Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/wPZZOS9626wM9NhL1Gmz4DC9ME4.roa
File: wPZZOS9626wM9NhL1Gmz4DC9ME4.roa (raw, json)
Hash identifier: Ufx/tGSmBlEgnXkc/x/enBQV+VQVsO+gn674YXeSq9o=
Subject key identifier: C0:F6:59:39:2F:7A:DB:AC:0C:F4:D8:4B:D4:69:B3:E0:30:BD:30:4E
Certificate issuer: /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial: 019420D65049911E88A717A3ADAA1B04447E
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/wPZZOS9626wM9NhL1Gmz4DC9ME4.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57866
IP address blocks: 37.139.136.0/21 maxlen: 21
45.141.104.0/22 maxlen: 22
185.52.236.0/22 maxlen: 22
2a00:a7c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:50:49:91:1e:88:a7:17:a3:ad:aa:1b:04:44:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f659392f7adbac0cf4d84bd469b3e030bd304e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:d3:16:e0:b2:b0:97:7b:15:38:70:7a:98:
8a:cf:52:c6:e4:5a:60:d4:89:f3:7f:d2:3e:8b:47:
0a:a6:af:0d:e7:b6:0c:fc:3d:2f:1b:65:1d:18:e5:
0d:3a:ab:3b:c3:85:f0:3b:f9:d6:be:3b:f3:e0:9e:
58:ca:ae:87:a1:d1:f6:b5:31:89:66:1d:6f:63:26:
d7:79:25:7d:bf:63:3f:59:ad:25:21:b5:32:22:f9:
59:4e:55:0e:97:87:7d:e9:6a:be:91:47:88:71:e8:
c0:fd:cd:38:1f:b5:37:2e:e6:dd:1d:8b:b3:e7:af:
6f:1d:ad:d8:9b:2a:8b:8d:81:b8:40:11:10:4c:82:
a6:ae:a9:fa:fc:82:35:06:f3:bd:ce:9b:7c:4a:92:
fd:83:15:a3:47:11:9f:a9:69:a9:12:70:dc:55:28:
ba:ad:93:2a:c4:f0:58:40:84:17:67:d7:81:17:45:
df:d5:fb:1f:fc:21:a5:25:06:34:2f:08:2b:42:24:
9e:27:e3:3c:52:98:91:82:5c:e7:ab:26:61:b9:5e:
0c:5f:57:f7:e9:df:9c:5e:dc:80:bf:f6:04:da:e0:
2a:87:e8:0e:7c:9c:2d:a3:32:f7:97:f6:6a:51:ca:
14:43:92:c2:96:56:f7:50:96:78:8d:62:cb:51:b3:
b9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:59:39:2F:7A:DB:AC:0C:F4:D8:4B:D4:69:B3:E0:30:BD:30:4E
X509v3 Authority Key Identifier:
keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/wPZZOS9626wM9NhL1Gmz4DC9ME4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.136.0/21
45.141.104.0/22
185.52.236.0/22
IPv6:
2a00:a7c0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:dd:d1:95:8d:d1:1f:89:69:45:78:ee:1e:fd:06:db:bb:4c:
2f:75:b0:f2:17:ef:79:8f:86:80:d8:0b:9f:88:42:0d:b1:90:
19:0c:c9:a4:52:83:ad:b8:ce:d6:94:1a:56:b5:54:21:fd:17:
73:58:a7:de:8b:92:75:04:8d:f9:dc:37:9a:df:5f:a5:3b:95:
de:ef:4e:10:0d:e0:73:0b:55:a3:31:b6:a6:73:54:a3:91:81:
c0:c6:1e:11:c9:eb:0d:14:fd:fb:d7:70:ad:82:bf:15:c6:79:
30:70:0d:ba:75:41:dc:7c:f9:ed:6b:f4:13:ff:0c:c9:78:c8:
6f:ed:a3:24:2c:95:e6:17:77:e1:b2:54:7c:94:ff:3d:46:a8:
49:2e:97:8a:35:40:b1:3c:32:da:97:04:11:1c:12:cf:2f:09:
d5:a2:22:6f:c8:08:47:e0:2a:85:96:af:c7:f3:bb:23:e5:4d:
03:a0:67:03:dc:5e:10:f0:f3:3f:80:ba:34:72:03:1e:c7:76:
c9:ca:4a:23:50:01:b4:8a:6a:a1:7c:00:12:9c:4b:b1:b0:7d:
13:ee:11:87:a9:27:58:cc:dd:a2:77:ff:6b:54:77:9c:56:4a:
b5:a2:ff:c6:f1:f9:8f:d9:a2:de:ac:eb:bd:fe:ef:8b:bf:6c:
3a:d6:36:16
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQg1lBJkR6IpxejraobBER+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMDE5OTFmYzM0M2YzNThjMGYyZWViYWU1NWNmMmRhMzQ1
MjFjN2EwHhcNMjUwMTAxMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGY2NTkzOTJmN2FkYmFjMGNmNGQ4NGJkNDY5YjNlMDMwYmQzMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeLTFuCysJd7FThwepiKz1LG5Fpg
1Inzf9I+i0cKpq8N57YM/D0vG2UdGOUNOqs7w4XwO/nWvjvz4J5Yyq6HodH2tTGJ
Zh1vYybXeSV9v2M/Wa0lIbUyIvlZTlUOl4d96Wq+kUeIcejA/c04H7U3LubdHYuz
569vHa3YmyqLjYG4QBEQTIKmrqn6/II1BvO9zpt8SpL9gxWjRxGfqWmpEnDcVSi6
rZMqxPBYQIQXZ9eBF0Xf1fsf/CGlJQY0LwgrQiSeJ+M8UpiRglznqyZhuV4MX1f3
6d+cXtyAv/YE2uAqh+gOfJwtozL3l/ZqUcoUQ5LCllb3UJZ4jWLLUbO5AwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMD2WTkvetusDPTYS9Rps+AwvTBOMB8GA1UdIwQY
MBaAFNMBmR/DQ/NYwPLuuuVc8to0Uhx6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHdHWkg4TkQ4MWpBOHU2NjVWenkyalJTSEhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jMzZmODMtOGIzNS00ZDA1LWEzMzQt
Zjk4YzQ4MzAxNWQ3LzEvd1BaWk9TOTYyNndNOU5oTDFHbXo0REM5TUU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jMzZmODMtOGIzNS00ZDA1LWEzMzQtZjk4YzQ4MzAxNWQ3
LzEvMHdHWkg4TkQ4MWpBOHU2NjVWenkyalJTSEhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDJYuIAwQC
LY1oAwQCuTTsMA0EAgACMAcDBQAqAKfAMA0GCSqGSIb3DQEBCwUAA4IBAQB93dGV
jdEfiWlFeO4e/Qbbu0wvdbDyF+95j4aA2AufiEINsZAZDMmkUoOtuM7WlBpWtVQh
/RdzWKfei5J1BI353Dea31+lO5Xe704QDeBzC1WjMbamc1SjkYHAxh4RyesNFP37
13Ctgr8VxnkwcA26dUHcfPnta/QT/wzJeMhv7aMkLJXmF3fhslR8lP89RqhJLpeK
NUCxPDLalwQRHBLPLwnVoiJvyAhH4CqFlq/H87sj5U0DoGcD3F4Q8PM/gLo0cgMe
x3bJykojUAG0imqhfAASnEuxsH0T7hGHqSdYzN2id/9rVHecVkq1ov/G8fmP2aLe
rOu9/u+Lv2w61jYW
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net