Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/WalhO7K1hj39eQFX6Fsg65lsYZc.roa
File: WalhO7K1hj39eQFX6Fsg65lsYZc.roa (raw, json)
Hash identifier: TPuLRQcIjhduyALRmIncbUOw8bhZHm8cVLFCDxTFRgw=
Subject key identifier: 59:A9:61:3B:B2:B5:86:3D:FD:79:01:57:E8:5B:20:EB:99:6C:61:97
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 01941F8C841A46730C0028A46305B8DD5457
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/WalhO7K1hj39eQFX6Fsg65lsYZc.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21500
IP address blocks: 195.123.177.0/24 maxlen: 24
195.123.184.0/24 maxlen: 24
195.123.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:84:1a:46:73:0c:00:28:a4:63:05:b8:dd:54:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59a9613bb2b5863dfd790157e85b20eb996c6197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:16:63:a6:2f:88:3a:8d:c6:8f:86:ad:0e:
10:53:73:fa:0a:b2:1b:08:e0:ea:18:af:85:5c:9a:
82:0f:b7:3f:5b:34:c4:8b:6a:05:bb:fe:51:e3:3b:
ec:a7:9c:14:10:25:02:2b:26:14:8e:dc:f5:20:2e:
3c:05:f8:0c:4e:6c:be:22:73:c7:62:a1:89:bd:bc:
4d:ce:c3:db:9f:32:dc:99:76:8b:36:3a:79:c1:a4:
4f:da:19:fe:84:cd:d9:20:a7:18:0a:c4:b3:6b:90:
cf:f7:b0:d8:aa:03:fc:30:d3:a6:35:0a:98:e2:b6:
ca:3a:a7:70:4e:6f:7d:75:b7:e4:7b:3e:53:a0:9a:
04:4a:42:9c:9e:fa:f7:a6:b2:f3:b7:1d:f3:39:0b:
ce:f6:c0:59:f7:48:26:f4:95:1a:c4:22:ec:70:7f:
7a:57:38:7c:ca:8c:c1:7b:cb:44:02:aa:2e:0c:fb:
5c:f4:71:d9:78:43:01:a3:e0:48:ca:71:29:b9:ba:
0d:e1:68:24:15:3f:d7:5a:89:66:36:a5:24:76:87:
7f:2f:e5:0b:13:ef:18:9e:93:a3:5b:e7:39:93:cf:
85:9f:bb:61:df:6a:79:95:b2:cf:e3:a5:98:96:84:
0c:07:6b:a8:31:dd:e7:f2:7f:ab:1e:73:85:0d:5c:
b0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:61:3B:B2:B5:86:3D:FD:79:01:57:E8:5B:20:EB:99:6C:61:97
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/WalhO7K1hj39eQFX6Fsg65lsYZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.177.0/24
195.123.184.0/23
Signature Algorithm: sha256WithRSAEncryption
19:07:ae:33:4c:42:ca:2c:17:34:db:d9:b2:e6:d3:2a:0f:45:
af:df:ca:8e:c2:e6:b4:8b:f9:5f:52:6c:83:be:d8:24:74:35:
95:a1:58:61:ab:fb:48:40:eb:f5:48:a2:18:46:6b:d7:12:4e:
84:97:34:53:eb:53:d9:3d:02:3d:ab:b6:ee:55:9b:45:ba:a8:
13:b0:c4:15:65:fe:bb:68:1a:43:67:80:64:f0:56:1e:26:3d:
65:29:6d:28:7f:86:ec:f5:1b:5f:24:27:00:d6:87:ac:7a:be:
e4:1c:4b:53:3b:a8:fe:e2:b3:d2:d6:9d:0b:a5:00:80:ad:b5:
9b:36:69:14:29:79:a5:d0:e8:f0:a4:f3:23:4d:41:91:f9:9e:
52:c4:e7:ff:8a:7f:83:d1:6c:f6:ee:17:b2:e9:f4:4a:ae:a2:
2b:0f:c0:85:c1:b1:fd:1d:2e:22:9b:9f:2c:0a:59:a7:f9:83:
2e:45:a4:29:b3:8c:f0:df:74:4c:12:09:3e:2e:5d:fc:88:0f:
92:51:4f:2f:3a:fd:52:dd:ea:e0:44:cc:33:58:cb:19:ca:7d:
f8:a4:37:69:72:ad:d6:99:4d:12:aa:a4:b0:8f:07:b3:15:c5:
37:cb:57:76:ba:fe:9d:fe:8f:fe:04:6d:91:c0:2e:fc:6e:a9:
29:42:3d:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjIQaRnMMACikYwW43VRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDVhZGM1YzQyNjJkZmY2YjNmM2U2MDY4MzBjN2Y5NzFk
NzY2Y2UwHhcNMjUwMTAxMDE0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWE5NjEzYmIyYjU4NjNkZmQ3OTAxNTdlODViMjBlYjk5NmM2MTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1sWY6YviDqNxo+GrQ4QU3P6CrIb
CODqGK+FXJqCD7c/WzTEi2oFu/5R4zvsp5wUECUCKyYUjtz1IC48BfgMTmy+InPH
YqGJvbxNzsPbnzLcmXaLNjp5waRP2hn+hM3ZIKcYCsSza5DP97DYqgP8MNOmNQqY
4rbKOqdwTm99dbfkez5ToJoESkKcnvr3prLztx3zOQvO9sBZ90gm9JUaxCLscH96
Vzh8yozBe8tEAqouDPtc9HHZeEMBo+BIynEpuboN4WgkFT/XWolmNqUkdod/L+UL
E+8YnpOjW+c5k8+Fn7th32p5lbLP46WYloQMB2uoMd3n8n+rHnOFDVyw6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFmpYTuytYY9/XkBV+hbIOuZbGGXMB8GA1UdIwQY
MBaAFMEFrcXEJi3/az8+YGgwx/lx12bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODkt
NTE1ODQ1ZTZjMzE3LzEvV2FsaE83SzFoajM5ZVFGWDZGc2c2NWxzWVpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9jNDkxNzItZjhkYS00MTI4LTg2ODktNTE1ODQ1ZTZjMzE3
LzEvd1FXdHhjUW1MZjlyUHo1Z2FEREgtWEhYWnM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw3uxAwQB
w3u4MA0GCSqGSIb3DQEBCwUAA4IBAQAZB64zTELKLBc029my5tMqD0Wv38qOwua0
i/lfUmyDvtgkdDWVoVhhq/tIQOv1SKIYRmvXEk6ElzRT61PZPQI9q7buVZtFuqgT
sMQVZf67aBpDZ4Bk8FYeJj1lKW0of4bs9RtfJCcA1oeser7kHEtTO6j+4rPS1p0L
pQCArbWbNmkUKXml0OjwpPMjTUGR+Z5SxOf/in+D0Wz27hey6fRKrqIrD8CFwbH9
HS4im58sClmn+YMuRaQps4zw33RMEgk+Ll38iA+SUU8vOv1S3ergRMwzWMsZyn34
pDdpcq3WmU0SqqSwjwezFcU3y1d2uv6d/o/+BG2RwC78bqkpQj00
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net