Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/63salWhc3QRvjl4PRdN20jEnN1g.roa
File: 63salWhc3QRvjl4PRdN20jEnN1g.roa (raw, json)
Hash identifier: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=
Subject key identifier: EB:7B:1A:95:68:5C:DD:04:6F:8E:5E:0F:45:D3:76:D2:31:27:37:58
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 019420680E36590326D4C2CE21A87A41C17D
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/63salWhc3QRvjl4PRdN20jEnN1g.roa
Signing time: Wed 01 Jan 2025 05:47:57 +0000
ROA not before: Wed 01 Jan 2025 05:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31518
IP address blocks: 185.255.188.0/22 maxlen: 22
194.113.141.0/24 maxlen: 24
2001:67c:4a0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0e:36:59:03:26:d4:c2:ce:21:a8:7a:41:c1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb7b1a95685cdd046f8e5e0f45d376d231273758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d2:0c:c3:94:d9:28:79:75:49:67:d6:d5:94:
19:01:b7:2c:c0:d6:a6:e1:7e:71:ab:cf:45:c4:c0:
c4:3e:ad:fd:2e:16:97:af:4a:ee:ea:e9:83:f0:be:
39:3d:ad:98:4d:0c:9d:4a:44:1f:90:ec:b4:78:20:
bf:dd:c8:f7:08:e9:66:e8:d3:ca:a2:0a:37:35:da:
18:4c:0d:e0:46:c6:5f:fd:54:2f:31:08:c5:f0:e7:
21:ab:ee:9c:7c:14:3d:60:84:61:8a:35:7c:2c:77:
ec:3b:94:b5:28:10:d8:c7:2f:ce:14:d4:d7:4f:b5:
86:33:56:a2:43:7f:62:c9:52:73:30:43:36:32:e3:
7b:0b:8d:f9:15:f8:02:da:bb:fc:61:33:a2:00:1e:
0f:7a:38:cf:66:bd:2d:a2:ce:28:da:67:df:ca:18:
c7:6b:33:90:1a:0d:05:47:91:c7:2a:e8:82:c9:73:
3f:95:86:1d:18:ea:f3:9b:94:7a:d3:79:41:d5:a0:
f9:84:f7:82:1a:f6:88:d5:62:d0:bf:fc:6d:e0:ad:
19:ad:ac:84:de:5f:59:71:e4:04:fe:e7:0c:e2:ce:
ee:22:a5:59:52:83:ba:57:b8:4c:71:74:d9:7f:5f:
8c:22:03:eb:62:1d:ad:bd:5f:52:59:a7:db:be:5c:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:1A:95:68:5C:DD:04:6F:8E:5E:0F:45:D3:76:D2:31:27:37:58
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/63salWhc3QRvjl4PRdN20jEnN1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.188.0/22
194.113.141.0/24
IPv6:
2001:67c:4a0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:c5:21:97:91:a8:a1:95:17:40:d0:77:98:96:8a:93:f9:56:
fb:96:c0:12:43:60:73:ab:ec:4f:f1:1c:c3:be:cf:ab:77:4f:
08:34:07:a3:4e:b3:0d:2a:2d:ec:e2:c2:a4:f1:2f:74:1e:ed:
3f:14:fb:80:cb:70:41:b2:7d:fb:8d:57:a3:08:c9:06:97:4f:
37:40:2e:f2:a7:5a:87:53:a2:e0:29:0d:f0:04:51:25:3a:14:
6a:91:3a:43:a1:55:07:0b:08:5e:35:d1:06:d8:99:e7:9e:d2:
70:31:34:10:ab:64:f9:ae:f3:23:f9:09:6f:63:51:14:79:f0:
16:2c:0c:02:cf:28:d3:7c:99:d8:24:71:23:ea:3b:c6:4f:66:
bb:e4:2b:98:4e:46:b8:0d:20:32:6c:a8:89:60:e6:36:11:6b:
3c:e2:49:25:99:71:3b:89:a8:0b:6f:b9:87:30:af:b5:ba:33:
a7:81:f2:c0:70:a9:af:e9:98:9e:a2:65:55:6f:72:cf:03:f6:
d5:2e:9d:4e:9c:09:f9:b1:d8:d8:8b:04:67:04:82:ed:9e:67:
e8:5a:17:71:f5:4b:47:ef:92:20:63:af:55:3f:e0:4d:a1:8a:
7c:7b:4b:ff:5c:d5:c7:37:5d:d1:86:e7:14:7e:bd:fb:80:59:
ec:2d:b8:15
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQgaA42WQMm1MLOIah6QcF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjYzMzYyZmVkZWUxYzg5MTM1ZDU0MzRkMzdiNzM3NWVk
NWExMDgwHhcNMjUwMTAxMDU0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjdiMWE5NTY4NWNkZDA0NmY4ZTVlMGY0NWQzNzZkMjMxMjczNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NIMw5TZKHl1SWfW1ZQZAbcswNam
4X5xq89FxMDEPq39LhaXr0ru6umD8L45Pa2YTQydSkQfkOy0eCC/3cj3COlm6NPK
ogo3NdoYTA3gRsZf/VQvMQjF8Ochq+6cfBQ9YIRhijV8LHfsO5S1KBDYxy/OFNTX
T7WGM1aiQ39iyVJzMEM2MuN7C435FfgC2rv8YTOiAB4PejjPZr0tos4o2mffyhjH
azOQGg0FR5HHKuiCyXM/lYYdGOrzm5R603lB1aD5hPeCGvaI1WLQv/xt4K0ZrayE
3l9ZceQE/ucM4s7uIqVZUoO6V7hMcXTZf1+MIgPrYh2tvV9SWafbvlxc/wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFOt7GpVoXN0Eb45eD0XTdtIxJzdYMB8GA1UdIwQY
MBaAFFv2M2L+3uHIkTXVQ003tzde1aEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy83NzA5ZTctODM3Mi00ODI0LWE4MWMt
NmFkMGI2OWIyMDhmLzEvNjNzYWxXaGMzUVJ2amw0UFJkTjIwakVuTjFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy83NzA5ZTctODM3Mi00ODI0LWE4MWMtNmFkMGI2OWIyMDhm
LzEvV19Zell2N2U0Y2lSTmRWRFRUZTNOMTdWb1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuf+8AwQA
wnGNMA8EAgACMAkDBwAgAQZ8BKAwDQYJKoZIhvcNAQELBQADggEBAKHFIZeRqKGV
F0DQd5iWipP5VvuWwBJDYHOr7E/xHMO+z6t3Twg0B6NOsw0qLeziwqTxL3Qe7T8U
+4DLcEGyffuNV6MIyQaXTzdALvKnWodTouApDfAEUSU6FGqROkOhVQcLCF410QbY
meee0nAxNBCrZPmu8yP5CW9jURR58BYsDALPKNN8mdgkcSPqO8ZPZrvkK5hORrgN
IDJsqIlg5jYRazziSSWZcTuJqAtvuYcwr7W6M6eB8sBwqa/pmJ6iZVVvcs8D9tUu
nU6cCfmx2NiLBGcEgu2eZ+haF3H1S0fvkiBjr1U/4E2hinx7S/9c1cc3XdGG5xR+
vfuAWewtuBU=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:44 2025 by rpki-client