Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/wdWrYhgAvtXz2L_2rHuOQnR2pys.roa
File: wdWrYhgAvtXz2L_2rHuOQnR2pys.roa (raw, json)
Hash identifier: 9W7x5fPDoemvxBWf8HTErYR3bguqLTiKRDIt4wIvQlo=
Subject key identifier: C1:D5:AB:62:18:00:BE:D5:F3:D8:BF:F6:AC:7B:8E:42:74:76:A7:2B
Certificate issuer: /CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Certificate serial: 01942445976D113B5CFC01D680F6D71054BE
Authority key identifier: 9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/wdWrYhgAvtXz2L_2rHuOQnR2pys.roa
Signing time: Wed 01 Jan 2025 23:48:47 +0000
ROA not before: Wed 01 Jan 2025 23:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15435
IP address blocks: 62.45.0.0/16 maxlen: 24
213.184.96.0/19 maxlen: 24
2001:4c38::/29 maxlen: 48
2a0f:900::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:97:6d:11:3b:5c:fc:01:d6:80:f6:d7:10:54:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de6e4272e2ce387b4cc04b143f73309d713629b
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1d5ab621800bed5f3d8bff6ac7b8e427476a72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:4c:b4:12:90:84:7e:ea:98:fe:89:29:2a:
4b:85:ac:02:c4:69:00:0b:16:9d:39:f1:27:52:af:
a4:df:3b:40:a9:4e:d2:e3:5b:96:2d:f7:01:73:e2:
2b:55:1c:8c:af:75:44:66:ac:02:5d:2c:0c:bc:14:
85:99:48:10:24:64:6e:81:26:d1:48:d2:3e:6b:31:
e0:b9:22:b0:ca:0b:19:02:d5:26:23:de:1f:86:b0:
51:08:7c:69:a9:c9:a8:bf:e8:35:3b:44:42:a8:87:
de:9d:4e:e4:1d:9b:3d:d9:ea:3e:67:44:0c:09:90:
a3:e1:83:52:57:5d:3c:7e:f3:70:9c:f3:39:a6:3e:
c1:48:43:a0:a0:ee:42:43:6b:cf:fd:0a:44:89:e1:
52:46:fb:17:15:82:be:da:87:3c:c6:bb:b8:88:e5:
c6:fd:31:c6:60:5b:ef:a2:11:af:b5:f3:7d:d2:fa:
b3:7f:f0:c8:9b:69:4d:2a:09:85:82:8c:60:f2:14:
1a:ba:8d:90:f7:5d:c2:dd:dd:08:20:33:2a:92:fa:
1d:33:7a:f9:2a:e8:ac:db:66:21:09:a2:70:ab:c9:
1f:a2:6b:33:79:16:41:4d:96:0b:e0:2a:95:45:33:
25:79:d8:18:9b:5b:5f:d2:e8:77:0f:42:da:e0:bf:
7c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D5:AB:62:18:00:BE:D5:F3:D8:BF:F6:AC:7B:8E:42:74:76:A7:2B
X509v3 Authority Key Identifier:
keyid:9D:E6:E4:27:2E:2C:E3:87:B4:CC:04:B1:43:F7:33:09:D7:13:62:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nebkJy4s44e0zASxQ_czCdcTYps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/wdWrYhgAvtXz2L_2rHuOQnR2pys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/347c9a-0197-4762-8523-7bad5bae51e4/1/nebkJy4s44e0zASxQ_czCdcTYps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.45.0.0/16
213.184.96.0/19
IPv6:
2001:4c38::/29
2a0f:900::/29
