Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/wKqbNOLsqrVFYWVrfyYGqu1Sues.roa
File: wKqbNOLsqrVFYWVrfyYGqu1Sues.roa (raw, json)
Hash identifier: /xyx+mYRyXQ5PVlQrZvBX8K5l17ZBxWHv6YVrNpVAuU=
Subject key identifier: C0:AA:9B:34:E2:EC:AA:B5:45:61:65:6B:7F:26:06:AA:ED:52:B9:EB
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 0194274859A96D1B6D3D76F0582D48F5DA2B
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/wKqbNOLsqrVFYWVrfyYGqu1Sues.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209049
IP address blocks: 195.110.176.0/21 maxlen: 24
195.110.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:59:a9:6d:1b:6d:3d:76:f0:58:2d:48:f5:da:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0aa9b34e2ecaab54561656b7f2606aaed52b9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:3b:17:d9:45:6c:50:53:39:50:69:08:3c:
52:76:19:ab:05:e4:46:46:91:d9:97:72:90:65:c1:
a8:3e:cd:6c:32:f4:2b:e6:e8:b1:5e:58:1f:92:32:
8f:c7:32:14:a7:d3:85:84:37:94:e4:21:f9:51:f5:
ca:0a:1f:97:5b:d5:af:90:58:9b:c9:fe:1c:7b:67:
82:fa:d2:ce:c6:3d:0f:b9:dc:4b:cc:6d:74:b0:bb:
ec:e0:bc:82:32:01:76:28:bc:2e:36:64:ff:3c:05:
26:f8:e0:0c:d7:b8:b5:f0:f2:ca:a4:b0:c9:e3:af:
64:0d:99:ab:85:3c:1e:af:29:a5:7a:64:91:5a:38:
24:52:1a:d9:f8:ea:ae:d0:ea:88:5f:bf:7b:b2:db:
7e:58:78:fb:85:1e:7c:23:d8:33:04:4c:aa:03:69:
54:f7:fe:76:b9:48:a2:fd:be:d4:8c:25:59:54:a8:
99:ef:7f:80:f2:c8:f4:ec:05:01:d6:3f:f8:85:8d:
bf:9a:1b:1f:63:66:13:24:ae:60:2f:20:d9:4f:dc:
8b:43:00:fc:0b:38:18:b9:f6:cc:a9:de:42:b6:69:
fe:15:7e:1c:f6:b6:3a:dd:0c:71:78:18:8b:68:58:
e8:12:d9:25:5e:82:1f:e1:85:22:82:30:86:31:6d:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:9B:34:E2:EC:AA:B5:45:61:65:6B:7F:26:06:AA:ED:52:B9:EB
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/wKqbNOLsqrVFYWVrfyYGqu1Sues.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.176.0-195.110.185.255
Signature Algorithm: sha256WithRSAEncryption
26:ff:51:f7:30:10:3b:2e:74:31:61:62:40:99:3e:df:dd:3a:
1e:18:8d:74:65:0d:5c:68:63:73:9b:12:c2:ed:e8:b0:b2:6b:
49:09:85:fd:77:d8:57:30:17:a9:19:92:39:28:ed:e7:99:92:
66:c6:f5:e9:a7:03:d9:31:47:f7:e5:50:98:90:02:dd:46:8a:
e5:03:69:ce:d7:50:02:57:32:80:97:26:07:3d:c1:ef:b7:bc:
d8:b8:09:c1:25:1e:3c:25:98:cb:5b:e7:41:39:06:52:4e:25:
1e:e0:bb:55:0a:a9:7d:86:f4:95:7e:9e:2f:e4:47:13:76:f7:
20:18:39:95:a3:f6:f0:c2:37:b4:04:71:91:6b:2c:10:6a:59:
39:68:86:d6:78:87:82:70:4b:d0:99:df:96:92:db:1b:e7:a9:
51:74:5d:c8:bd:e6:39:9e:68:d8:59:1a:7b:8f:29:78:cf:af:
e0:d3:fd:e3:d4:23:a9:40:f2:fa:28:bf:6d:c8:ed:89:b2:73:
26:c9:86:1a:cb:96:c5:f5:e5:ac:de:9d:05:51:cd:80:09:d8:
83:0e:26:72:28:26:92:85:27:17:e5:5e:f4:bc:3e:76:ea:fb:
64:fa:bf:56:ef:db:3d:bc:7b:4d:35:b0:d9:3d:2c:9b:98:db:
50:16:46:07
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQnSFmpbRttPXbwWC1I9dorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmQ4ZmQ3N2RhZGUzZDNmOTZjYjQ5OTMxOTQ4YzI3Mjlh
ZGEwZGUwHhcNMjUwMTAyMTM1MDQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGFhOWIzNGUyZWNhYWI1NDU2MTY1NmI3ZjI2MDZhYWVkNTJiOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5Q7F9lFbFBTOVBpCDxSdhmrBeRG
RpHZl3KQZcGoPs1sMvQr5uixXlgfkjKPxzIUp9OFhDeU5CH5UfXKCh+XW9WvkFib
yf4ce2eC+tLOxj0PudxLzG10sLvs4LyCMgF2KLwuNmT/PAUm+OAM17i18PLKpLDJ
469kDZmrhTwerymlemSRWjgkUhrZ+Oqu0OqIX797stt+WHj7hR58I9gzBEyqA2lU
9/52uUii/b7UjCVZVKiZ73+A8sj07AUB1j/4hY2/mhsfY2YTJK5gLyDZT9yLQwD8
CzgYufbMqd5Ctmn+FX4c9rY63QxxeBiLaFjoEtklXoIf4YUigjCGMW0SFwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFMCqmzTi7Kq1RWFla38mBqrtUrnrMB8GA1UdIwQY
MBaAFA5tj9d9rePT+Wy0mTGUjCcpraDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEt
YmQzNWMwNDhiOTMwLzEvd0txYk5PTHNxclZGWVdWcmZ5WUdxdTFTdWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEtYmQzNWMwNDhiOTMw
LzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATDbrAD
BAHDbrgwDQYJKoZIhvcNAQELBQADggEBACb/UfcwEDsudDFhYkCZPt/dOh4YjXRl
DVxoY3ObEsLt6LCya0kJhf132FcwF6kZkjko7eeZkmbG9emnA9kxR/flUJiQAt1G
iuUDac7XUAJXMoCXJgc9we+3vNi4CcElHjwlmMtb50E5BlJOJR7gu1UKqX2G9JV+
ni/kRxN29yAYOZWj9vDCN7QEcZFrLBBqWTlohtZ4h4JwS9CZ35aS2xvnqVF0Xci9
5jmeaNhZGnuPKXjPr+DT/ePUI6lA8voov23I7YmycybJhhrLlsX15azenQVRzYAJ
2IMOJnIoJpKFJxflXvS8Pnbq+2T6v1bv2z28e001sNk9LJuY21AWRgc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:43 2025 by rpki-client