan 2025 07:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204348
IP address blocks: 185.249.255.0/24 maxlen: 24
185.252.112.0/24 maxlen: 24
185.252.113.0/24 maxlen: 24
185.252.115.0/24 maxlen: 24
2a04:b800::/32 maxlen: 32
2a04:b801::/32 maxlen: 32
2a04:b802::/32 maxlen: 32
2a04:b803::/32 maxlen: 32
2a04:b804::/32 maxlen: 32
2a04:b805::/32 maxlen: 32
2a04:b806::/32 maxlen: 32
2a04:b807::/32 maxlen: 32
2a0e:e7c0::/32 maxlen: 32
2a0e:e7c1::/32 maxlen: 32
2a0e:e7c2::/32 maxlen: 32
2a0e:e7c3::/32 maxlen: 32
2a0e:e7c4::/32 maxlen: 32
2a0e:e7c5::/32 maxlen: 32
2a0e:e7c6::/32 maxlen: 32
2a0e:e7c7::/32 maxlen: 32
2a10:a6c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f6:65:28:8f:3a:05:32:e3:29:95:c9:b5:ca:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Validity
Not Before: Jan 1 07:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1f765b0a000bdeb275af4c3be26b730b617eb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:88:21:00:f5:88:1e:2a:44:e7:f4:bb:c4:
68:3a:2f:25:f6:77:4f:a0:23:a9:98:2d:88:1d:3c:
a3:be:17:17:ef:24:04:17:05:fe:67:c9:70:cf:5b:
b9:33:20:1a:30:92:28:92:c3:b3:5d:ef:45:e4:0d:
a9:bc:9d:b6:7d:cd:44:78:1a:3a:a8:c2:6b:03:0d:
bb:25:fa:c3:f1:d1:59:8b:a4:1f:52:92:ba:32:af:
42:dd:c4:2b:cb:2c:3b:32:00:45:a1:40:1e:ba:88:
2d:c4:fe:7f:4d:ac:12:55:d6:a7:fe:91:0b:ed:a7:
82:80:c3:58:91:eb:54:e5:99:1d:91:47:27:c6:40:
fe:2f:73:b2:83:e9:85:5f:90:fa:45:df:8a:d2:2b:
d1:d1:bf:2d:64:4c:a6:98:17:88:c4:bc:1c:a3:b2:
7d:0c:82:4d:ed:b3:06:a8:e2:f1:7a:0a:4b:62:c2:
4b:39:4d:1f:d7:c4:4c:e0:90:7c:0e:0d:b7:38:0c:
d1:30:8a:20:2b:a6:e4:a8:d4:31:bd:91:f4:ef:75:
78:bb:4e:0b:fc:95:73:f9:87:5d:87:a5:7d:79:3f:
77:f6:d5:04:22:25:d9:63:c1:0f:38:fc:fd:29:fa:
35:1e:eb:cc:20:9b:c8:b5:78:93:34:00:10:19:8c:
34:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F7:65:B0:A0:00:BD:EB:27:5A:F4:C3:BE:26:B7:30:B6:17:EB:61
X509v3 Authority Key Identifier:
keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/wfdlsKAAvesnWvTDvia3MLYX62E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.255.0/24
185.252.112.0/23
185.252.115.0/24
IPv6:
2a04:b800::/29
2a0e:e7c0::/29
2a10:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:2e:7c:61:ca:89:f3:5e:f2:d3:9f:5f:54:31:14:38:6e:4b:
32:8b:00:16:be:c6:02:f3:70:83:ee:e2:b0:cd:91:97:35:a3:
c7:1c:69:4c:b7:d0:d7:ac:b5:ca:18:86:4c:5e:cc:f5:9b:6f:
ad:e8:d6:6a:98:d4:92:0f:62:09:15:6c:8b:51:e9:93:f0:75:
4d:c4:27:0e:e0:57:39:b0:c2:44:0d:18:9d:06:22:ac:d1:33:
55:e7:7a:43:d3:88:17:61:72:68:aa:fa:e5:21:db:10:03:83:
eb:a6:6f:7d:bb:9c:26:c5:70:2c:21:0f:16:83:04:fa:d6:11:
fd:cf:70:17:50:69:db:dc:dc:07:4c:f6:3f:38:2a:cb:c0:b8:
9a:a1:c8:8c:a0:c3:e0:d0:a1:22:92:cf:e7:9d:8f:24:84:5c:
41:a1:c1:87:81:bc:e6:56:3a:2d:62:82:3d:f5:10:5a:3d:81:
01:9f:e5:c8:da:cb:3d:e9:d9:b1:9a:1f:0c:b6:46:c9:b0:02:
c2:85:fd:46:84:a1:c7:0f:dd:e6:3a:62:81:b5:96:c0:cf:76:
94:da:f8:3e:f8:76:5e:c2:63:27:11:35:dc:0d:25:c3:22:50:
19:9c:5b:67:8f:86:0d:6b:44:69:26:f3:b6:af:9e:10:2b:e6:
ae:ea:a1:18
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQg1fZlKI86BTLjKZXJtcojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjIyZWVhNGE0YTNiODE2NTRhMjI3ZWRhOTRlMGU3NTkz
N2IwMTUwHhcNMjUwMTAxMDc0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWY3NjViMGEwMDBiZGViMjc1YWY0YzNiZTI2YjczMGI2MTdlYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2WIIQD1iB4qROf0u8RoOi8l9ndP
oCOpmC2IHTyjvhcX7yQEFwX+Z8lwz1u5MyAaMJIoksOzXe9F5A2pvJ22fc1EeBo6
qMJrAw27JfrD8dFZi6QfUpK6Mq9C3cQryyw7MgBFoUAeuogtxP5/TawSVdan/pEL
7aeCgMNYketU5ZkdkUcnxkD+L3Oyg+mFX5D6Rd+K0ivR0b8tZEymmBeIxLwco7J9
DIJN7bMGqOLxegpLYsJLOU0f18RM4JB8Dg23OAzRMIogK6bkqNQxvZH073V4u04L
/JVz+Yddh6V9eT939tUEIiXZY8EPOPz9Kfo1HuvMIJvItXiTNAAQGYw0oQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFMH3ZbCgAL3rJ1r0w74mtzC2F+thMB8GA1UdIwQY
MBaAFGiyLupKSjuBZUoiftqU4OdZN7AVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2It
MmI2NWE3YThiZThjLzEvd2ZkbHNLQUF2ZXNuV3ZURHZpYTNNTFlYNjJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82OWNiYzAtYjZjNS00ZTY3LWE3M2ItMmI2NWE3YThiZThj
LzEvYUxJdTZrcEtPNEZsU2lKLTJwVGc1MWszc0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQAufn/AwQB
ufxwAwQAufxzMBsEAgACMBUDBQMqBLgAAwUDKg7nwAMFAyoQpsAwDQYJKoZIhvcN
AQELBQADggEBAD0ufGHKifNe8tOfX1QxFDhuSzKLABa+xgLzcIPu4rDNkZc1o8cc
aUy30NestcoYhkxezPWbb63o1mqY1JIPYgkVbItR6ZPwdU3EJw7gVzmwwkQNGJ0G
IqzRM1XnekPTiBdhcmiq+uUh2xADg+umb327nCbFcCwhDxaDBPrWEf3PcBdQadvc
3AdM9j84KsvAuJqhyIygw+DQoSKSz+edjySEXEGhwYeBvOZWOi1igj31EFo9gQGf
5cjayz3p2bGaHwy2RsmwAsKF/UaEoccP3eY6YoG1lsDPdpTa+D74dl7CYycRNdwN
JcMiUBmcW2ePhg1rRGkm87avnhAr5q7qoRg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:29:05 2025 by rpki-client