Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/WNH7H0VfF14_darEbUw_muGxvpc.roa
File: WNH7H0VfF14_darEbUw_muGxvpc.roa (raw, json)
Hash identifier: RkUJ8JC0sJFlPczYJOVEeei/hj6KJTevm5JAKTFiR9o=
Subject key identifier: 58:D1:FB:1F:45:5F:17:5E:3F:75:AA:C4:6D:4C:3F:9A:E1:B1:BE:97
Certificate issuer: /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial: 0193B05861F7FB1DFBB4EFC56B6AEE325E99
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/WNH7H0VfF14_darEbUw_muGxvpc.roa
Signing time: Tue 10 Dec 2024 11:33:22 +0000
ROA not before: Tue 10 Dec 2024 11:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57099
IP address blocks: 5.133.172.0/22 maxlen: 22
46.231.8.0/21 maxlen: 21
85.95.32.0/19 maxlen: 19
91.209.142.0/24 maxlen: 24
91.214.228.0/22 maxlen: 22
151.249.64.0/20 maxlen: 20
185.44.248.0/22 maxlen: 22
185.113.0.0/22 maxlen: 22
185.168.144.0/22 maxlen: 22
209.35.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:58:61:f7:fb:1d:fb:b4:ef:c5:6b:6a:ee:32:5e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Validity
Not Before: Dec 10 11:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58d1fb1f455f175e3f75aac46d4c3f9ae1b1be97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:56:d8:92:2f:65:0b:99:d5:ed:e4:23:0a:
89:73:8e:d8:8e:4d:b9:18:fd:a7:73:0c:50:4f:98:
c6:72:5b:d5:2f:22:b8:28:31:e5:30:41:04:33:86:
5f:48:5a:cc:26:b2:5b:20:3e:e3:91:84:9e:02:88:
e4:c3:9d:da:45:df:db:39:86:7a:5b:e8:55:5a:5e:
81:07:75:5e:71:60:4e:18:b6:a6:3e:80:fe:b0:68:
2d:e6:94:55:ff:d6:86:6e:73:76:73:ae:4b:cb:b6:
a7:15:73:41:03:ec:5d:de:91:ad:d0:9e:fd:83:51:
59:86:97:3c:ef:83:c7:ea:e2:88:85:69:26:51:cb:
e6:c5:3a:dc:cc:06:5a:d7:11:5f:c0:23:76:a9:81:
96:90:98:23:59:ca:52:55:e3:65:32:b6:88:51:6f:
a3:c7:74:ad:98:d8:f7:84:4d:48:a2:a4:22:ad:66:
71:8e:56:9c:fe:e0:da:c9:36:7f:1b:19:1d:5f:7f:
ee:ae:4b:f5:f4:a4:9f:61:74:a9:ad:62:b4:29:75:
eb:63:06:dd:b8:4e:b2:ce:1e:3f:01:6b:ba:93:eb:
01:a7:3a:ce:a2:9a:64:11:f7:35:71:58:4c:16:dc:
30:6f:2a:08:07:01:68:64:30:3a:5b:87:49:d7:20:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D1:FB:1F:45:5F:17:5E:3F:75:AA:C4:6D:4C:3F:9A:E1:B1:BE:97
X509v3 Authority Key Identifier:
keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/WNH7H0VfF14_darEbUw_muGxvpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.172.0/22
46.231.8.0/21
85.95.32.0/19
91.209.142.0/24
91.214.228.0/22
151.249.64.0/20
185.44.248.0/22
185.113.0.0/22
185.168.144.0/22
209.35.128.0/20
