Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa
File: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (raw, json)
Hash identifier: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=
Subject key identifier: F9:62:D5:F1:57:9C:1C:88:89:5F:8F:19:09:15:C2:3E:79:12:57:5C
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 01942068300DC46D7402F86CBE67E84F760A
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa
Signing time: Wed 01 Jan 2025 05:48:06 +0000
ROA not before: Wed 01 Jan 2025 05:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43995
IP address blocks: 45.159.44.0/22 maxlen: 22
82.151.32.0/19 maxlen: 27
185.77.24.0/22 maxlen: 24
2a02:e040::/29 maxlen: 64
2a0f:7180::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:30:0d:c4:6d:74:02:f8:6c:be:67:e8:4f:76:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Jan 1 05:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f962d5f1579c1c88895f8f190915c23e7912575c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:c9:69:4f:3e:1a:72:90:a1:1d:00:f5:9f:
e8:5d:d6:8d:dd:36:34:82:11:27:ee:63:fb:e2:d3:
8b:c9:d8:3a:5d:25:bd:08:32:3a:b2:79:43:33:ff:
32:a5:8c:87:68:76:c5:86:50:4a:9d:4b:67:56:fc:
16:c9:62:17:f2:98:e2:4c:50:85:07:a8:8a:db:a7:
0b:bb:c6:3b:de:03:e1:6b:a1:c5:43:7a:5d:e9:b7:
f7:a4:da:c8:63:aa:f7:3c:eb:6b:43:3f:f7:0f:6b:
c4:ff:e1:b5:c0:e0:cb:45:b2:91:b9:13:5c:b7:01:
ff:f9:5c:eb:55:b5:c5:08:06:4f:1c:df:7d:db:d4:
77:94:38:d0:e2:14:36:ac:47:5a:3e:95:8d:ff:fb:
2f:44:82:ab:27:e0:8f:73:a8:a3:73:c7:5d:6e:10:
eb:52:b8:cc:6f:1f:26:68:5e:d9:01:23:48:20:e5:
08:33:7f:df:ab:c3:ff:cd:05:9f:70:2c:ef:66:8b:
44:f0:14:0a:a1:b4:0d:44:c0:85:58:f8:f7:53:3b:
d1:f9:a8:1b:0f:90:5f:87:e8:98:5a:d6:3e:4f:cb:
c6:11:ca:f3:6b:d2:8f:5e:07:d0:0d:78:04:97:94:
68:cf:35:30:97:58:36:20:e7:41:91:43:8d:45:77:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:D5:F1:57:9C:1C:88:89:5F:8F:19:09:15:C2:3E:79:12:57:5C
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.44.0/22
82.151.32.0/19
185.77.24.0/22
IPv6:
2a02:e040::/29
2a0f:7180::/29
Signature Algorithm: sha256WithRSAEncryption
77:03:26:3a:cf:ca:c6:dd:69:83:1b:9e:73:d4:0c:9f:aa:9d:
9b:cc:99:8e:59:42:13:fb:72:af:22:b5:12:bd:b4:b0:89:2a:
12:76:09:33:d3:09:4f:42:18:d2:92:e0:bf:96:7f:80:a7:ae:
cb:eb:95:70:fe:75:04:92:f7:da:fa:9d:5d:e1:a9:a7:24:43:
03:18:25:2f:34:87:9f:f9:5a:29:4e:5d:15:33:29:0d:df:6c:
26:41:f1:9b:71:6c:bd:b3:36:72:c7:8d:5b:61:1c:0b:bb:a0:
12:3e:ab:6d:41:17:ef:af:c5:f5:28:60:12:05:ca:92:3a:31:
93:0d:ba:6a:7c:ef:cb:de:45:8c:28:27:be:3f:b1:bd:34:66:
76:a6:d3:de:e7:56:0b:d3:4b:92:3d:96:47:aa:7d:a8:22:43:
b9:cb:5a:1b:ed:4a:12:55:65:45:14:f3:4b:31:f3:02:a4:d5:
00:4b:35:3f:ea:da:36:cc:f6:2a:0e:a1:cc:47:12:26:4c:90:
82:65:44:29:6f:03:74:1e:d3:66:c6:48:a4:51:45:f0:2e:6c:
0e:fb:f4:86:7c:b6:55:f8:55:f2:ea:e0:f1:1b:ee:3c:c7:1c:
40:be:a7:b3:7b:9a:95:bf:36:6a:69:e7:cf:0c:cd:e7:43:ea:
99:06:6e:5d
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAZQgaDANxG10AvhsvmfoT3YKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGIyZjRlNjY4ZWYwYTE3NmE4YmQwMDA0ZTI3Nzc2NzA4
MzMyMzgwHhcNMjUwMTAxMDU0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTYyZDVmMTU3OWMxYzg4ODk1ZjhmMTkwOTE1YzIzZTc5MTI1NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksDJaU8+GnKQoR0A9Z/oXdaN3TY0
ghEn7mP74tOLydg6XSW9CDI6snlDM/8ypYyHaHbFhlBKnUtnVvwWyWIX8pjiTFCF
B6iK26cLu8Y73gPha6HFQ3pd6bf3pNrIY6r3POtrQz/3D2vE/+G1wODLRbKRuRNc
twH/+VzrVbXFCAZPHN9929R3lDjQ4hQ2rEdaPpWN//svRIKrJ+CPc6ijc8ddbhDr
UrjMbx8maF7ZASNIIOUIM3/fq8P/zQWfcCzvZotE8BQKobQNRMCFWPj3UzvR+agb
D5Bfh+iYWtY+T8vGEcrza9KPXgfQDXgEl5RozzUwl1g2IOdBkUONRXdT6QIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFPli1fFXnByIiV+PGQkVwj55EldcMB8GA1UdIwQY
MBaAFPaLL05mjvChdqi9AATid3ZwgzI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEt
NTJiMDc3NWM3Y2I0LzEvMS1XTFY4VmVjSElpSlg0OFpDUlhDUG5rU1Yxdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWMvZmRjNTk5LTc4MGItNDQxNC05ZTJhLTUyYjA3NzVjN2Ni
NC8xLzlvc3ZUbWFPOEtGMnFMMEFCT0ozZG5DRE1qZy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQyMDAwGAQCAAEwEgMEAi2fLAME
BVKXIAMEArlNGDAUBAIAAjAOAwUDKgLgQAMFAyoPcYAwDQYJKoZIhvcNAQELBQAD
ggEBAHcDJjrPysbdaYMbnnPUDJ+qnZvMmY5ZQhP7cq8itRK9tLCJKhJ2CTPTCU9C
GNKS4L+Wf4CnrsvrlXD+dQSS99r6nV3hqackQwMYJS80h5/5WilOXRUzKQ3fbCZB
8ZtxbL2zNnLHjVthHAu7oBI+q21BF++vxfUoYBIFypI6MZMNump878veRYwoJ74/
sb00Znam097nVgvTS5I9lkeqfagiQ7nLWhvtShJVZUUU80sx8wKk1QBLNT/q2jbM
9ioOocxHEiZMkIJlRClvA3Qe02bGSKRRRfAubA779IZ8tlX4VfLq4PEb7jzHHEC+
p7N7mpW/Nmpp588MzedD6pkGbl0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:04:12 2025 by rpki-client