Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/wgfEWoteV0ugJhJFFY5StCpYga4.roa
File: wgfEWoteV0ugJhJFFY5StCpYga4.roa (raw, json)
Hash identifier: Bu0QgGIHWGxscJbgnF2zr/rd8qdTFWvwHrlBzc8O9aU=
Subject key identifier: C2:07:C4:5A:8B:5E:57:4B:A0:26:12:45:15:8E:52:B4:2A:58:81:AE
Certificate issuer: /CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Certificate serial: 019422202CE1A61D48C22701023419B89B84
Authority key identifier: 3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/wgfEWoteV0ugJhJFFY5StCpYga4.roa
Signing time: Wed 01 Jan 2025 13:48:41 +0000
ROA not before: Wed 01 Jan 2025 13:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12611
IP address blocks: 5.149.224.0/20 maxlen: 24
46.227.96.0/21 maxlen: 24
80.209.192.0/19 maxlen: 24
81.27.160.0/20 maxlen: 24
88.133.176.0/20 maxlen: 24
88.133.232.0/21 maxlen: 24
91.106.120.0/21 maxlen: 24
95.130.160.0/21 maxlen: 24
130.185.0.0/18 maxlen: 24
185.119.92.0/22 maxlen: 24
212.77.160.0/19 maxlen: 24
217.74.0.0/21 maxlen: 24
2001:16e0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2c:e1:a6:1d:48:c2:27:01:02:34:19:b8:9b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da6e69e65dd0a540599703ed0c92474cb20e939
Validity
Not Before: Jan 1 13:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c207c45a8b5e574ba0261245158e52b42a5881ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:f7:be:42:c6:f8:8e:5d:5e:45:77:26:c3:
df:3d:b2:ac:de:8b:12:45:f7:c8:37:2e:57:e9:91:
a5:fa:10:94:2a:ac:57:3b:74:54:9f:16:55:fc:e1:
a8:d9:fa:7b:5e:09:cc:62:29:85:65:ad:29:af:19:
d3:33:56:41:57:b2:98:f4:10:98:51:a5:87:ef:fe:
60:d0:46:40:cc:d3:f1:fb:9c:f0:22:26:84:50:7d:
1e:05:42:67:18:45:8b:64:38:9a:3f:50:2a:29:9f:
89:80:29:d8:78:59:1d:57:c5:78:7b:87:5f:e0:e5:
44:89:eb:84:b1:56:6a:57:6a:97:6a:c8:e3:75:39:
bd:20:c6:78:5e:08:ba:35:99:ad:e8:29:75:33:74:
64:2a:f9:5c:b3:3d:f6:e5:eb:bc:f4:0e:f5:1e:62:
42:ee:2f:55:4a:c1:fe:63:6b:68:62:9e:05:a1:c6:
38:ef:4d:95:7f:67:29:41:41:fc:ed:37:66:58:79:
40:31:55:87:8f:d4:27:b7:dd:f2:44:63:6a:33:f1:
e7:86:e7:e1:4c:cd:84:83:7f:a4:35:d3:31:0d:e9:
6f:a7:4a:96:e1:51:c2:9a:2b:9a:f8:b6:57:4e:a3:
e5:d5:69:5b:a5:a1:b0:b9:f1:7a:db:f2:81:9d:f0:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:07:C4:5A:8B:5E:57:4B:A0:26:12:45:15:8E:52:B4:2A:58:81:AE
X509v3 Authority Key Identifier:
keyid:3D:A6:E6:9E:65:DD:0A:54:05:99:70:3E:D0:C9:24:74:CB:20:E9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PabmnmXdClQFmXA-0MkkdMsg6Tk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/wgfEWoteV0ugJhJFFY5StCpYga4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f7c4a2-b606-4292-b9f7-fa3c4ef5edf6/1/PabmnmXdClQFmXA-0MkkdMsg6Tk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.224.0/20
46.227.96.0/21
80.209.192.0/19