Signature Algorithm: sha256WithRSAEncryption
af:fc:37:0b:78:cc:ec:17:41:75:72:56:2d:f2:10:9c:df:db:
79:66:01:c3:16:9c:cc:cb:8e:c3:c9:8f:25:17:ae:b4:ab:0d:
32:c5:01:5c:9b:3c:1f:16:c1:ea:04:74:f7:55:61:a9:c5:f8:
01:c5:d8:55:6e:2b:5a:79:84:59:c9:14:6a:c1:85:a5:b4:ed:
b8:01:1f:fb:80:c8:4f:38:71:98:07:77:39:11:98:ed:0f:03:
c7:4f:57:37:0e:aa:83:ce:32:ee:c5:2b:0a:c3:ba:3f:e0:37:
9a:82:68:0e:63:cd:23:5f:20:f0:63:c6:af:d0:71:db:6c:b2:
30:be:06:36:e9:d2:e5:9f:2b:dd:0b:41:47:e4:9c:da:ba:67:
53:ff:99:d5:da:64:1a:70:51:2e:eb:f9:c1:61:13:cb:fe:f2:
b1:a0:64:da:cc:d2:6f:dc:d9:a8:3a:90:8d:4a:ca:54:b6:48:
54:a4:2b:f7:4f:8f:a4:99:98:fe:8c:24:ff:3b:e1:63:dd:b9:
21:7f:99:d4:de:bf:7d:96:e0:61:b0:10:dd:ba:98:e5:9b:81:
fb:f9:4e:a6:54:4a:c3:7c:a0:7f:7a:22:c7:6c:ac:23:af:b5:
a3:f8:dd:53:ae:ac:90:c9:17:ef:c6:f9:7e:74:7f:4e:5e:96:
99:ab:53:64
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZOwWGH3+x37tO/Fa2ruMl6ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNDVhOWEwMzUzYTMzYzZhNGY5MzYwOGY5ZDI1ZjI3Yzg1
OTQ4YjcwHhcNMjQxMjEwMTEzMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGQxZmIxZjQ1NWYxNzVlM2Y3NWFhYzQ2ZDRjM2Y5YWUxYjFiZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PFW2JIvZQuZ1e3kIwqJc47Yjk25
GP2ncwxQT5jGclvVLyK4KDHlMEEEM4ZfSFrMJrJbID7jkYSeAojkw53aRd/bOYZ6
W+hVWl6BB3VecWBOGLamPoD+sGgt5pRV/9aGbnN2c65Ly7anFXNBA+xd3pGt0J79
g1FZhpc874PH6uKIhWkmUcvmxTrczAZa1xFfwCN2qYGWkJgjWcpSVeNlMraIUW+j
x3StmNj3hE1IoqQirWZxjlac/uDayTZ/GxkdX3/urkv19KSfYXSprWK0KXXrYwbd
uE6yzh4/AWu6k+sBpzrOoppkEfc1cVhMFtwwbyoIBwFoZDA6W4dJ1yDHbwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFFjR+x9FXxdeP3WqxG1MP5rhsb6XMB8GA1UdIwQY
MBaAFH5FqaA1OjPGpPk2CPnSXyfIWUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2Qt
MzdhNjBjMzM1YTVkLzEvV05IN0gwVmZGMTRfZGFyRWJVd19tdUd4dnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2QtMzdhNjBjMzM1YTVk
LzEvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCBYWsAwQD
LucIAwQFVV8gAwQAW9GOAwQCW9bkAwQEl/lAAwQCuSz4AwQCuXEAAwQCuaiQAwQE
0SOAMA0GCSqGSIb3DQEBCwUAA4IBAQCv/DcLeMzsF0F1clYt8hCc39t5ZgHDFpzM
y47DyY8lF660qw0yxQFcmzwfFsHqBHT3VWGpxfgBxdhVbitaeYRZyRRqwYWltO24
AR/7gMhPOHGYB3c5EZjtDwPHT1c3DqqDzjLuxSsKw7o/4DeagmgOY80jXyDwY8av
0HHbbLIwvgY26dLlnyvdC0FH5JzaumdT/5nV2mQacFEu6/nBYRPL/vKxoGTazNJv
3NmoOpCNSspUtkhUpCv3T4+kmZj+jCT/O+Fj3bkhf5nU3r99luBhsBDdupjlm4H7
+U6mVErDfKB/eiLHbKwjr7Wj+N1TrqyQyRfvxvl+dH9OXpaZq1Nk
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:27:01 2024 by rpki-client on console.sobornost.net