Signature Algorithm: sha256WithRSAEncryption
e7:1d:96:7f:77:60:85:33:f0:da:a4:fd:d7:0f:01:6c:ca:b7:
73:78:7b:59:05:71:3a:8b:5f:b8:1d:b8:7a:3c:60:88:dd:43:
c2:2a:6b:b2:15:7a:34:5c:b1:98:a2:78:0a:ba:03:98:a7:bf:
f6:e9:1b:fa:f4:69:c3:be:e8:a4:07:6b:7b:a2:fb:bc:c4:ce:
1d:e8:e5:f6:69:fa:af:c1:26:ac:b2:a7:bb:5c:a7:5b:04:ba:
21:62:c5:51:c9:bb:9d:37:73:e6:7f:ec:f0:c0:a9:3a:0e:1d:
86:bf:a8:dc:57:ef:db:5f:c0:1a:37:fa:d9:ff:6b:2d:14:3e:
87:51:79:79:1a:14:ab:37:e2:63:ce:65:7a:dd:9f:78:ce:55:
fd:71:b3:82:44:dd:d5:15:90:d3:ff:46:be:c1:19:d9:3f:cf:
05:d0:03:93:51:26:a5:c7:fd:d2:63:b7:ef:1f:c0:b1:07:b7:
7a:da:1b:6f:f0:62:62:83:e0:a1:38:0a:91:d3:0b:ba:df:75:
08:e9:7c:16:63:78:c9:8b:e1:c0:8d:1a:90:41:2e:11:ba:eb:
ba:c1:1b:b9:fd:52:ae:5c:e6:84:68:2c:0d:35:f4:f2:f9:58:
1d:52:1b:74:3a:be:31:71:75:da:08:c1:a5:14:82:94:8e:cc:
34:e2:9b:0f
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQkRZdtETtc/AHWgPbXEFS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTZlNDI3MmUyY2UzODdiNGNjMDRiMTQzZjczMzA5ZDcx
MzYyOWIwHhcNMjUwMTAxMjM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWQ1YWI2MjE4MDBiZWQ1ZjNkOGJmZjZhYzdiOGU0Mjc0NzZhNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOBMtBKQhH7qmP6JKSpLhawCxGkA
CxadOfEnUq+k3ztAqU7S41uWLfcBc+IrVRyMr3VEZqwCXSwMvBSFmUgQJGRugSbR
SNI+azHguSKwygsZAtUmI94fhrBRCHxpqcmov+g1O0RCqIfenU7kHZs92eo+Z0QM
CZCj4YNSV108fvNwnPM5pj7BSEOgoO5CQ2vP/QpEieFSRvsXFYK+2oc8xru4iOXG
/THGYFvvohGvtfN90vqzf/DIm2lNKgmFgoxg8hQauo2Q913C3d0IIDMqkvodM3r5
Kuis22YhCaJwq8kfomszeRZBTZYL4CqVRTMledgYm1tf0uh3D0La4L98dwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFMHVq2IYAL7V89i/9qx7jkJ0dqcrMB8GA1UdIwQY
MBaAFJ3m5CcuLOOHtMwEsUP3MwnXE2KbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zNDdjOWEtMDE5Ny00NzYyLTg1MjMt
N2JhZDViYWU1MWU0LzEvd2RXclloZ0F2dFh6MkxfMnJIdU9RblIycHlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zNDdjOWEtMDE5Ny00NzYyLTg1MjMtN2JhZDViYWU1MWU0
LzEvbmVia0p5NHM0NGUwekFTeFFfY3pDZGNUWXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTARBAIAATALAwMAPi0DBAXV
uGAwFAQCAAIwDgMFAyABTDgDBQMqDwkAMA0GCSqGSIb3DQEBCwUAA4IBAQDnHZZ/
d2CFM/DapP3XDwFsyrdzeHtZBXE6i1+4Hbh6PGCI3UPCKmuyFXo0XLGYongKugOY
p7/26Rv69GnDvuikB2t7ovu8xM4d6OX2afqvwSassqe7XKdbBLohYsVRybudN3Pm
f+zwwKk6Dh2Gv6jcV+/bX8AaN/rZ/2stFD6HUXl5GhSrN+JjzmV63Z94zlX9cbOC
RN3VFZDT/0a+wRnZP88F0AOTUSalx/3SY7fvH8CxB7d62htv8GJig+ChOAqR0wu6
33UI6XwWY3jJi+HAjRqQQS4Ruuu6wRu5/VKuXOaEaCwNNfTy+VgdUht0Or4xcXXa
CMGlFIKUjsw04psP
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:37 2025 by rpki-client