81.27.160.0/20
88.133.176.0/20
88.133.232.0/21
91.106.120.0/21
95.130.160.0/21
130.185.0.0/18
185.119.92.0/22
212.77.160.0/19
217.74.0.0/21
IPv6:
2001:16e0::/29
Signature Algorithm: sha256WithRSAEncryption
a7:ea:2f:82:52:4f:a1:33:08:64:d7:43:62:c0:c5:27:3e:74:
2b:f1:2b:af:40:2c:47:54:af:10:42:88:5a:18:3f:db:c6:72:
cf:2b:ff:c0:2b:87:31:84:b8:26:1f:e6:0c:a3:90:a8:a9:b2:
25:39:84:d8:b1:5c:b2:73:6b:a2:df:f2:3d:3a:aa:38:ec:0c:
0e:62:d4:1c:5b:50:38:d5:98:d9:5c:cd:ff:11:dc:d6:b2:2f:
08:8b:7b:df:e3:4a:cd:15:ae:4b:c7:bb:2d:04:e2:2a:92:5b:
66:ff:79:79:db:c3:23:f0:1c:b3:e6:66:d4:8d:e6:14:e7:c6:
fd:c8:f3:95:1b:50:a8:18:05:57:cf:17:7f:4b:8a:9b:2e:d6:
5e:a5:de:bc:71:c9:4e:c4:39:c6:dd:2d:03:9e:da:4c:7e:af:
99:26:6d:a7:d5:9f:8a:74:20:06:e6:60:26:e2:6b:b4:34:9c:
98:6e:5e:45:5a:6d:74:bc:4a:e6:17:d6:a6:a2:1f:6c:d3:9c:
f0:79:d3:7c:69:c0:a2:5e:f9:d8:28:57:bc:98:09:85:f5:a0:
6c:12:95:ea:2b:38:e1:c9:10:55:18:44:b5:85:cd:d1:8f:fd:
d7:9a:94:a0:4d:42:9b:84:2a:c1:29:14:e7:8e:25:f4:27:92:
cc:22:31:9d
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZQiICzhph1IwicBAjQZuJuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTZlNjllNjVkZDBhNTQwNTk5NzAzZWQwYzkyNDc0Y2Iy
MGU5MzkwHhcNMjUwMTAxMTM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjA3YzQ1YThiNWU1NzRiYTAyNjEyNDUxNThlNTJiNDJhNTg4MWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxND3vkLG+I5dXkV3JsPfPbKs3osS
RffINy5X6ZGl+hCUKqxXO3RUnxZV/OGo2fp7XgnMYimFZa0prxnTM1ZBV7KY9BCY
UaWH7/5g0EZAzNPx+5zwIiaEUH0eBUJnGEWLZDiaP1AqKZ+JgCnYeFkdV8V4e4df
4OVEieuEsVZqV2qXasjjdTm9IMZ4Xgi6NZmt6Cl1M3RkKvlcsz325eu89A71HmJC
7i9VSsH+Y2toYp4FocY4702Vf2cpQUH87TdmWHlAMVWHj9Qnt93yRGNqM/Hnhufh
TM2Eg3+kNdMxDelvp0qW4VHCmiua+LZXTqPl1WlbpaGwufF62/KBnfCYzwIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFMIHxFqLXldLoCYSRRWOUrQqWIGuMB8GA1UdIwQY
MBaAFD2m5p5l3QpUBZlwPtDJJHTLIOk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5Zjct
ZmEzYzRlZjVlZGY2LzEvd2dmRVdvdGVWMHVnSmhKRkZZNVN0Q3BZZ2E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9mN2M0YTItYjYwNi00MjkyLWI5ZjctZmEzYzRlZjVlZGY2
LzEvUGFibW5tWGRDbFFGbVhBLTBNa2tkTXNnNlRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQEBZXgAwQD
LuNgAwQFUNHAAwQEURugAwQEWIWwAwQDWIXoAwQDW2p4AwQDX4KgAwQGgrkAAwQC
uXdcAwQF1E2gAwQD2UoAMA0EAgACMAcDBQMgARbgMA0GCSqGSIb3DQEBCwUAA4IB
AQCn6i+CUk+hMwhk10NiwMUnPnQr8SuvQCxHVK8QQohaGD/bxnLPK//AK4cxhLgm
H+YMo5CoqbIlOYTYsVyyc2ui3/I9Oqo47AwOYtQcW1A41ZjZXM3/EdzWsi8Ii3vf
40rNFa5Lx7stBOIqkltm/3l528Mj8Byz5mbUjeYU58b9yPOVG1CoGAVXzxd/S4qb
LtZepd68cclOxDnG3S0DntpMfq+ZJm2n1Z+KdCAG5mAm4mu0NJyYbl5FWm10vErm
F9amoh9s05zwedN8acCiXvnYKFe8mAmF9aBsEpXqKzjhyRBVGES1hc3Rj/3XmpSg
TUKbhCrBKRTnjiX0J5LMIjGd
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:14 2025 by rpki-client on console.sobornost.net