Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/WN1QsY4J0xzhzXI37At9k24AG4s.roa
File: WN1QsY4J0xzhzXI37At9k24AG4s.roa (raw, json)
Hash identifier: aONG4etXL5aCmGtS97ulkTYk4UjXjlB6E7tpLdYeDEA=
Subject key identifier: 58:DD:50:B1:8E:09:D3:1C:E1:CD:72:37:EC:0B:7D:93:6E:00:1B:8B
Certificate issuer: /CN=177921336911a5688d78e93ffe5e472113bb19be
Certificate serial: 01942143B0762B23D23892A8B73B8E8AA0BE
Authority key identifier: 17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/WN1QsY4J0xzhzXI37At9k24AG4s.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205498
IP address blocks: 45.85.16.0/22 maxlen: 22
185.215.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b0:76:2b:23:d2:38:92:a8:b7:3b:8e:8a:a0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=177921336911a5688d78e93ffe5e472113bb19be
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58dd50b18e09d31ce1cd7237ec0b7d936e001b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:bc:b1:5a:fb:80:ec:0e:4a:a3:ce:89:4b:
f6:b6:b9:f7:3f:92:aa:e5:40:b3:87:77:c1:d5:cc:
00:d3:23:45:8a:7c:f4:da:d0:7e:09:e7:dd:2b:29:
e6:1d:09:5b:34:47:ad:7e:c8:61:e4:0c:88:d9:ad:
e7:56:a8:30:cf:d7:a7:7a:94:5d:2c:67:41:05:f5:
1e:ef:45:93:b6:46:46:a1:66:58:e9:db:73:4b:c9:
6c:b5:87:96:e9:9e:27:5a:f4:7b:9c:5a:f2:99:57:
4d:16:85:ad:d7:da:a7:8c:a7:3a:7d:d7:bb:ff:01:
05:12:06:14:5b:f6:81:49:21:07:32:33:e9:97:17:
05:5d:36:91:59:86:9a:7f:71:24:bf:1e:fb:ba:30:
3d:8a:f5:1f:e1:0c:4e:6e:39:7b:26:60:72:45:a9:
a9:37:51:80:47:01:44:bb:b4:25:78:e4:cf:d9:8d:
63:0e:84:28:1d:2d:39:f0:36:5a:6b:f6:12:c7:a7:
22:d2:22:1e:6a:20:a7:ec:bd:41:9a:c2:8d:0b:cb:
68:e1:e9:4c:5c:91:43:15:53:6f:f4:a2:80:cb:6f:
58:bd:8f:87:df:54:5e:a3:2d:b3:40:be:02:3a:f7:
c2:45:3a:e4:a1:70:40:87:26:da:e6:cb:b3:92:e0:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:50:B1:8E:09:D3:1C:E1:CD:72:37:EC:0B:7D:93:6E:00:1B:8B
X509v3 Authority Key Identifier:
keyid:17:79:21:33:69:11:A5:68:8D:78:E9:3F:FE:5E:47:21:13:BB:19:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3khM2kRpWiNeOk__l5HIRO7Gb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/WN1QsY4J0xzhzXI37At9k24AG4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/63107c-b560-4116-b478-b5c3d24efdcd/1/F3khM2kRpWiNeOk__l5HIRO7Gb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.16.0/22
185.215.140.0/22
Signature Algorithm: sha256WithRSAEncryption
09:32:85:89:46:2f:b0:ce:1f:9b:2f:cb:75:31:d5:4c:f5:e9:
44:60:ed:50:2b:12:e7:60:02:e8:36:05:ec:91:71:3c:1b:9f:
9b:9b:f7:7b:3f:ee:51:3d:d0:1f:62:7f:0b:e5:43:7a:6f:1b:
37:93:51:92:e0:ce:19:80:94:b8:ce:3b:19:d2:71:b5:ef:4e:
e4:9c:57:12:99:79:d8:4d:5b:e2:84:18:83:27:32:0d:28:98:
b1:a5:c9:3a:21:f8:59:4b:de:89:cb:ea:0b:f8:33:08:f4:36:
1a:bc:0a:c3:3e:d0:34:8e:ae:ed:60:48:08:94:3a:17:16:fa:
e8:ef:81:fe:55:0a:67:3e:66:3e:63:db:fc:43:41:fc:61:f9:
b1:ab:ee:c2:42:bb:a5:06:ef:e7:03:07:52:a3:1a:4f:d1:3b:
59:c4:5d:28:ff:4e:46:26:7c:c1:75:d1:20:55:a3:f4:37:86:
fb:5a:e6:67:df:ce:96:8b:4b:08:4d:23:04:75:0c:97:3c:fd:
d2:13:d4:86:0f:80:31:1d:df:f1:b3:bb:18:83:7f:6c:64:23:
f4:9e:34:e5:2c:bd:ad:32:24:d7:37:25:bd:c9:29:f3:73:5b:
f4:36:ac:4b:5e:fa:73:34:8f:c3:19:f9:b1:85:17:47:d7:41:
59:03:ed:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ7B2KyPSOJKotzuOiqC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzkyMTMzNjkxMWE1Njg4ZDc4ZTkzZmZlNWU0NzIxMTNi
YjE5YmUwHhcNMjUwMTAxMDk0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGRkNTBiMThlMDlkMzFjZTFjZDcyMzdlYzBiN2Q5MzZlMDAxYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApui8sVr7gOwOSqPOiUv2trn3P5Kq
5UCzh3fB1cwA0yNFinz02tB+CefdKynmHQlbNEetfshh5AyI2a3nVqgwz9enepRd
LGdBBfUe70WTtkZGoWZY6dtzS8lstYeW6Z4nWvR7nFrymVdNFoWt19qnjKc6fde7
/wEFEgYUW/aBSSEHMjPplxcFXTaRWYaaf3Ekvx77ujA9ivUf4QxObjl7JmByRamp
N1GARwFEu7QleOTP2Y1jDoQoHS058DZaa/YSx6ci0iIeaiCn7L1BmsKNC8to4elM
XJFDFVNv9KKAy29YvY+H31Reoy2zQL4COvfCRTrkoXBAhyba5suzkuDGQwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFjdULGOCdMc4c1yN+wLfZNuABuLMB8GA1UdIwQY
MBaAFBd5ITNpEaVojXjpP/5eRyETuxm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNraE0ya1JwV2lOZU9rX19sNUhJUk83R2I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82MzEwN2MtYjU2MC00MTE2LWI0Nzgt
YjVjM2QyNGVmZGNkLzEvV04xUXNZNEoweHpoelhJMzdBdDlrMjRBRzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82MzEwN2MtYjU2MC00MTE2LWI0NzgtYjVjM2QyNGVmZGNk
LzEvRjNraE0ya1JwV2lOZU9rX19sNUhJUk83R2I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVUQAwQC
udeMMA0GCSqGSIb3DQEBCwUAA4IBAQAJMoWJRi+wzh+bL8t1MdVM9elEYO1QKxLn
YALoNgXskXE8G5+bm/d7P+5RPdAfYn8L5UN6bxs3k1GS4M4ZgJS4zjsZ0nG1707k
nFcSmXnYTVvihBiDJzINKJixpck6IfhZS96Jy+oL+DMI9DYavArDPtA0jq7tYEgI
lDoXFvro74H+VQpnPmY+Y9v8Q0H8Yfmxq+7CQrulBu/nAwdSoxpP0TtZxF0o/05G
JnzBddEgVaP0N4b7WuZn386Wi0sITSMEdQyXPP3SE9SGD4AxHd/xs7sYg39sZCP0
njTlLL2tMiTXNyW9ySnzc1v0NqxLXvpzNI/DGfmxhRdH10FZA+1N
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:07:08 2025 by rpki-client