Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/w6mGOoQojvsniraRaXbmULybcGI.roa
File: w6mGOoQojvsniraRaXbmULybcGI.roa (raw, json)
Hash identifier: B97PlEkHFSrbbeh8kF35iPBYF9gN3/nGhskxyVYBiU8=
Subject key identifier: C3:A9:86:3A:84:28:8E:FB:27:8A:B6:91:69:76:E6:50:BC:9B:70:62
Certificate issuer: /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial: 0194266B2B0A56FE05353240A1089BE182AA
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/w6mGOoQojvsniraRaXbmULybcGI.roa
Signing time: Thu 02 Jan 2025 09:49:05 +0000
ROA not before: Thu 02 Jan 2025 09:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16210
IP address blocks: 217.18.96.0/19 maxlen: 20
217.18.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2b:0a:56:fe:05:35:32:40:a1:08:9b:e1:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a9863a84288efb278ab6916976e650bc9b7062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0b:2a:1a:1d:40:eb:48:f0:f4:71:22:c4:db:
31:79:8c:1a:ba:f3:eb:d3:83:cf:6e:0a:a3:d7:ab:
d4:6a:f4:82:2e:64:13:17:c2:5b:77:96:f2:eb:e8:
6e:44:de:47:2b:ca:7b:53:77:69:a5:4c:bc:cb:bd:
80:97:6a:3b:cd:27:73:44:a6:6e:76:7c:ac:13:33:
42:e8:74:55:a5:40:90:62:c7:89:3a:2d:37:77:a2:
e2:af:43:b4:39:f2:3c:23:1f:d3:26:50:ee:a8:c9:
d2:5d:0a:77:5a:d4:03:14:08:f8:c9:be:a8:2b:90:
b7:cf:60:e0:ee:34:02:18:2d:90:bb:0b:8a:be:14:
96:39:8e:3f:b5:56:b9:97:1d:9b:d9:e6:30:a3:01:
d8:3c:fe:e1:d0:23:f5:84:e4:2d:09:eb:de:a6:70:
91:84:28:4d:35:25:9f:84:b2:4a:70:10:0e:98:af:
a9:e8:63:17:8d:be:2e:d0:ce:a1:11:f4:5b:73:87:
f6:17:af:ab:de:2a:16:91:19:a1:bc:99:91:ff:6f:
53:9c:72:8c:7f:77:b3:07:28:bb:69:a6:c4:4d:8d:
83:36:c9:79:1c:8e:9a:f8:7e:2f:6d:e1:3f:bd:81:
37:11:73:09:b2:cd:ad:96:df:38:f3:b0:b2:4a:19:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:86:3A:84:28:8E:FB:27:8A:B6:91:69:76:E6:50:BC:9B:70:62
X509v3 Authority Key Identifier:
keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/w6mGOoQojvsniraRaXbmULybcGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.96.0/19
Signature Algorithm: sha256WithRSAEncryption
76:75:b6:be:4d:43:91:6d:54:dd:0e:38:55:4f:d7:c0:52:9c:
cb:9b:98:c8:00:f3:dd:8c:72:13:19:f6:83:66:cf:8d:01:f3:
3a:d4:82:4e:b2:80:2a:4a:13:90:36:e5:b3:87:31:61:e3:c3:
70:1c:15:a0:78:9a:1a:90:01:92:0a:b0:67:6f:d0:68:f9:d4:
ed:2e:8c:e4:22:fb:f7:21:9f:b9:20:c4:58:2a:2a:72:91:51:
df:2e:33:42:57:26:30:b8:e5:3e:9d:1a:5c:f6:de:d9:4a:0e:
88:1b:63:df:a5:29:4d:fc:68:fb:08:08:3b:c0:22:2b:92:f5:
d6:be:a3:b7:53:a1:a6:33:c4:e9:89:ad:e4:1d:de:36:10:55:
0d:0b:5d:b7:9c:8e:1f:db:3d:67:0b:c0:83:89:ad:b5:97:49:
ab:f4:77:4c:54:2f:58:1b:f4:78:0e:50:78:f7:11:49:dc:86:
5c:23:65:b5:a3:dc:ec:39:48:da:d4:5b:11:eb:ac:63:0e:a5:
e4:f5:68:3d:35:a4:6a:a9:03:1f:12:15:0d:5e:9b:d1:51:db:
82:f3:62:e6:f8:9c:21:a6:a4:91:e3:f4:fb:fa:0e:b6:13:c0:
ec:31:a2:62:5b:49:f7:95:51:00:12:b8:2b:66:25:82:b4:f5:
b4:30:84:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmaysKVv4FNTJAoQib4YKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NGFkYjcyYjgyZWNmYWZjNTcwNWUyNWZlYmNhYjVjODJk
NzZlZTYwHhcNMjUwMTAyMDk0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2E5ODYzYTg0Mjg4ZWZiMjc4YWI2OTE2OTc2ZTY1MGJjOWI3MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwsqGh1A60jw9HEixNsxeYwauvPr
04PPbgqj16vUavSCLmQTF8Jbd5by6+huRN5HK8p7U3dppUy8y72Al2o7zSdzRKZu
dnysEzNC6HRVpUCQYseJOi03d6Lir0O0OfI8Ix/TJlDuqMnSXQp3WtQDFAj4yb6o
K5C3z2Dg7jQCGC2QuwuKvhSWOY4/tVa5lx2b2eYwowHYPP7h0CP1hOQtCevepnCR
hChNNSWfhLJKcBAOmK+p6GMXjb4u0M6hEfRbc4f2F6+r3ioWkRmhvJmR/29TnHKM
f3ezByi7aabETY2DNsl5HI6a+H4vbeE/vYE3EXMJss2tlt8487CyShkQQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOphjqEKI77J4q2kWl25lC8m3BiMB8GA1UdIwQY
MBaAFFVK23K4Ls+vxXBeJf68q1yC127mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81ZTM4OTUtYWU5NS00M2UyLWI3YTEt
NzU4NjNmNDM0NzZhLzEvdzZtR09vUW9qdnNuaXJhUmFYYm1VTHliY0dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81ZTM4OTUtYWU5NS00M2UyLWI3YTEtNzU4NjNmNDM0NzZh
LzEvVlVyYmNyZ3V6Nl9GY0Y0bF9yeXJYSUxYYnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2RJgMA0G
CSqGSIb3DQEBCwUAA4IBAQB2dba+TUORbVTdDjhVT9fAUpzLm5jIAPPdjHITGfaD
Zs+NAfM61IJOsoAqShOQNuWzhzFh48NwHBWgeJoakAGSCrBnb9Bo+dTtLozkIvv3
IZ+5IMRYKipykVHfLjNCVyYwuOU+nRpc9t7ZSg6IG2PfpSlN/Gj7CAg7wCIrkvXW
vqO3U6GmM8Tpia3kHd42EFUNC123nI4f2z1nC8CDia21l0mr9HdMVC9YG/R4DlB4
9xFJ3IZcI2W1o9zsOUja1FsR66xjDqXk9Wg9NaRqqQMfEhUNXpvRUduC82Lm+Jwh
pqSR4/T7+g62E8DsMaJiW0n3lVEAErgrZiWCtPW0MIQp
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:28:18 2025 by rpki-client