Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/w8Zg_9bpu3k3bTP0LD4fh0zlAZc.roa
File: w8Zg_9bpu3k3bTP0LD4fh0zlAZc.roa (raw, json)
Hash identifier: h6YBJ81hgjvQCYW3OilDa/1GanYTk2v9d7DR3CoIKE4=
Subject key identifier: C3:C6:60:FF:D6:E9:BB:79:37:6D:33:F4:2C:3E:1F:87:4C:E5:01:97
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0194282397EFE33030C60455E47ABEDA675C
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/w8Zg_9bpu3k3bTP0LD4fh0zlAZc.roa
Signing time: Thu 02 Jan 2025 17:50:08 +0000
ROA not before: Thu 02 Jan 2025 17:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 45.11.188.0/24 maxlen: 24
194.15.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:97:ef:e3:30:30:c6:04:55:e4:7a:be:da:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 2 17:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3c660ffd6e9bb79376d33f42c3e1f874ce50197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:bc:7f:b5:8e:0c:83:88:08:06:5d:f1:ef:
85:d7:5d:3d:06:90:f5:69:8d:ae:45:b2:37:eb:18:
3d:19:1c:81:5b:03:11:b0:38:a8:ff:5d:14:88:22:
fc:0a:ae:09:f9:dc:14:30:45:66:1b:07:5d:6b:69:
b8:62:7d:33:b3:02:7f:4c:a1:ab:3c:74:90:48:4f:
51:5a:05:59:ad:37:b7:ef:3a:1e:d3:e4:44:cd:23:
cb:d1:26:37:a0:55:a0:9e:44:7c:a7:fd:47:45:d5:
a7:d9:26:1b:a2:12:ee:af:b6:2f:c1:c3:78:c6:30:
f7:1a:e3:2c:c2:df:47:6c:8c:18:40:a4:cc:b3:e8:
ed:bd:02:81:f6:50:e1:7b:b5:98:27:6b:a8:e8:ce:
a0:10:f6:b6:1d:55:12:c4:d7:09:6b:18:b2:5d:d4:
c0:f7:25:a1:61:96:54:17:cb:60:3e:0b:53:55:ba:
9e:7e:23:b8:b8:94:2e:5c:73:08:e2:e0:bf:97:11:
c9:d9:fc:94:f4:35:2b:32:6b:c5:af:34:bd:92:f5:
74:3f:17:b7:4d:60:4c:8c:f5:9b:9e:ee:a4:8b:75:
e6:30:55:85:09:09:40:fe:dd:b3:8c:b3:a2:03:5a:
77:af:66:c6:a5:cf:18:38:3a:fb:57:6a:68:46:ca:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:60:FF:D6:E9:BB:79:37:6D:33:F4:2C:3E:1F:87:4C:E5:01:97
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/w8Zg_9bpu3k3bTP0LD4fh0zlAZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
194.15.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ed:1c:39:4c:83:cd:ee:40:d0:e1:cc:5e:28:83:91:fe:04:
6d:df:dd:b8:5b:51:c1:f1:e3:a6:b2:84:bd:7c:d4:76:cb:0f:
25:cd:12:29:94:c3:af:4f:a0:40:40:39:60:b9:f1:de:64:37:
90:19:6c:bb:7b:95:15:22:cd:77:39:5c:1d:67:86:b8:44:59:
55:81:9c:94:0d:3b:97:00:48:c9:4a:38:9d:4f:e2:3b:b8:c5:
d6:9e:30:ea:60:0f:b7:d4:fa:65:48:68:a2:5b:01:24:76:ba:
ee:fa:be:82:d5:93:f0:70:df:30:5f:67:55:ef:85:32:54:bc:
b0:61:95:9e:24:b2:1e:ab:12:f3:4c:7d:59:db:3a:25:e6:9f:
cd:64:3d:9a:fc:a9:cf:e2:e6:47:bd:05:e5:17:58:f5:ec:76:
0e:24:14:4d:a3:96:af:6e:06:fd:bb:5a:ae:e9:5f:c1:c1:2f:
71:4d:76:ab:bf:36:34:44:8f:33:d3:f6:1a:3d:67:1d:1a:ad:
37:b8:ce:5a:c8:98:a2:5d:2b:0d:47:2c:b8:cb:7d:9e:8a:36:
1e:c2:c0:8b:5a:cd:1e:14:f7:ce:42:8e:dc:42:35:4a:ac:74:
0d:8c:62:49:dc:dc:1d:cf:de:d8:bb:2b:7b:e2:4c:36:27:b7:
e2:95:79:f0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoI5fv4zAwxgRV5Hq+2mdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjUwMTAyMTc1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2M2NjBmZmQ2ZTliYjc5Mzc2ZDMzZjQyYzNlMWY4NzRjZTUwMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDu8f7WODIOICAZd8e+F1109BpD1
aY2uRbI36xg9GRyBWwMRsDio/10UiCL8Cq4J+dwUMEVmGwdda2m4Yn0zswJ/TKGr
PHSQSE9RWgVZrTe37zoe0+REzSPL0SY3oFWgnkR8p/1HRdWn2SYbohLur7YvwcN4
xjD3GuMswt9HbIwYQKTMs+jtvQKB9lDhe7WYJ2uo6M6gEPa2HVUSxNcJaxiyXdTA
9yWhYZZUF8tgPgtTVbqefiO4uJQuXHMI4uC/lxHJ2fyU9DUrMmvFrzS9kvV0Pxe3
TWBMjPWbnu6ki3XmMFWFCQlA/t2zjLOiA1p3r2bGpc8YODr7V2poRspWewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMPGYP/W6bt5N20z9Cw+H4dM5QGXMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvdzhaZ185YnB1M2szYlRQMExENGZoMHpsQVpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQu8AwQA
wg9jMA0GCSqGSIb3DQEBCwUAA4IBAQBa7Rw5TIPN7kDQ4cxeKIOR/gRt3924W1HB
8eOmsoS9fNR2yw8lzRIplMOvT6BAQDlgufHeZDeQGWy7e5UVIs13OVwdZ4a4RFlV
gZyUDTuXAEjJSjidT+I7uMXWnjDqYA+31PplSGiiWwEkdrru+r6C1ZPwcN8wX2dV
74UyVLywYZWeJLIeqxLzTH1Z2zol5p/NZD2a/KnP4uZHvQXlF1j17HYOJBRNo5av
bgb9u1qu6V/BwS9xTXarvzY0RI8z0/YaPWcdGq03uM5ayJiiXSsNRyy4y32eijYe
wsCLWs0eFPfOQo7cQjVKrHQNjGJJ3Nwdz97Yuyt74kw2J7filXnw
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:33:49 2025 by rpki-client