Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/05We7KAwOd8ZrvHSdSmKgB3AkYs.roa
File: 05We7KAwOd8ZrvHSdSmKgB3AkYs.roa (raw, json)
Hash identifier: /6T/kf5A77qhojsVT6JQ5gSyGwEMhPcCMY7KI031bSc=
Subject key identifier: D3:95:9E:EC:A0:30:39:DF:19:AE:F1:D2:75:29:8A:80:1D:C0:91:8B
Certificate issuer: /CN=5a1a31909780e81734af6607272d18525db7657d
Certificate serial: 019425FDBAD09DA3F333444FE85D5851B03C
Authority key identifier: 5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/05We7KAwOd8ZrvHSdSmKgB3AkYs.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39730
IP address blocks: 178.250.176.0/21 maxlen: 21
185.195.132.0/22 maxlen: 22
2a0a:23c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ba:d0:9d:a3:f3:33:44:4f:e8:5d:58:51:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1a31909780e81734af6607272d18525db7657d
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3959eeca03039df19aef1d275298a801dc0918b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:2d:35:24:0a:e3:12:10:59:f7:dd:0c:42:
46:76:e8:b8:19:c8:0b:5e:90:35:2a:9c:6b:d2:dc:
c9:64:dd:82:e9:36:be:a9:f9:f5:bd:78:52:a7:62:
6b:dd:90:db:4e:b1:24:fc:3a:f5:0f:cf:0d:4d:95:
7e:9f:d3:ee:a4:86:1b:70:d8:49:39:33:d8:f2:d1:
97:cf:14:9e:30:a6:93:5d:77:3e:77:d4:21:b3:87:
36:77:64:ef:e5:fc:bc:6a:39:6b:52:8f:8f:e1:cb:
3b:2f:25:8b:22:71:08:03:85:1c:dd:ad:03:4e:1f:
23:95:bd:01:b0:20:64:43:41:71:e9:63:a9:90:2b:
23:24:c9:95:97:82:f2:06:6f:fe:c8:70:2d:57:01:
4e:b7:b0:24:c0:30:4d:e4:df:0c:c3:1d:c2:e4:fe:
2a:a5:3d:10:4e:e1:4f:63:58:f0:25:97:20:ea:9b:
40:25:12:f4:85:12:87:e0:92:79:0f:60:f4:67:67:
aa:1d:24:ca:62:26:55:f1:2b:c5:a3:d6:13:b8:0a:
f9:c0:0d:cd:fe:0e:d5:fb:93:14:08:ce:19:dd:bd:
15:72:e0:6c:81:e6:30:db:de:77:73:6d:09:f3:f3:
6f:08:af:c1:7d:0b:ba:9f:d5:33:ab:80:f7:07:f5:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:95:9E:EC:A0:30:39:DF:19:AE:F1:D2:75:29:8A:80:1D:C0:91:8B
X509v3 Authority Key Identifier:
keyid:5A:1A:31:90:97:80:E8:17:34:AF:66:07:27:2D:18:52:5D:B7:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/05We7KAwOd8ZrvHSdSmKgB3AkYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e10057-99bb-44f9-9774-2752b3759066/1/WhoxkJeA6Bc0r2YHJy0YUl23ZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.250.176.0/21
185.195.132.0/22
IPv6:
2a0a:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
8e:f9:b2:8c:2c:cc:2e:1d:a2:0c:67:b1:1a:52:80:61:21:2f:
