Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/xPuYo9ZNVfEwjuZRks156sTPvCs.roa
File: xPuYo9ZNVfEwjuZRks156sTPvCs.roa (raw, json)
Hash identifier: jIHvOq1mFiR09GABf7ziDZ9sAzswkVSjcgAC+i6z4yU=
Subject key identifier: C4:FB:98:A3:D6:4D:55:F1:30:8E:E6:51:92:CD:79:EA:C4:CF:BC:2B
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 0194274853370CB388A18C2B4DF96B1705E4
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/xPuYo9ZNVfEwjuZRks156sTPvCs.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6736
IP address blocks: 94.184.0.0/16 maxlen: 24
185.62.232.0/22 maxlen: 22
194.225.0.0/16 maxlen: 24
2001:678:b0::/46 maxlen: 48
2001:14e8::/32 maxlen: 48
2001:14e8::/48 maxlen: 48
2001:14e8:0:405::405/128 maxlen: 128
2001:14e8:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:53:37:0c:b3:88:a1:8c:2b:4d:f9:6b:17:05:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4fb98a3d64d55f1308ee65192cd79eac4cfbc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:8d:a2:74:6e:20:fd:fe:36:14:c9:85:8a:
92:c4:61:e5:da:1b:c2:f4:4b:54:ce:da:fd:c4:66:
1b:0b:c4:22:1a:cf:23:61:f8:b9:a0:a0:12:7e:eb:
42:e2:39:09:c8:44:88:49:4c:de:c9:b3:c2:02:d9:
c8:5f:f7:aa:df:c3:93:3a:f7:b2:e1:9f:ae:19:f8:
cc:53:91:1e:d3:ac:1d:c4:78:75:c4:0a:66:c9:28:
9e:31:94:ca:37:25:ba:43:e0:45:8b:31:9b:b3:a9:
bd:c3:32:1e:fc:84:40:4c:d2:6e:b9:4b:a3:e0:2e:
3c:a9:27:39:18:00:45:c6:94:d6:61:b2:6b:30:f8:
78:ef:48:e2:a9:62:ed:7b:e0:4c:ff:b2:21:d4:c8:
b5:64:9b:94:b8:5e:f6:3a:b4:1e:2f:a8:9a:c1:5c:
be:a4:58:ea:d7:54:c5:51:36:34:56:6d:61:98:94:
fd:76:69:d4:b0:eb:92:52:19:7a:34:dc:14:99:b0:
5e:1e:4e:cc:46:2c:b3:40:fd:09:8d:e3:1b:a1:43:
fb:85:58:9e:90:94:2a:80:a3:6e:d3:3e:65:4c:42:
04:cb:cc:0f:d3:6f:0d:5d:54:48:fd:75:ef:38:de:
2b:33:62:aa:f2:4e:71:cd:83:ad:41:95:14:e5:d9:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FB:98:A3:D6:4D:55:F1:30:8E:E6:51:92:CD:79:EA:C4:CF:BC:2B
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/xPuYo9ZNVfEwjuZRks156sTPvCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/16
185.62.232.0/22
194.225.0.0/16
IPv6:
2001:678:b0::/46
2001:14e8::/32
Signature Algorithm: sha256WithRSAEncryption
91:ed:4d:16:47:b6:41:a3:cf:4b:33:e2:3e:59:6f:c6:79:74:
ad:8c:0f:cf:b8:11:33:ce:cf:08:8a:9a:2e:98:c7:1e:1a:2d:
a4:a0:eb:73:3a:3d:2f:b1:da:17:7b:c4:4e:e0:c6:bc:03:f8:
55:21:e2:45:b7:76:ff:36:99:4f:87:3e:10:5e:5b:03:64:30:
ed:f2:bf:3e:90:80:c4:6d:5b:6e:af:ca:46:3a:bb:28:f3:3a:
c8:87:59:97:fd:4b:54:0a:c3:ca:c7:73:6f:f4:24:4c:11:52:
dd:34:31:06:38:ae:c0:1e:bd:db:ec:a8:ae:d1:66:02:3c:ac:
d7:89:07:73:01:4e:2e:8d:c5:07:46:e4:ee:63:ca:73:ef:18:
ea:8c:7d:b6:ac:34:8a:f8:9f:a4:5b:74:ec:e7:bd:bd:f2:65:
f4:97:94:4e:95:aa:95:04:0d:99:a5:82:d0:61:9b:7a:78:a1:
25:46:f7:dc:f9:ee:6a:3f:fe:50:5a:8f:68:7a:f8:49:1a:55:
64:d2:5c:8b:12:d9:c8:3e:9c:9c:1c:5e:1f:91:a0:38:17:4f:
a8:c9:31:32:79:78:bd:95:89:ec:d5:85:da:8c:68:52:e6:e1:
3d:58:a1:88:da:bc:98:8e:85:c1:78:80:01:c1:15:bf:3b:5c:
d3:6a:b6:64
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQnSFM3DLOIoYwrTflrFwXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjUwMTAyMTM1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGZiOThhM2Q2NGQ1NWYxMzA4ZWU2NTE5MmNkNzllYWM0Y2ZiYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymqNonRuIP3+NhTJhYqSxGHl2hvC
9EtUztr9xGYbC8QiGs8jYfi5oKASfutC4jkJyESISUzeybPCAtnIX/eq38OTOvey
4Z+uGfjMU5Ee06wdxHh1xApmySieMZTKNyW6Q+BFizGbs6m9wzIe/IRATNJuuUuj
4C48qSc5GABFxpTWYbJrMPh470jiqWLte+BM/7Ih1Mi1ZJuUuF72OrQeL6iawVy+
pFjq11TFUTY0Vm1hmJT9dmnUsOuSUhl6NNwUmbBeHk7MRiyzQP0JjeMboUP7hVie
kJQqgKNu0z5lTEIEy8wP028NXVRI/XXvON4rM2Kq8k5xzYOtQZUU5dmd9QIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFMT7mKPWTVXxMI7mUZLNeerEz7wrMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEveFB1WW85Wk5WZkV3anVaUmtzMTU2c1RQdkNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAWBAIAATAQAwMAXrgDBAK5
PugDAwDC4TAWBAIAAjAQAwcCIAEGeACwAwUAIAEU6DANBgkqhkiG9w0BAQsFAAOC
AQEAke1NFke2QaPPSzPiPllvxnl0rYwPz7gRM87PCIqaLpjHHhotpKDrczo9L7Ha
F3vETuDGvAP4VSHiRbd2/zaZT4c+EF5bA2Qw7fK/PpCAxG1bbq/KRjq7KPM6yIdZ
l/1LVArDysdzb/QkTBFS3TQxBjiuwB692+yortFmAjys14kHcwFOLo3FB0bk7mPK
c+8Y6ox9tqw0ivifpFt07Oe9vfJl9JeUTpWqlQQNmaWC0GGbenihJUb33Pnuaj/+
UFqPaHr4SRpVZNJcixLZyD6cnBxeH5GgOBdPqMkxMnl4vZWJ7NWF2oxoUubhPVih
iNq8mI6FwXiAAcEVvztc02q2ZA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:44:03 2025 by rpki-client