Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/W3jKuxB_RcgliKc6SOrb-E9lQW4.roa
File: W3jKuxB_RcgliKc6SOrb-E9lQW4.roa (raw, json)
Hash identifier: flRFJj0cuA1GRJx+AJmEhdqQRbsG/XKga+ETKIMZCEI=
Subject key identifier: 5B:78:CA:BB:10:7F:45:C8:25:88:A7:3A:48:EA:DB:F8:4F:65:41:6E
Certificate issuer: /CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Certificate serial: 0194258EEA8C7673FFC49D2A49FCF1DDDFD5
Authority key identifier: FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/W3jKuxB_RcgliKc6SOrb-E9lQW4.roa
Signing time: Thu 02 Jan 2025 05:48:30 +0000
ROA not before: Thu 02 Jan 2025 05:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56575
IP address blocks: 194.36.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ea:8c:76:73:ff:c4:9d:2a:49:fc:f1:dd:df:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd11c4654af702e596eb50d13fa486db4d9bce0a
Validity
Not Before: Jan 2 05:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b78cabb107f45c82588a73a48eadbf84f65416e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:6b:9a:8d:c1:45:e1:3e:11:90:56:59:10:
05:41:50:18:05:4e:ac:f9:73:ce:25:9d:08:94:f3:
6c:d0:16:b2:db:12:55:f7:5d:dd:b2:e6:64:ef:9f:
18:ea:c8:dc:ff:4a:ae:9a:53:6c:6a:dc:1b:60:1b:
99:de:5f:cd:95:33:c0:0d:b7:f0:7a:ce:94:da:5a:
07:8e:29:f4:a6:54:0b:80:70:77:d9:76:da:ba:cb:
52:41:3d:61:bd:4a:e9:4c:0c:6c:2b:d0:06:a9:91:
17:2e:84:ca:9f:82:cd:68:db:e1:94:a3:5a:13:01:
ff:63:88:d6:04:28:82:ba:a9:84:ca:49:c9:9f:a5:
66:01:7c:f6:c3:69:c3:64:7d:f8:88:94:02:95:30:
ba:2e:c3:d9:67:33:0c:96:a3:5b:de:34:cd:e2:96:
da:c3:9e:0f:88:e0:72:f2:57:ee:95:1b:8f:2a:87:
15:62:63:73:74:0d:e3:f2:b1:f5:69:fd:fa:6f:60:
7f:18:31:44:88:d0:57:b8:4d:5f:8b:58:44:d8:92:
b3:b9:d1:ec:31:44:a1:a6:bf:11:fe:72:7e:14:0c:
0e:1a:53:7b:42:4c:9d:42:70:f1:20:08:0d:f6:a7:
fe:bc:e8:7f:a7:a6:aa:56:c6:30:c3:a2:4c:d7:e5:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:CA:BB:10:7F:45:C8:25:88:A7:3A:48:EA:DB:F8:4F:65:41:6E
X509v3 Authority Key Identifier:
keyid:FD:11:C4:65:4A:F7:02:E5:96:EB:50:D1:3F:A4:86:DB:4D:9B:CE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RHEZUr3AuWW61DRP6SG202bzgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/W3jKuxB_RcgliKc6SOrb-E9lQW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/5e3185-38c5-4a5b-bf24-c953e3398c63/1/_RHEZUr3AuWW61DRP6SG202bzgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:29:03:ae:51:ac:f5:c4:8b:c8:0b:11:6a:f6:d1:a3:5e:f9:
83:4f:da:99:c3:4d:28:d3:4e:69:dc:ab:97:49:79:e3:e4:ad:
44:17:ee:e6:bf:40:cf:c5:c2:59:65:7f:0a:46:68:a9:56:07:
01:12:60:3b:82:d8:4e:8a:8a:f1:2d:83:8c:a3:f2:e3:55:73:
88:7f:a9:28:d4:77:49:e2:10:d0:87:99:31:6a:0a:fb:c0:6b:
cb:10:72:66:9a:95:d5:38:d6:49:ee:65:a7:3b:2b:a5:3e:6b:
3f:a3:a7:f9:f7:fb:56:0b:1a:62:e7:50:ed:b7:99:1e:8e:e0:
a3:81:c8:ac:4f:b8:b0:68:d3:8a:58:c4:72:bc:93:70:70:72:
a8:c5:f1:8a:7f:d9:e0:e5:47:8c:af:dc:35:f3:04:a8:f2:d0:
3d:d2:84:3b:4e:f9:ab:82:32:fc:53:e6:c1:fb:7b:94:6c:e7:
5e:05:a2:31:17:8d:d7:3b:0c:74:50:c1:d6:2c:ad:32:35:50:
7c:09:d9:ff:f4:8c:74:56:b2:75:c1:70:45:f6:8e:2a:b4:75:
e5:4a:29:84:8c:ea:38:0a:f4:74:14:97:93:dc:93:19:c9:72:
e6:23:87:33:f4:64:75:27:75:87:55:71:e3:9d:13:9d:eb:78:
aa:34:22:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljuqMdnP/xJ0qSfzx3d/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMTFjNDY1NGFmNzAyZTU5NmViNTBkMTNmYTQ4NmRiNGQ5
YmNlMGEwHhcNMjUwMTAyMDU0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yjc4Y2FiYjEwN2Y0NWM4MjU4OGE3M2E0OGVhZGJmODRmNjU0MTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWprmo3BReE+EZBWWRAFQVAYBU6s
+XPOJZ0IlPNs0Bay2xJV913dsuZk758Y6sjc/0qumlNsatwbYBuZ3l/NlTPADbfw
es6U2loHjin0plQLgHB32XbaustSQT1hvUrpTAxsK9AGqZEXLoTKn4LNaNvhlKNa
EwH/Y4jWBCiCuqmEyknJn6VmAXz2w2nDZH34iJQClTC6LsPZZzMMlqNb3jTN4pba
w54PiOBy8lfulRuPKocVYmNzdA3j8rH1af36b2B/GDFEiNBXuE1fi1hE2JKzudHs
MUShpr8R/nJ+FAwOGlN7QkydQnDxIAgN9qf+vOh/p6aqVsYww6JM1+X/IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFt4yrsQf0XIJYinOkjq2/hPZUFuMB8GA1UdIwQY
MBaAFP0RxGVK9wLllutQ0T+khttNm84KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1JIRVpVcjNBdVdXNjFEUlA2U0cyMDJiemdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81ZTMxODUtMzhjNS00YTViLWJmMjQt
Yzk1M2UzMzk4YzYzLzEvVzNqS3V4Ql9SY2dsaUtjNlNPcmItRTlsUVc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81ZTMxODUtMzhjNS00YTViLWJmMjQtYzk1M2UzMzk4YzYz
LzEvX1JIRVpVcjNBdVdXNjFEUlA2U0cyMDJiemdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwiTMMA0G
CSqGSIb3DQEBCwUAA4IBAQBMKQOuUaz1xIvICxFq9tGjXvmDT9qZw00o005p3KuX
SXnj5K1EF+7mv0DPxcJZZX8KRmipVgcBEmA7gthOiorxLYOMo/LjVXOIf6ko1HdJ
4hDQh5kxagr7wGvLEHJmmpXVONZJ7mWnOyulPms/o6f59/tWCxpi51Dtt5kejuCj
gcisT7iwaNOKWMRyvJNwcHKoxfGKf9ng5UeMr9w18wSo8tA90oQ7TvmrgjL8U+bB
+3uUbOdeBaIxF43XOwx0UMHWLK0yNVB8Cdn/9Ix0VrJ1wXBF9o4qtHXlSimEjOo4
CvR0FJeT3JMZyXLmI4cz9GR1J3WHVXHjnROd63iqNCIN
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:26 2025 by rpki-client