Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/W9UtOzgESJZg20tR4pecEMoX1cI.roa
File: W9UtOzgESJZg20tR4pecEMoX1cI.roa (raw, json)
Hash identifier: 1dJlgWL/vzLpBKeS19jiFnQ0GdXtY4NamL62KNSS0Bo=
Subject key identifier: 5B:D5:2D:3B:38:04:48:96:60:DB:4B:51:E2:97:9C:10:CA:17:D5:C2
Certificate issuer: /CN=cddd902a1271270027e4577778ea35883b4515f6
Certificate serial: 019544DB6154C2C09E6BC783E777F2D2AEB3
Authority key identifier: CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/W9UtOzgESJZg20tR4pecEMoX1cI.roa
Signing time: Thu 27 Feb 2025 00:43:02 +0000
ROA not before: Thu 27 Feb 2025 00:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42425
IP address blocks: 2.59.6.0/24 maxlen: 24
2.59.7.0/24 maxlen: 24
94.125.232.0/21 maxlen: 24
94.125.232.0/24 maxlen: 24
94.125.233.0/24 maxlen: 24
94.125.234.0/24 maxlen: 24
94.125.235.0/24 maxlen: 24
94.125.236.0/24 maxlen: 24
94.125.237.0/24 maxlen: 24
94.125.238.0/24 maxlen: 24
94.125.239.0/24 maxlen: 24
178.255.184.0/21 maxlen: 21
178.255.184.0/24 maxlen: 24
178.255.185.0/24 maxlen: 24
178.255.186.0/24 maxlen: 24
178.255.187.0/24 maxlen: 24
178.255.188.0/24 maxlen: 24
178.255.189.0/24 maxlen: 24
178.255.190.0/24 maxlen: 24
178.255.191.0/24 maxlen: 24
185.28.80.0/22 maxlen: 22
185.28.80.0/24 maxlen: 24
185.28.81.0/24 maxlen: 24
185.28.82.0/24 maxlen: 24
185.28.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:44:db:61:54:c2:c0:9e:6b:c7:83:e7:77:f2:d2:ae:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddd902a1271270027e4577778ea35883b4515f6
Validity
Not Before: Feb 27 00:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bd52d3b3804489660db4b51e2979c10ca17d5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:fc:da:b9:b9:9e:8e:88:7a:bb:72:79:30:
89:5d:25:e2:39:a1:a6:3b:6d:20:0d:1a:97:b3:ea:
43:9a:cc:62:2c:29:4d:86:4b:9f:86:06:de:b5:b5:
d1:dd:d0:8d:41:df:d8:2f:2c:4a:85:84:57:3d:e3:
bc:5e:46:a6:5c:55:99:62:b2:15:d9:ee:23:c6:14:
b3:98:c9:0c:e2:41:c4:55:cd:f3:cb:d8:0d:0c:4b:
53:cd:dd:20:97:1e:35:f7:94:6e:df:af:3f:f7:ae:
39:28:12:14:35:52:58:46:e4:8d:b7:fe:59:5d:25:
35:4a:21:2d:56:87:e0:be:a3:94:7b:a9:0f:eb:06:
b1:c4:1a:c3:51:3d:82:73:0c:6b:f6:58:ef:0a:f3:
a7:64:80:0a:cc:45:a4:ea:d4:39:26:f1:9f:58:76:
16:13:33:0b:68:22:0b:cb:85:3f:5a:10:04:5d:fe:
7d:da:63:47:5c:28:36:b5:90:5c:f0:61:78:63:b8:
e8:8b:e0:38:2f:23:e3:5a:6c:f1:2a:11:a0:1c:06:
57:cd:51:68:ed:43:a5:93:76:8b:0f:75:0c:24:a0:
2c:3c:a2:72:11:92:ee:ea:3d:63:53:40:b6:33:da:
69:60:18:5e:ca:59:69:db:3c:4b:d1:a2:a4:a6:1b:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D5:2D:3B:38:04:48:96:60:DB:4B:51:E2:97:9C:10:CA:17:D5:C2
X509v3 Authority Key Identifier:
keyid:CD:DD:90:2A:12:71:27:00:27:E4:57:77:78:EA:35:88:3B:45:15:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/W9UtOzgESJZg20tR4pecEMoX1cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7a1eb4-290a-4686-8bba-dc7542138952/1/zd2QKhJxJwAn5Fd3eOo1iDtFFfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.6.0/23
