Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/WIJApdkXlbEUeEO2cKb4qiLS28o.roa
File: WIJApdkXlbEUeEO2cKb4qiLS28o.roa (raw, json)
Hash identifier: 1qyiMGZ/E0ICeDVPfHZdxWe+RTO7sCD7GgXGyaWl1c0=
Subject key identifier: 58:82:40:A5:D9:17:95:B1:14:78:43:B6:70:A6:F8:AA:22:D2:DB:CA
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 019425214C2F7F6E4D307765E10EEE985B00
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/WIJApdkXlbEUeEO2cKb4qiLS28o.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8695
IP address blocks: 185.1.39.0/24 maxlen: 24
2001:7f8:80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4c:2f:7f:6e:4d:30:77:65:e1:0e:ee:98:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=588240a5d91795b1147843b670a6f8aa22d2dbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:2f:ec:32:c1:ae:1e:bd:9e:04:25:8e:99:
39:3c:6e:19:e1:42:e0:e2:8d:bb:fa:3b:4c:88:d2:
e5:55:f1:39:da:34:83:bd:b1:8e:6f:9c:42:6b:58:
4d:b1:9b:7a:ed:99:6d:a3:92:51:31:9e:60:dc:7f:
a0:f8:7d:a6:cd:96:e5:34:bf:cb:bb:f2:5e:42:f9:
6f:32:59:3b:58:69:01:d9:29:ba:26:c1:1e:c1:17:
ad:47:b8:a8:8c:95:1a:91:ff:99:a9:ed:ca:fb:1d:
2f:8b:a4:30:47:d9:38:bd:ed:2d:9c:0d:e8:ec:e6:
ce:fb:ce:24:5a:aa:1c:8a:37:c2:6e:01:5c:49:eb:
60:ab:df:b7:3b:5b:68:2e:83:1a:1f:25:db:b9:95:
2f:45:a1:30:e7:da:b2:ef:bb:98:de:f8:cc:d9:b6:
81:59:46:6b:dd:76:35:1f:ee:36:d8:68:38:d7:49:
5f:78:96:02:28:40:09:85:2d:9a:73:76:b0:fd:e5:
64:a6:19:41:59:37:9a:14:86:56:2a:77:1a:5c:a2:
d4:48:88:0d:b0:ec:3e:4e:e7:16:cb:85:52:9b:ba:
ed:a6:a8:95:f8:09:82:4f:73:a5:25:e7:81:36:81:
60:60:5e:91:bc:e0:7c:34:4e:57:fc:16:16:d1:e0:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:82:40:A5:D9:17:95:B1:14:78:43:B6:70:A6:F8:AA:22:D2:DB:CA
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/WIJApdkXlbEUeEO2cKb4qiLS28o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.39.0/24
IPv6:
2001:7f8:80::/48
Signature Algorithm: sha256WithRSAEncryption
11:76:ec:4d:66:39:eb:6e:ab:c5:49:57:d5:96:f9:36:1e:a8:
65:41:a9:c8:2c:53:75:de:1c:b1:58:80:0c:1a:d4:96:96:ed:
63:6f:fa:56:23:64:1b:c9:72:2b:e1:f7:c9:50:08:c2:c5:43:
79:75:b1:a7:cb:72:67:51:7b:74:5e:c7:cc:a0:14:b1:e0:e0:
39:9f:bd:a9:97:a6:e1:1d:c6:c9:ba:ea:90:5d:4b:16:b0:a1:
53:da:24:25:36:00:02:50:a0:33:85:92:9a:2f:d5:d1:f1:27:
ce:b4:74:30:30:ef:c3:28:5a:4b:7d:5e:7c:74:09:e5:e7:38:
c3:1f:ca:79:ad:27:f5:94:78:00:68:d7:63:bf:ba:51:95:b6:
87:34:8b:d1:29:78:38:7e:34:95:98:b1:39:d7:1d:2b:cd:e4:
9c:ea:93:29:a6:ab:ef:aa:52:df:02:1e:e4:61:23:78:3e:f1:
91:dc:7d:48:46:20:73:cc:06:8c:5a:3d:56:d6:10:36:b7:1c:
f7:ef:1f:c6:1b:50:17:24:cf:ec:b5:1b:34:5b:d3:89:5c:88:
2a:8f:19:1a:79:a9:03:62:bf:c9:24:ff:7e:66:50:fc:54:a4:
af:c5:9e:f7:3b:62:16:86:cd:3c:12:09:6f:5f:47:13:89:41:
2a:50:3f:0a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQlIUwvf25NMHdl4Q7umFsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OWY0ZWQ2NjIwYzg5NjA1MjFmYmI4MWZmNzJlODM3ZGMw
MDM4YWYwHhcNMjUwMTAyMDM0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODgyNDBhNWQ5MTc5NWIxMTQ3ODQzYjY3MGE2ZjhhYTIyZDJkYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qsv7DLBrh69ngQljpk5PG4Z4ULg
4o27+jtMiNLlVfE52jSDvbGOb5xCa1hNsZt67Zlto5JRMZ5g3H+g+H2mzZblNL/L
u/JeQvlvMlk7WGkB2Sm6JsEewRetR7iojJUakf+Zqe3K+x0vi6QwR9k4ve0tnA3o
7ObO+84kWqocijfCbgFcSetgq9+3O1toLoMaHyXbuZUvRaEw59qy77uY3vjM2baB
WUZr3XY1H+422Gg410lfeJYCKEAJhS2ac3aw/eVkphlBWTeaFIZWKncaXKLUSIgN
sOw+TucWy4VSm7rtpqiV+AmCT3OlJeeBNoFgYF6RvOB8NE5X/BYW0eA/dQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFiCQKXZF5WxFHhDtnCm+Koi0tvKMB8GA1UdIwQY
MBaAFBafTtZiDIlgUh+7gf9y6DfcADivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnA5TzFtSU1pV0JTSDd1Ql8zTG9OOXdBT0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iYzZkMWUtMDE0Ni00YTM1LThlOWIt
Y2Y1ZmIwNDI1NjZhLzEvV0lKQXBka1hsYkVVZUVPMmNLYjRxaUxTMjhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9iYzZkMWUtMDE0Ni00YTM1LThlOWItY2Y1ZmIwNDI1NjZh
LzEvRnA5TzFtSU1pV0JTSDd1Ql8zTG9OOXdBT0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQEnMA8E
AgACMAkDBwAgAQf4AIAwDQYJKoZIhvcNAQELBQADggEBABF27E1mOetuq8VJV9WW
+TYeqGVBqcgsU3XeHLFYgAwa1JaW7WNv+lYjZBvJcivh98lQCMLFQ3l1safLcmdR
e3Rex8ygFLHg4DmfvamXpuEdxsm66pBdSxawoVPaJCU2AAJQoDOFkpov1dHxJ860
dDAw78MoWkt9Xnx0CeXnOMMfynmtJ/WUeABo12O/ulGVtoc0i9EpeDh+NJWYsTnX
HSvN5Jzqkymmq++qUt8CHuRhI3g+8ZHcfUhGIHPMBoxaPVbWEDa3HPfvH8YbUBck
z+y1GzRb04lciCqPGRp5qQNiv8kk/35mUPxUpK/Fnvc7YhaGzTwSCW9fRxOJQSpQ
Pwo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:09:39 2025 by rpki-client