Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/CwQ0CgjdF-eK2zokEY5D8Y0SzTs.roa
File: CwQ0CgjdF-eK2zokEY5D8Y0SzTs.roa (raw, json)
Hash identifier: yxsFQV6dBnKck8poM3ye5c/2LN+fCyAwRwDUyRgSq/U=
Subject key identifier: 0B:04:34:0A:08:DD:17:E7:8A:DB:3A:24:11:8E:43:F1:8D:12:CD:3B
Certificate issuer: /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Certificate serial: 019420D607F160B82079962397B968E0B0A8
Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/CwQ0CgjdF-eK2zokEY5D8Y0SzTs.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44177
IP address blocks: 91.201.100.0/22 maxlen: 24
194.76.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:07:f1:60:b8:20:79:96:23:97:b9:68:e0:b0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b04340a08dd17e78adb3a24118e43f18d12cd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:66:c7:87:2a:c2:3f:55:8a:0b:ac:8c:c2:
4d:c5:30:88:3c:fc:d4:ef:d2:e9:db:e1:48:11:8f:
d1:21:ed:22:de:c1:54:40:9b:0e:48:0e:c5:29:9f:
7e:a8:2a:b6:27:bb:81:2c:8c:0c:27:ab:48:48:04:
34:9c:2b:53:3c:10:3e:21:01:9d:4a:fd:4a:7b:e0:
38:b4:5b:f4:2f:5e:f2:4d:99:62:63:b7:eb:ec:ee:
2c:a5:8c:1b:5c:d4:48:72:55:e4:63:e2:df:eb:b4:
02:43:e5:30:67:d9:dd:10:f0:48:1b:67:8c:f8:25:
70:da:cd:f5:e8:1f:37:b3:56:0a:75:41:ab:b6:3b:
f9:5e:c6:5a:c8:1d:b9:a5:dc:64:f1:13:90:1a:3a:
ca:ce:92:e1:50:8f:94:d3:2f:51:95:95:31:e9:72:
cd:98:8e:84:36:fb:55:45:ea:bb:9d:e0:71:0f:54:
ab:a5:49:de:cf:e3:6b:15:81:5f:f1:04:43:b9:42:
a0:d8:6d:5b:6d:50:ef:9d:6f:d1:38:c2:53:72:63:
aa:84:01:69:a4:c6:5d:b6:46:2a:36:60:31:b9:fd:
0a:19:19:db:07:0a:56:ec:75:45:b4:30:33:15:a4:
6d:12:dd:f5:e9:58:fa:c2:de:dc:75:df:8c:dd:ad:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:04:34:0A:08:DD:17:E7:8A:DB:3A:24:11:8E:43:F1:8D:12:CD:3B
X509v3 Authority Key Identifier:
keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/CwQ0CgjdF-eK2zokEY5D8Y0SzTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.100.0/22
194.76.193.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2d:2e:9d:46:28:44:0e:86:8a:35:fa:d2:ad:fd:1f:67:e6:
15:88:e2:48:2c:49:69:94:f7:72:c0:a2:0e:a8:96:b5:52:e1:
95:bb:35:08:a4:d2:fe:7e:e4:9b:48:68:46:f6:9d:75:20:ca:
44:5f:56:ce:14:1d:2b:82:69:dc:06:7f:d1:5f:a7:1d:8a:64:
35:c5:2e:c9:b8:2e:35:a4:2c:71:61:3e:82:5c:94:88:25:34:
4c:92:f7:04:d5:69:0a:90:6c:0e:0c:95:32:d0:db:03:5a:46:
4b:40:cd:3b:2d:03:35:f6:a1:80:4f:21:0a:8a:8a:a9:65:21:
bf:ee:ef:ab:1e:fe:7f:58:a0:ba:8b:48:2a:82:f0:36:5e:e7:
5c:cf:fb:52:41:31:fe:d6:11:23:4f:f8:ec:17:62:d9:86:91:
b6:bf:d0:7e:bb:e5:3f:39:1e:93:44:6c:ba:4d:0b:a3:e2:1e:
a3:e1:8b:63:f2:36:41:6b:cf:de:69:6e:79:22:05:11:33:5a:
a1:0a:8a:aa:81:94:5f:5c:ce:53:7a:8a:ac:88:d6:2c:29:c4:
3d:7f:06:24:ca:c7:44:0d:25:9c:32:35:b9:d9:fb:22:a0:b3:
a4:58:45:df:0e:6b:ca:d8:df:35:bf:d5:88:72:e6:52:3c:d2:
37:56:bc:39
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQg1gfxYLggeZYjl7lo4LCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTEwMjM0Y2ZiNTUyMmFhMjliMzI2MGE3NWY4YTlmNzk5
MzNlN2IwHhcNMjUwMTAxMDc0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjA0MzQwYTA4ZGQxN2U3OGFkYjNhMjQxMThlNDNmMThkMTJjZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LZmx4cqwj9VigusjMJNxTCIPPzU
79Lp2+FIEY/RIe0i3sFUQJsOSA7FKZ9+qCq2J7uBLIwMJ6tISAQ0nCtTPBA+IQGd
Sv1Ke+A4tFv0L17yTZliY7fr7O4spYwbXNRIclXkY+Lf67QCQ+UwZ9ndEPBIG2eM
+CVw2s316B83s1YKdUGrtjv5XsZayB25pdxk8ROQGjrKzpLhUI+U0y9RlZUx6XLN
mI6ENvtVReq7neBxD1SrpUnez+NrFYFf8QRDuUKg2G1bbVDvnW/ROMJTcmOqhAFp
pMZdtkYqNmAxuf0KGRnbBwpW7HVFtDAzFaRtEt316Vj6wt7cdd+M3a3T3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAsENAoI3Rfnits6JBGOQ/GNEs07MB8GA1UdIwQY
MBaAFBehAjTPtVIqopsyYKdfip95kz57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMt
MmFkMmJiNTMyNjEzLzEvQ3dRMENnamRGLWVLMnpva0VZNUQ4WTBTelRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMtMmFkMmJiNTMyNjEz
LzEvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8lkAwQA
wkzBMA0GCSqGSIb3DQEBCwUAA4IBAQCALS6dRihEDoaKNfrSrf0fZ+YViOJILElp
lPdywKIOqJa1UuGVuzUIpNL+fuSbSGhG9p11IMpEX1bOFB0rgmncBn/RX6cdimQ1
xS7JuC41pCxxYT6CXJSIJTRMkvcE1WkKkGwODJUy0NsDWkZLQM07LQM19qGATyEK
ioqpZSG/7u+rHv5/WKC6i0gqgvA2Xudcz/tSQTH+1hEjT/jsF2LZhpG2v9B+u+U/
OR6TRGy6TQuj4h6j4Ytj8jZBa8/eaW55IgURM1qhCoqqgZRfXM5TeoqsiNYsKcQ9
fwYkysdEDSWcMjW52fsioLOkWEXfDmvK2N81v9WIcuZSPNI3Vrw5
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:17:00 2025 by rpki-client