Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/WYXlKPxfFrF5-delsIPB_r6FESQ.roa
File: WYXlKPxfFrF5-delsIPB_r6FESQ.roa (raw, json)
Hash identifier: cI2mCSSEwOLi9AIJI3IVWlSF6M3b+jAGtzx5i3z7sFQ=
Subject key identifier: 59:85:E5:28:FC:5F:16:B1:79:F9:D7:A5:B0:83:C1:FE:BE:85:11:24
Certificate issuer: /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
Certificate serial: 019421B1ABA49EB5AC103F263F52DFC04DB3
Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/WYXlKPxfFrF5-delsIPB_r6FESQ.roa
Signing time: Wed 01 Jan 2025 11:47:59 +0000
ROA not before: Wed 01 Jan 2025 11:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197999
IP address blocks: 195.66.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ab:a4:9e:b5:ac:10:3f:26:3f:52:df:c0:4d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3
Validity
Not Before: Jan 1 11:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5985e528fc5f16b179f9d7a5b083c1febe851124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:87:5b:0c:a6:d6:ca:8d:7a:40:6b:03:49:
be:05:74:4e:96:a1:23:1f:01:ee:23:96:e0:fa:05:
c1:f6:0f:99:2c:3a:fa:a2:7a:be:1c:38:24:23:98:
66:87:b8:a2:1c:9c:40:70:9e:f8:a8:29:a2:0b:eb:
5d:99:d3:fa:e1:c6:4f:45:69:bf:5e:02:a0:18:bc:
53:70:f9:38:5c:9c:d8:29:a0:c9:a4:a2:38:ba:04:
2a:9f:19:4a:e3:c5:06:13:cb:29:8b:1a:ba:c1:00:
e5:bf:c8:d7:6a:c1:17:24:87:c6:c2:fa:f2:90:15:
2a:6c:a0:9d:2e:87:b6:a8:5e:b9:36:73:ee:48:0b:
83:ee:e5:44:95:54:78:99:6a:ca:0f:89:2b:1a:e2:
38:1d:c9:bf:6b:98:c3:74:c8:d0:75:0e:e0:ae:76:
9d:8d:c4:6d:cb:ac:69:24:61:7b:f9:11:b0:9d:47:
f5:a1:9f:fd:40:b5:ab:46:9b:ab:eb:39:dd:f5:97:
5b:4d:89:ca:0a:08:a9:cb:0a:2e:c3:7a:44:c0:bb:
43:90:e9:b9:65:b2:88:22:ae:e1:5c:bc:27:8e:06:
13:8b:2c:54:09:c0:b3:aa:0c:ab:15:42:80:40:7b:
86:12:2e:56:d5:5b:08:15:91:4a:6e:e4:66:61:c3:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:85:E5:28:FC:5F:16:B1:79:F9:D7:A5:B0:83:C1:FE:BE:85:11:24
X509v3 Authority Key Identifier:
keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/WYXlKPxfFrF5-delsIPB_r6FESQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.91.0/24
Signature Algorithm: sha256WithRSAEncryption
57:93:20:43:73:85:9e:d2:13:87:43:ee:a3:37:e2:f4:94:9f:
66:6e:4b:cb:1d:f6:aa:48:5d:6e:7e:08:4d:a4:3a:f3:cf:b2:
70:f9:eb:64:c6:60:01:3c:de:9a:9c:1d:34:da:ab:43:1d:58:
6d:7c:fa:65:6f:49:d3:c1:ba:60:93:46:d9:87:95:e6:96:fb:
d0:ea:ba:02:f5:69:4b:ee:99:e7:85:c4:36:53:87:d6:43:00:
bd:71:9c:7c:15:1b:da:32:8b:80:28:8c:b7:23:7d:15:05:61:
31:92:2e:59:90:9e:0d:23:cd:eb:b0:06:f9:d9:a4:b8:38:3d:
24:99:b1:b4:0a:66:a7:8e:25:23:6d:52:49:18:4f:db:9b:31:
ee:9c:1c:34:59:7c:c5:bb:63:27:2f:41:21:0c:e9:2a:83:c5:
95:ce:12:d5:e8:44:67:ce:09:7e:5f:aa:98:5f:82:04:44:98:
ca:69:b3:81:65:03:7e:56:0d:c9:0b:ff:25:2c:e9:9f:44:eb:
d0:91:4e:49:e4:e9:5d:d1:d9:51:47:15:ec:8c:f7:d6:47:ec:
0f:d8:2b:ce:51:c7:a6:e1:a1:ef:f8:85:76:08:d4:a6:ef:a3:
82:da:d3:ee:61:ef:16:13:5c:44:b3:0d:dd:52:f7:69:6b:9a:
9a:87:af:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsauknrWsED8mP1LfwE2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMzQ3NTBiZTIxNzNjYjliMDg2YTc3YzZkZWE1NGI0YTg0
NjlhZjMwHhcNMjUwMTAxMTE0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTg1ZTUyOGZjNWYxNmIxNzlmOWQ3YTViMDgzYzFmZWJlODUxMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE2HWwym1sqNekBrA0m+BXROlqEj
HwHuI5bg+gXB9g+ZLDr6onq+HDgkI5hmh7iiHJxAcJ74qCmiC+tdmdP64cZPRWm/
XgKgGLxTcPk4XJzYKaDJpKI4ugQqnxlK48UGE8spixq6wQDlv8jXasEXJIfGwvry
kBUqbKCdLoe2qF65NnPuSAuD7uVElVR4mWrKD4krGuI4Hcm/a5jDdMjQdQ7grnad
jcRty6xpJGF7+RGwnUf1oZ/9QLWrRpur6znd9ZdbTYnKCgipywouw3pEwLtDkOm5
ZbKIIq7hXLwnjgYTiyxUCcCzqgyrFUKAQHuGEi5W1VsIFZFKbuRmYcNweQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFmF5Sj8XxaxefnXpbCDwf6+hREkMB8GA1UdIwQY
MBaAFE00dQviFzy5sIanfG3qVLSoRprzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUt
ZThiMDExZWE4ODk3LzEvV1lYbEtQeGZGckY1LWRlbHNJUEJfcjZGRVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUtZThiMDExZWE4ODk3
LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JbMA0G
CSqGSIb3DQEBCwUAA4IBAQBXkyBDc4We0hOHQ+6jN+L0lJ9mbkvLHfaqSF1ufghN
pDrzz7Jw+etkxmABPN6anB002qtDHVhtfPplb0nTwbpgk0bZh5XmlvvQ6roC9WlL
7pnnhcQ2U4fWQwC9cZx8FRvaMouAKIy3I30VBWExki5ZkJ4NI83rsAb52aS4OD0k
mbG0CmanjiUjbVJJGE/bmzHunBw0WXzFu2MnL0EhDOkqg8WVzhLV6ERnzgl+X6qY
X4IERJjKabOBZQN+Vg3JC/8lLOmfROvQkU5J5Old0dlRRxXsjPfWR+wP2CvOUcem
4aHv+IV2CNSm76OC2tPuYe8WE1xEsw3dUvdpa5qah68v
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:03:22 2025 by rpki-client