7d:03:b8:6f:b5:91:fc:ee:9b:44:ad:4a:75:4f:24:f4:6b:a8:
43:81:4d:98:47:33:5c:e3:8a:4c:39:b6:65:4b:7d:ea:15:02:
e7:21:06:97:9e:57:7c:1d:ff:f4:f9:a4:52:80:ce:d7:6e:a0:
1e:2f:61:18:a7:d4:b9:f3:ab:cd:3c:4f:43:87:f5:2f:e9:ef:
83:bb:96:07:e7:1f:5d:52:57:08:b8:8f:01:61:37:95:7b:7e:
5e:ab:e1:b5:f9:37:b5:c8:fb:3d:f8:70:36:40:59:e0:a1:17:
fd:bf:e9:14:27:bd:7f:9d:84:16:40:17:3c:7d:0a:d7:0f:32:
1d:c7:02:52:5b:f6:13:c1:75:15:47:1b:cf:29:26:71:ed:62:
52:e0:50:a7:19:9a:72:99:0c:0b:64:84:fa:94:9c:6f:6d:02:
0d:59:ed:1f:56:5b:a4:65:d5:d9:83:c8:30:40:da:45:0e:50:
29:7e:3b:28:52:68:ec:47:84:54:7d:ad:b1:92:76:bc:c1:3b:
c3:f0:91:66:05:da:28:f9:a6:82:ed:cb:40:76:64:be:b9:87:
d1:99:f6:e4:b9:20:16:6a:3b:be:1a:1e:22:11:8f:be:6e:a1:
7d:b4:b0:33
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQl/brQnaPzM0RP6F1YUbA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWEzMTkwOTc4MGU4MTczNGFmNjYwNzI3MmQxODUyNWRi
NzY1N2QwHhcNMjUwMTAyMDc0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzk1OWVlY2EwMzAzOWRmMTlhZWYxZDI3NTI5OGE4MDFkYzA5MThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqQtNSQK4xIQWffdDEJGdui4GcgL
XpA1Kpxr0tzJZN2C6Ta+qfn1vXhSp2Jr3ZDbTrEk/Dr1D88NTZV+n9PupIYbcNhJ
OTPY8tGXzxSeMKaTXXc+d9Qhs4c2d2Tv5fy8ajlrUo+P4cs7LyWLInEIA4Uc3a0D
Th8jlb0BsCBkQ0Fx6WOpkCsjJMmVl4LyBm/+yHAtVwFOt7AkwDBN5N8Mwx3C5P4q
pT0QTuFPY1jwJZcg6ptAJRL0hRKH4JJ5D2D0Z2eqHSTKYiZV8SvFo9YTuAr5wA3N
/g7V+5MUCM4Z3b0VcuBsgeYw2953c20J8/NvCK/BfQu6n9Uzq4D3B/X9XwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNOVnuygMDnfGa7x0nUpioAdwJGLMB8GA1UdIwQY
MBaAFFoaMZCXgOgXNK9mByctGFJdt2V9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQt
Mjc1MmIzNzU5MDY2LzEvMDVXZTdLQXdPZDhacnZIU2RTbUtnQjNBa1lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9lMTAwNTctOTliYi00NGY5LTk3NzQtMjc1MmIzNzU5MDY2
LzEvV2hveGtKZUE2QmMwcjJZSEp5MFlVbDIzWlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDsvqwAwQC
ucOEMA0EAgACMAcDBQMqCiPAMA0GCSqGSIb3DQEBCwUAA4IBAQCO+bKMLMwuHaIM
Z7EaUoBhIS99A7hvtZH87ptErUp1TyT0a6hDgU2YRzNc44pMObZlS33qFQLnIQaX
nld8Hf/0+aRSgM7XbqAeL2EYp9S586vNPE9Dh/Uv6e+Du5YH5x9dUlcIuI8BYTeV
e35eq+G1+Te1yPs9+HA2QFngoRf9v+kUJ71/nYQWQBc8fQrXDzIdxwJSW/YTwXUV
RxvPKSZx7WJS4FCnGZpymQwLZIT6lJxvbQINWe0fVlukZdXZg8gwQNpFDlApfjso
UmjsR4RUfa2xkna8wTvD8JFmBdoo+aaC7ctAdmS+uYfRmfbkuSAWaju+Gh4iEY++
bqF9tLAz
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:54:05 2025 by rpki-client