94.125.232.0/21
178.255.184.0/21
185.28.80.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:be:8f:e7:50:9c:76:00:96:2e:f8:49:74:c5:bb:b0:9d:3f:
35:92:34:d2:90:43:68:74:77:2c:90:78:c8:b7:8c:91:e1:fa:
2a:c8:d3:37:f3:c5:32:a4:6b:77:52:63:e5:8e:2c:a4:d8:cc:
8e:ea:7e:2e:70:af:b1:b0:04:f7:7d:23:5c:5d:40:6b:8b:c6:
e5:9f:88:ba:37:5f:73:20:b1:74:32:53:4c:aa:f0:3e:68:32:
b7:ef:e4:e4:82:a1:2a:42:3b:ce:d8:5f:ca:61:b3:32:b8:66:
78:97:c3:03:81:72:9e:46:74:78:72:fb:a7:9f:8f:b7:ca:44:
16:5c:f1:46:b1:ca:06:c5:fa:27:6a:91:df:f1:44:62:7e:a1:
06:1b:1e:c9:fd:e9:4b:52:62:80:aa:4b:51:13:b5:3e:79:c9:
51:72:64:ab:ce:6f:fa:7d:f0:a4:67:01:2f:11:8f:6a:a7:66:
ca:9c:cc:9f:3c:a4:4b:6f:24:94:48:52:9c:8c:46:f1:2f:e4:
00:23:c7:55:b9:28:b9:82:28:2d:48:45:16:84:00:40:49:45:
5c:b3:b0:24:0b:a6:b0:cf:bd:08:dd:6e:d9:1e:c8:b4:e2:1c:
c0:8a:f0:ad:de:c3:07:53:77:ef:66:be:5c:29:c3:7d:5c:85:
3b:da:ff:df
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZVE22FUwsCea8eD53fy0q6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZGQ5MDJhMTI3MTI3MDAyN2U0NTc3Nzc4ZWEzNTg4M2I0
NTE1ZjYwHhcNMjUwMjI3MDA0MzAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmQ1MmQzYjM4MDQ0ODk2NjBkYjRiNTFlMjk3OWMxMGNhMTdkNWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+v82rm5no6IertyeTCJXSXiOaGm
O20gDRqXs+pDmsxiLClNhkufhgbetbXR3dCNQd/YLyxKhYRXPeO8XkamXFWZYrIV
2e4jxhSzmMkM4kHEVc3zy9gNDEtTzd0glx4195Ru368/9645KBIUNVJYRuSNt/5Z
XSU1SiEtVofgvqOUe6kP6waxxBrDUT2Ccwxr9ljvCvOnZIAKzEWk6tQ5JvGfWHYW
EzMLaCILy4U/WhAEXf592mNHXCg2tZBc8GF4Y7joi+A4LyPjWmzxKhGgHAZXzVFo
7UOlk3aLD3UMJKAsPKJyEZLu6j1jU0C2M9ppYBheyllp2zxL0aKkphsuuQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFvVLTs4BEiWYNtLUeKXnBDKF9XCMB8GA1UdIwQY
MBaAFM3dkCoScScAJ+RXd3jqNYg7RRX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemQyUUtoSnhKd0FuNUZkM2VPbzFpRHRGRmZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83YTFlYjQtMjkwYS00Njg2LThiYmEt
ZGM3NTQyMTM4OTUyLzEvVzlVdE96Z0VTSlpnMjB0UjRwZWNFTW9YMWNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83YTFlYjQtMjkwYS00Njg2LThiYmEtZGM3NTQyMTM4OTUy
LzEvemQyUUtoSnhKd0FuNUZkM2VPbzFpRHRGRmZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBAjsGAwQD
Xn3oAwQDsv+4AwQCuRxQMA0GCSqGSIb3DQEBCwUAA4IBAQDEvo/nUJx2AJYu+El0
xbuwnT81kjTSkENodHcskHjIt4yR4foqyNM388UypGt3UmPljiyk2MyO6n4ucK+x
sAT3fSNcXUBri8bln4i6N19zILF0MlNMqvA+aDK37+TkgqEqQjvO2F/KYbMyuGZ4
l8MDgXKeRnR4cvunn4+3ykQWXPFGscoGxfonapHf8URifqEGGx7J/elLUmKAqktR
E7U+eclRcmSrzm/6ffCkZwEvEY9qp2bKnMyfPKRLbySUSFKcjEbxL+QAI8dVuSi5
gigtSEUWhABASUVcs7AkC6awz70I3W7ZHsi04hzAivCt3sMHU3fvZr5cKcN9XIU7
2v/f
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:46 2025 by rpki-client on console.sobornost.net