Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/Wp9UktoPWdKkje7xRO3dAUUHLis.roa
File: Wp9UktoPWdKkje7xRO3dAUUHLis.roa (raw, json)
Hash identifier: W/hkxqMU9dtSrxFn/QWm1cxk93B6iqXSpXv248dgtCU=
Subject key identifier: 5A:9F:54:92:DA:0F:59:D2:A4:8D:EE:F1:44:ED:DD:01:45:07:2E:2B
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 0188FC2448928EB9EC7BE8833F8C8EC97816
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/Wp9UktoPWdKkje7xRO3dAUUHLis.roa
Signing time: Tue 27 Jun 2023 09:16:56 +0000
ROA not before: Tue 27 Jun 2023 09:16:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41564
IP address blocks: 23.92.127.0/24 maxlen: 24
192.40.88.0/24 maxlen: 24
158.222.0.0/20 maxlen: 20
158.222.3.0/24 maxlen: 24
158.222.7.0/24 maxlen: 24
158.222.5.0/24 maxlen: 24
151.237.186.0/24 maxlen: 24
5.157.4.0/24 maxlen: 24
5.157.8.0/24 maxlen: 24
104.160.4.0/24 maxlen: 24
104.160.2.0/24 maxlen: 24
104.160.6.0/24 maxlen: 24
104.160.10.0/24 maxlen: 24
104.160.20.0/24 maxlen: 24
5.153.236.0/24 maxlen: 24
5.153.239.0/24 maxlen: 24
5.157.17.0/24 maxlen: 24
5.157.13.0/24 maxlen: 24
5.157.14.0/24 maxlen: 24
5.157.22.0/24 maxlen: 24
5.157.27.0/24 maxlen: 24
5.157.41.0/24 maxlen: 24
5.157.42.0/24 maxlen: 24
5.157.45.0/24 maxlen: 24
5.157.58.0/24 maxlen: 24
5.157.56.0/24 maxlen: 24
5.157.59.0/24 maxlen: 24
5.157.61.0/24 maxlen: 24
5.157.63.0/24 maxlen: 24
5.157.62.0/24 maxlen: 24
5.157.60.0/24 maxlen: 24
2a02:5740:3::/48 maxlen: 48
2a02:5740::/48 maxlen: 48
2a02:5740:11::/48 maxlen: 48
2a02:5740:5::/48 maxlen: 48
2a02:5740:18::/48 maxlen: 48
2a02:5740:22::/48 maxlen: 48
2a02:5740:2::/48 maxlen: 48
2a02:5740:6::/48 maxlen: 48
2a02:5740:1::/48 maxlen: 48
2a02:5740:21::/48 maxlen: 48
2a02:5740:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:24:48:92:8e:b9:ec:7b:e8:83:3f:8c:8e:c9:78:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Jun 27 09:16:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9f5492da0f59d2a48deef144eddd0145072e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:e0:e1:d6:1d:ba:04:22:2b:a8:59:fb:f2:
6b:04:65:c4:fd:d7:f2:89:62:a6:87:7e:72:55:2d:
7d:f4:ce:e0:b7:c6:c5:f5:8c:0d:31:8d:84:6d:59:
2e:9b:84:45:7d:d7:e6:bd:35:52:bc:1d:a5:82:db:
d2:f0:bf:09:bf:33:c4:48:bc:dc:52:8e:a0:c8:fa:
21:71:07:9c:3a:45:ef:c4:54:99:0d:bc:a7:bc:30:
7a:f6:9e:30:ed:7a:df:97:75:61:bf:0b:33:ce:1d:
8a:80:2b:e9:7b:11:7a:94:5e:62:19:31:a4:92:df:
23:b3:59:d8:bd:a9:35:ca:57:57:1f:6f:81:e2:69:
8e:05:c2:88:e2:61:22:e6:c7:90:19:8b:e5:31:fd:
be:4a:24:13:6a:79:9a:8f:b3:49:75:8e:1a:1b:f9:
59:f5:25:ae:e5:d5:ac:07:89:0f:69:17:8f:35:a7:
a4:4a:40:3c:f7:77:08:40:c6:ef:c2:7b:26:e1:61:
be:6f:b8:d7:01:3e:e4:0b:08:9b:85:2b:5a:e5:ab:
5b:36:88:77:54:1a:3d:97:63:96:1d:eb:4d:f3:51:
31:34:15:4e:50:db:9c:57:fb:5b:aa:81:48:c9:c0:
11:af:cd:cd:d1:6b:a0:23:90:35:0b:8c:c6:b3:7c:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:54:92:DA:0F:59:D2:A4:8D:EE:F1:44:ED:DD:01:45:07:2E:2B
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/Wp9UktoPWdKkje7xRO3dAUUHLis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.236.0/24
5.153.239.0/24
5.157.4.0/24
5.157.8.0/24
5.157.13.0-5.157.14.255
