Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/wPSm9MaczVOfJa8MmydVyNm05v8.roa
File: wPSm9MaczVOfJa8MmydVyNm05v8.roa (raw, json)
Hash identifier: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=
Subject key identifier: C0:F4:A6:F4:C6:9C:CD:53:9F:25:AF:0C:9B:27:55:C8:D9:B4:E6:FF
Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Certificate serial: 019422FBF251BBF6062A17344536E763C943
Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/wPSm9MaczVOfJa8MmydVyNm05v8.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198024
IP address blocks: 45.88.44.0/22 maxlen: 22
2a07:3b00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f2:51:bb:f6:06:2a:17:34:45:36:e7:63:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f4a6f4c69ccd539f25af0c9b2755c8d9b4e6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:06:ce:0a:f2:d7:e2:57:38:ab:60:00:87:
ac:20:7b:24:7c:7a:f7:ac:5e:56:7c:21:d6:b5:cb:
17:4f:00:da:5e:a7:45:5e:30:02:e6:ca:a9:64:1d:
9b:16:2a:10:e2:24:bf:cc:c1:d8:3d:96:9a:3f:99:
80:2b:db:a8:53:5f:45:e4:0f:7c:79:83:83:45:1e:
12:bc:9e:bf:66:88:22:54:e8:dd:2e:7e:63:78:26:
22:49:de:68:a6:96:e4:95:6a:95:49:6e:78:54:cb:
42:07:f8:32:c1:23:88:88:4a:98:f2:f7:2c:66:61:
6c:51:f8:06:18:c9:e3:6f:13:a9:d3:ad:00:19:e4:
3f:d8:f5:c1:9c:6c:d6:9a:d1:db:b7:23:9a:2b:0f:
f0:96:05:71:56:46:79:8d:aa:46:2a:ed:77:4d:c9:
9f:4d:22:be:fd:f0:a4:16:31:31:8e:44:e7:02:1b:
95:c8:b1:30:e0:72:3f:d9:7d:e5:8d:1d:09:a1:46:
a7:3a:7c:22:e2:66:d1:2e:f7:c6:37:ff:b5:b1:52:
2f:d3:ac:ad:33:70:95:16:03:dc:31:d8:ad:7f:12:
9e:c1:eb:f3:4b:97:b7:ef:38:af:b1:f8:91:6c:ad:
6c:b3:8a:de:82:bf:cf:fd:ee:6f:7e:88:0a:84:dc:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:A6:F4:C6:9C:CD:53:9F:25:AF:0C:9B:27:55:C8:D9:B4:E6:FF
X509v3 Authority Key Identifier:
keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/wPSm9MaczVOfJa8MmydVyNm05v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.44.0/22
IPv6:
2a07:3b00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:e3:af:79:36:9c:a9:e2:91:c0:bb:19:c3:cf:e0:60:91:6f:
79:fd:83:9c:9e:ef:b2:94:eb:f2:4c:02:c2:92:6b:8d:6b:e5:
eb:95:13:c8:2a:e1:1f:ed:3c:24:1a:10:ca:33:76:57:c4:1b:
3c:d9:41:f6:3b:09:44:09:21:d9:f3:c1:9e:38:0a:4f:82:b9:
b1:a5:fe:fa:ae:ad:82:15:4c:fa:6c:94:44:95:52:d4:87:d9:
0a:b8:51:6b:8b:91:77:56:6c:15:9e:a3:25:a1:c4:e9:72:35:
85:ac:48:97:f8:cc:79:2f:95:e9:84:8a:01:94:a2:84:2f:61:
a6:43:32:a0:f5:53:96:86:87:be:6f:0f:04:78:5f:fa:68:ea:
cd:c4:3d:33:3b:98:e6:e2:5e:41:e2:a4:4d:f6:95:84:db:3a:
2f:83:b9:fd:ce:19:c5:96:81:ef:27:9a:a9:6e:65:74:22:4f:
42:2a:33:42:ca:27:a5:3a:d6:3c:0a:3c:9e:15:b4:27:ed:df:
d1:a9:4a:af:93:1e:60:b6:5d:52:43:58:78:f1:6a:53:d0:b1:
90:db:d7:c9:c2:e1:df:29:83:b0:46:50:9b:bf:d1:d2:b2:0b:
49:41:86:76:1e:7a:2e:e3:44:d7:30:15:d5:11:e0:3f:a1:ad:
57:78:2f:21
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQi+/JRu/YGKhc0RTbnY8lDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2NlNjRhY2UwMmNjZDMzMGNlZWY5OGQwNWRmMGZiMjAz
MTdhOTEwHhcNMjUwMTAxMTc0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGY0YTZmNGM2OWNjZDUzOWYyNWFmMGM5YjI3NTVjOGQ5YjRlNmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fsGzgry1+JXOKtgAIesIHskfHr3
rF5WfCHWtcsXTwDaXqdFXjAC5sqpZB2bFioQ4iS/zMHYPZaaP5mAK9uoU19F5A98
eYODRR4SvJ6/ZogiVOjdLn5jeCYiSd5oppbklWqVSW54VMtCB/gywSOIiEqY8vcs
ZmFsUfgGGMnjbxOp060AGeQ/2PXBnGzWmtHbtyOaKw/wlgVxVkZ5japGKu13Tcmf
TSK+/fCkFjExjkTnAhuVyLEw4HI/2X3ljR0JoUanOnwi4mbRLvfGN/+1sVIv06yt
M3CVFgPcMditfxKewevzS5e37zivsfiRbK1ss4regr/P/e5vfogKhNxXtQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMD0pvTGnM1TnyWvDJsnVcjZtOb/MB8GA1UdIwQY
MBaAFDJ85krOAszTMM7vmNBd8PsgMXqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMt
YTNkOWQ2MTRmMTk3LzEvd1BTbTlNYWN6Vk9mSmE4TW15ZFZ5Tm0wNXY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMtYTNkOWQ2MTRmMTk3
LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVgsMA0E
AgACMAcDBQMqBzsAMA0GCSqGSIb3DQEBCwUAA4IBAQCa4695Npyp4pHAuxnDz+Bg
kW95/YOcnu+ylOvyTALCkmuNa+XrlRPIKuEf7TwkGhDKM3ZXxBs82UH2OwlECSHZ
88GeOApPgrmxpf76rq2CFUz6bJRElVLUh9kKuFFri5F3VmwVnqMlocTpcjWFrEiX
+Mx5L5XphIoBlKKEL2GmQzKg9VOWhoe+bw8EeF/6aOrNxD0zO5jm4l5B4qRN9pWE
2zovg7n9zhnFloHvJ5qpbmV0Ik9CKjNCyielOtY8CjyeFbQn7d/RqUqvkx5gtl1S
Q1h48WpT0LGQ29fJwuHfKYOwRlCbv9HSsgtJQYZ2Hnou40TXMBXVEeA/oa1XeC8h
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:19:18 2025 by rpki-client