Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/wZjXikEIugXeWt8a9NSloyaVK4Y.roa
File: wZjXikEIugXeWt8a9NSloyaVK4Y.roa (raw, json)
Hash identifier: ksS5A4AJINWF8VxJhLJ0KkSWEB0eZDK2C5eBKt9Qigs=
Subject key identifier: C1:98:D7:8A:41:08:BA:05:DE:5A:DF:1A:F4:D4:A5:A3:26:95:2B:86
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 019426D8DAE0356420E8C958A198A39213BC
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/wZjXikEIugXeWt8a9NSloyaVK4Y.roa
Signing time: Thu 02 Jan 2025 11:48:53 +0000
ROA not before: Thu 02 Jan 2025 11:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211619
IP address blocks: 45.95.168.0/22 maxlen: 22
150.40.96.0/19 maxlen: 19
203.31.217.0/24 maxlen: 24
2a0e:bfc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:da:e0:35:64:20:e8:c9:58:a1:98:a3:92:13:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Jan 2 11:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c198d78a4108ba05de5adf1af4d4a5a326952b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:95:14:e2:1d:ff:62:92:7f:9f:48:f6:37:
0e:27:9c:c6:ee:bd:5c:6d:fa:72:04:8f:48:d4:62:
84:b9:c3:ba:f0:78:5d:64:c9:2c:10:e2:50:9a:fc:
9a:c3:b7:82:07:dc:b2:58:c6:7a:61:22:10:3c:20:
64:86:99:05:63:ac:7b:be:4b:06:f9:f0:59:36:68:
d4:7a:15:90:5e:02:e6:ff:53:65:7b:e5:2a:7d:17:
9e:a7:c3:38:bd:ad:d1:33:20:ce:7e:96:f7:a9:9d:
f2:51:6d:85:d8:e0:60:9b:2f:d0:52:ff:f9:3f:0a:
c6:60:88:8f:b1:a3:20:e8:58:c9:27:f8:39:80:8b:
3b:64:94:45:90:79:66:42:36:09:7c:72:f6:40:e6:
11:12:b8:29:ed:23:75:97:5e:9b:6d:84:33:3b:db:
cd:75:a1:f0:15:0b:3e:54:05:94:da:69:79:d1:2d:
36:9f:3e:e8:0a:d8:68:15:da:60:c4:8e:06:7e:de:
64:d5:8c:07:9a:10:21:7f:39:94:44:a6:84:21:eb:
be:5a:4d:94:8b:a5:1d:02:9d:e9:bc:cb:19:4d:96:
be:2a:da:34:da:76:b7:50:38:00:0d:1f:a1:09:b8:
13:6f:b4:ed:9e:8d:09:4d:26:e0:dd:f8:1c:b8:9b:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:98:D7:8A:41:08:BA:05:DE:5A:DF:1A:F4:D4:A5:A3:26:95:2B:86
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/wZjXikEIugXeWt8a9NSloyaVK4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.168.0/22
150.40.96.0/19
203.31.217.0/24
IPv6:
2a0e:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:a9:3d:25:bd:a4:f0:0b:f4:33:2b:b4:2a:ff:d1:d1:16:3e:
bb:e3:c7:bd:bf:0c:14:2c:25:b6:35:51:a1:82:f5:80:b1:23:
f8:fd:77:4f:61:e5:42:6e:c7:2b:37:0e:a0:d8:92:ea:09:17:
aa:22:53:64:9c:ce:33:eb:47:e1:6e:f6:45:0e:91:90:24:5c:
de:b3:18:dd:e8:50:70:f5:e1:78:83:48:9f:d4:05:0d:da:50:
24:14:98:64:33:b7:4c:20:fb:1b:9f:4e:a2:ab:66:3c:4b:ad:
6e:66:a7:79:6f:91:a2:db:0c:c0:a4:4a:ca:4b:f4:62:cf:29:
42:91:e0:d1:4f:6e:4c:20:db:0d:da:4b:37:70:70:9e:9a:a3:
22:f7:8a:8e:c9:f9:23:3f:fc:17:e3:7b:9c:f7:e9:f6:e6:d0:
a7:72:3b:76:f7:de:f3:20:7d:f2:3e:7a:07:38:65:54:a3:70:
6c:4d:d9:db:54:67:0e:a6:72:8f:79:14:98:b0:ac:68:64:62:
6d:ec:de:6f:ef:40:4b:68:36:64:b1:00:5d:30:9c:f1:71:77:
a0:55:9d:6f:ae:f6:5a:cc:a7:8a:62:3d:43:ab:e2:81:e5:1b:
74:44:08:08:84:e6:57:a5:0e:ec:fe:20:43:9d:d7:09:8e:2b:
f8:30:c0:f8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQm2NrgNWQg6MlYoZijkhO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh
NDYzZDQwHhcNMjUwMTAyMTE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTk4ZDc4YTQxMDhiYTA1ZGU1YWRmMWFmNGQ0YTVhMzI2OTUyYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxSVFOId/2KSf59I9jcOJ5zG7r1c
bfpyBI9I1GKEucO68HhdZMksEOJQmvyaw7eCB9yyWMZ6YSIQPCBkhpkFY6x7vksG
+fBZNmjUehWQXgLm/1Nle+UqfReep8M4va3RMyDOfpb3qZ3yUW2F2OBgmy/QUv/5
PwrGYIiPsaMg6FjJJ/g5gIs7ZJRFkHlmQjYJfHL2QOYRErgp7SN1l16bbYQzO9vN
daHwFQs+VAWU2ml50S02nz7oCthoFdpgxI4Gft5k1YwHmhAhfzmURKaEIeu+Wk2U
i6UdAp3pvMsZTZa+Kto02na3UDgADR+hCbgTb7Ttno0JTSbg3fgcuJsnKQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMGY14pBCLoF3lrfGvTUpaMmlSuGMB8GA1UdIwQY
MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt
N2QxMzQ5ODBjNWJlLzEvd1pqWGlrRUl1Z1hlV3Q4YTlOU2xveWFWSzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl
LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLV+oAwQF
lihgAwQAyx/ZMA0EAgACMAcDBQMqDr/AMA0GCSqGSIb3DQEBCwUAA4IBAQBvqT0l
vaTwC/QzK7Qq/9HRFj6748e9vwwULCW2NVGhgvWAsSP4/XdPYeVCbscrNw6g2JLq
CReqIlNknM4z60fhbvZFDpGQJFzesxjd6FBw9eF4g0if1AUN2lAkFJhkM7dMIPsb
n06iq2Y8S61uZqd5b5Gi2wzApErKS/RizylCkeDRT25MINsN2ks3cHCemqMi94qO
yfkjP/wX43uc9+n25tCncjt2997zIH3yPnoHOGVUo3BsTdnbVGcOpnKPeRSYsKxo
ZGJt7N5v70BLaDZksQBdMJzxcXegVZ1vrvZazKeKYj1Dq+KB5Rt0RAgIhOZXpQ7s
/iBDndcJjiv4MMD4
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:18:21 2025 by rpki-client