5.157.17.0/24
5.157.22.0/24
5.157.27.0/24
5.157.41.0-5.157.42.255
5.157.45.0/24
5.157.56.0/24
5.157.58.0-5.157.63.255
23.92.127.0/24
104.160.2.0/24
104.160.4.0/24
104.160.6.0/24
104.160.10.0/24
104.160.20.0/24
151.237.186.0/24
158.222.0.0/20
192.40.88.0/24
IPv6:
2a02:5740::-2a02:5740:6:ffff:ffff:ffff:ffff:ffff
2a02:5740:11::/48
2a02:5740:18::/48
2a02:5740:21::-2a02:5740:22:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2b:07:82:95:3f:b3:5e:74:06:6e:6b:95:58:3c:25:74:d1:07:
e8:00:b5:c1:1f:b8:a2:40:17:e9:85:9f:fc:f3:e2:71:03:8a:
79:44:f4:68:d8:0e:07:0d:ef:71:d9:89:cf:74:34:dc:44:56:
9d:1f:94:98:58:33:49:e2:cf:41:ea:e5:cb:96:01:4a:0f:c5:
83:07:74:26:c8:5b:a2:ff:df:9f:4d:00:2c:56:0a:d4:31:f1:
7b:9b:41:cf:ee:2e:61:4e:9e:c7:b0:d0:7b:5e:30:d5:29:37:
aa:c0:39:b0:d0:f3:c5:36:88:93:d7:42:57:a4:9a:b4:75:de:
46:8a:79:1e:de:7a:0a:5e:37:b6:6a:75:71:0e:28:58:9d:4c:
74:d5:c9:ac:04:79:2e:b5:4c:aa:68:7f:d3:bc:3b:1e:f5:5b:
b9:81:db:a1:e9:2c:f5:1e:5e:15:15:de:54:76:dc:1e:32:ea:
d6:64:0a:db:03:8d:f3:08:f3:f9:ac:f8:be:21:a9:0f:1c:27:
bf:f8:a5:56:93:6b:be:db:f7:b4:f8:59:ce:1d:69:73:2b:54:
c6:8c:8b:bb:a3:e7:a7:73:48:a1:4d:18:72:9c:6c:fe:f9:31:
f9:90:26:d3:5b:08:e1:f2:b7:65:8f:2a:24:f8:45:e4:54:93:
bd:87:3a:ed
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgISAYj8JEiSjrnse+iDP4yOyXgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZjM3NmRmNWY5ZWY0ODdjODJiMzFhODc1YzZhNDk2ZDc5
Y2EwZDcwHhcNMjMwNjI3MDkxNjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTlmNTQ5MmRhMGY1OWQyYTQ4ZGVlZjE0NGVkZGQwMTQ1MDcyZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKng4dYdugQiK6hZ+/JrBGXE/dfy
iWKmh35yVS199M7gt8bF9YwNMY2EbVkum4RFfdfmvTVSvB2lgtvS8L8JvzPESLzc
Uo6gyPohcQecOkXvxFSZDbynvDB69p4w7Xrfl3Vhvwszzh2KgCvpexF6lF5iGTGk
kt8js1nYvak1yldXH2+B4mmOBcKI4mEi5seQGYvlMf2+SiQTanmaj7NJdY4aG/lZ
9SWu5dWsB4kPaRePNaekSkA893cIQMbvwnsm4WG+b7jXAT7kCwibhSta5atbNoh3
VBo9l2OWHetN81ExNBVOUNucV/tbqoFIycARr83N0WugI5A1C4zGs3wnrQIDAQAB
o4IC3jCCAtowHQYDVR0OBBYEFFqfVJLaD1nSpI3u8UTt3QFFBy4rMB8GA1UdIwQY
MBaAFIDzdt9fnvSHyCsxqHXGpJbXnKDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMt
YTRiYzI4MTY2NDNhLzEvV3A5VWt0b1BXZEtramU3eFJPM2RBVVVITGlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi83OTVkZWQtZmNkZi00N2NmLWFmODMtYTRiYzI4MTY2NDNh
LzEvZ1BOMjMxLWU5SWZJS3pHb2RjYWtsdGVjb05jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCBnQQCAAEwgZYDBAAF
mewDBAAFme8DBAAFnQQDBAAFnQgwDAMEAAWdDQMEAAWdDgMEAAWdEQMEAAWdFgME
AAWdGzAMAwQABZ0pAwQABZ0qAwQABZ0tAwQABZ04MAwDBAEFnToDBAYFnQADBAAX
XH8DBABooAIDBABooAQDBABooAYDBABooAoDBABooBQDBACX7boDBASe3gADBADA
KFgwPgQCAAIwODAQAwUGKgJXQAMHACoCV0AABgMHACoCV0AAEQMHACoCV0AAGDAS
AwcAKgJXQAAhAwcAKgJXQAAiMA0GCSqGSIb3DQEBCwUAA4IBAQArB4KVP7NedAZu
a5VYPCV00QfoALXBH7iiQBfphZ/88+JxA4p5RPRo2A4HDe9x2YnPdDTcRFadH5SY
WDNJ4s9B6uXLlgFKD8WDB3QmyFui/9+fTQAsVgrUMfF7m0HP7i5hTp7HsNB7XjDV
KTeqwDmw0PPFNoiT10JXpJq0dd5Ginke3noKXje2anVxDihYnUx01cmsBHkutUyq
aH/TvDse9Vu5gduh6Sz1Hl4VFd5UdtweMurWZArbA43zCPP5rPi+IakPHCe/+KVW
k2u+2/e0+FnOHWlzK1TGjIu7o+enc0ihTRhynGz++TH5kCbTWwjh8rdljyok+EXk
VJO9hzrt
-----END CERTIFICATE-----
Generated at Wed Apr 30 04:07:44 2025 by rpki-client