Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/CmCZMVAUFYDrES4R1R0EnlAWPWU.roa
File: CmCZMVAUFYDrES4R1R0EnlAWPWU.roa (raw, json)
Hash identifier: SOwCciST5P31loSN+3o2tTo+KSkYf9jle8AlYvbZl+s=
Subject key identifier: 0A:60:99:31:50:14:15:80:EB:11:2E:11:D5:1D:04:9E:50:16:3D:65
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA77F0A30C32392D43F266229F967C
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/CmCZMVAUFYDrES4R1R0EnlAWPWU.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201044
IP address blocks: 213.199.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:77:f0:a3:0c:32:39:2d:43:f2:66:22:9f:96:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a60993150141580eb112e11d51d049e50163d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:89:e8:33:cd:16:f6:4e:68:74:cf:39:92:
f5:b7:c3:04:30:22:5d:bb:6c:b4:f1:0f:bc:8c:06:
ff:3d:38:53:80:32:0d:9b:d4:87:01:6e:5a:4b:bb:
f7:f1:e4:72:66:6d:08:4d:5c:3d:c3:21:47:d4:c7:
bb:e9:88:89:11:50:10:21:49:c4:8a:ba:01:47:6c:
0d:b0:cc:fb:69:37:19:66:06:55:08:8f:bc:58:33:
08:fe:56:05:8c:56:bf:56:eb:2a:31:13:e1:d3:8b:
fa:4a:c8:b6:cc:f0:6f:f1:d9:f8:b5:69:2a:1c:07:
df:8f:a6:28:1e:f0:ae:47:55:b7:52:84:6f:71:3b:
ce:50:78:fa:90:e7:da:25:70:d4:7d:17:3c:24:3e:
4e:54:c5:b0:cb:47:c9:61:3f:53:a3:b7:64:59:2e:
ee:8d:bf:92:cd:2f:ca:62:11:fe:e2:15:4d:ac:86:
82:29:cb:f0:73:9b:48:31:20:6e:91:56:6d:28:46:
0e:fc:e1:a9:7e:23:71:0b:6b:27:a1:36:49:c7:b6:
e5:3b:82:0c:d6:e1:d4:00:ce:5d:ac:97:34:8b:e6:
f4:02:89:ad:9c:cd:24:25:54:72:ed:c6:fb:b9:6f:
54:c4:44:df:69:40:16:a4:c4:67:87:48:8e:c5:65:
7b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:60:99:31:50:14:15:80:EB:11:2E:11:D5:1D:04:9E:50:16:3D:65
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/CmCZMVAUFYDrES4R1R0EnlAWPWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.199.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a6:c9:4c:2f:fe:99:d1:fb:e5:0e:9f:40:e6:31:4e:58:d2:
f2:fb:ea:bf:5b:28:87:91:3f:4b:28:ee:08:0c:9f:ee:c1:eb:
7c:28:c4:df:40:8e:40:70:54:8b:aa:ab:fe:3c:3b:e9:35:1b:
b2:de:3a:09:b9:ea:aa:cb:41:41:e1:73:64:9f:db:85:59:6d:
c6:36:01:b5:0f:23:f7:9d:ad:03:31:f0:d5:9c:c7:6a:19:8e:
84:77:ed:a3:b8:36:06:cd:c6:39:db:c4:bd:f2:2e:1a:3a:23:
c8:6a:e8:01:6c:f8:f7:f8:35:bc:fd:97:ad:a0:3b:51:55:75:
3e:80:1e:0f:55:5c:e9:ca:91:c3:71:71:15:f7:68:ef:47:7c:
a6:34:f3:57:9a:64:b0:bf:3d:ec:eb:39:9a:3b:76:19:a0:2c:
3d:17:7d:e6:5d:04:3f:34:27:64:92:fe:6c:27:df:f6:18:fd:
d8:60:f2:75:f9:f9:d7:2c:c2:a3:a9:d1:72:3f:76:de:e4:4e:
55:35:01:c4:33:7e:b1:c9:4b:fb:27:d4:26:81:50:ce:7f:d6:
9b:f4:6b:81:9d:15:c0:a4:ea:ba:88:9a:88:6c:32:6e:e1:64:
27:a8:0d:8b:08:c0:10:9e:83:27:11:62:b0:11:ea:64:4d:22:
82:60:1b:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+nfwowwyOS1D8mYin5Z8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz
NmFiZmYwHhcNMjUwMTAxMDM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTYwOTkzMTUwMTQxNTgwZWIxMTJlMTFkNTFkMDQ5ZTUwMTYzZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1eJ6DPNFvZOaHTPOZL1t8MEMCJd
u2y08Q+8jAb/PThTgDINm9SHAW5aS7v38eRyZm0ITVw9wyFH1Me76YiJEVAQIUnE
iroBR2wNsMz7aTcZZgZVCI+8WDMI/lYFjFa/VusqMRPh04v6Ssi2zPBv8dn4tWkq
HAffj6YoHvCuR1W3UoRvcTvOUHj6kOfaJXDUfRc8JD5OVMWwy0fJYT9To7dkWS7u
jb+SzS/KYhH+4hVNrIaCKcvwc5tIMSBukVZtKEYO/OGpfiNxC2snoTZJx7blO4IM
1uHUAM5drJc0i+b0AomtnM0kJVRy7cb7uW9UxETfaUAWpMRnh0iOxWV7KQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFApgmTFQFBWA6xEuEdUdBJ5QFj1lMB8GA1UdIwQY
MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt
YWZmOTJjMTZkOGUzLzEvQ21DWk1WQVVGWURyRVM0UjFSMEVubEFXUFdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz
LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cf7MA0G
CSqGSIb3DQEBCwUAA4IBAQAspslML/6Z0fvlDp9A5jFOWNLy++q/WyiHkT9LKO4I
DJ/uwet8KMTfQI5AcFSLqqv+PDvpNRuy3joJueqqy0FB4XNkn9uFWW3GNgG1DyP3
na0DMfDVnMdqGY6Ed+2juDYGzcY528S98i4aOiPIaugBbPj3+DW8/ZetoDtRVXU+
gB4PVVzpypHDcXEV92jvR3ymNPNXmmSwvz3s6zmaO3YZoCw9F33mXQQ/NCdkkv5s
J9/2GP3YYPJ1+fnXLMKjqdFyP3be5E5VNQHEM36xyUv7J9QmgVDOf9ab9GuBnRXA
pOq6iJqIbDJu4WQnqA2LCMAQnoMnEWKwEepkTSKCYBsv
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:19 2025 by rpki-client