Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa
File: fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa (raw, json)
Hash identifier: FY8bBIFYDCHCGhqOrrG5nSouUPyCK8D06l8J0Ub7EYk=
Subject key identifier: 7D:65:A3:E2:F3:78:3D:A9:21:E2:9C:B8:66:84:63:7F:07:67:D5:04
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 0194236A26D1405EBD0CCFE7FE50A440F6E7
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 193.8.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:d1:40:5e:bd:0c:cf:e7:fe:50:a4:40:f6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d65a3e2f3783da921e29cb86684637f0767d504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:59:b5:29:2a:a6:6d:f0:f6:2d:3f:d1:92:
d7:d4:84:06:7a:82:49:8d:3d:8c:aa:96:9f:69:43:
4e:ec:cd:5b:42:78:08:3e:24:cb:de:b7:3c:9f:c4:
4e:0c:4e:f3:dd:df:d3:ed:1b:c4:24:63:e7:1d:eb:
01:e8:9c:8a:be:2a:73:db:a5:86:5f:5f:0b:65:d4:
08:09:43:07:9f:69:ea:13:95:4b:cf:89:75:ec:f3:
4a:79:87:b8:88:94:bc:4e:f4:a9:84:60:73:e6:90:
15:f4:f0:17:3b:d7:ff:67:af:61:0f:18:20:f1:09:
b8:7d:e3:f3:44:1b:9c:24:c0:28:bb:2b:a7:65:fe:
01:82:6f:2a:e1:28:b8:54:23:41:ad:2a:86:c5:d2:
cb:42:3d:78:bb:ae:8e:26:b2:03:d6:35:b6:7f:24:
ae:fb:90:bc:a2:47:55:ea:30:32:bb:70:ea:dd:8f:
af:25:0c:8f:dc:d4:8d:52:2f:4c:a6:a6:af:a5:76:
dd:2d:ca:14:f0:4b:c3:f1:63:08:10:ff:72:fc:c2:
dc:25:48:a7:8a:26:f6:2b:5c:76:6d:c2:ed:21:de:
c8:ba:0e:72:93:0c:51:10:9e:04:09:ad:50:cb:74:
fa:07:5f:fc:5e:35:e8:e6:4a:35:88:7d:bc:e2:82:
ca:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:65:A3:E2:F3:78:3D:A9:21:E2:9C:B8:66:84:63:7F:07:67:D5:04
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/fWWj4vN4Pakh4py4ZoRjfwdn1QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.77.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b0:db:d4:3b:e8:5d:fe:74:83:a5:42:3b:ec:df:07:77:65:
0c:dc:4c:a7:eb:07:37:f1:e0:0b:6b:40:b3:6d:66:54:2c:a9:
8c:dc:8b:69:ed:dd:1e:53:31:b5:fb:1e:62:25:03:4f:c4:b6:
9f:f1:70:f9:f1:5b:3a:3d:11:94:c9:b4:04:ac:52:85:cc:46:
92:d8:64:ff:4a:58:8a:d5:79:2a:37:51:50:ab:db:67:36:6e:
49:f7:4d:44:83:2f:d8:da:c7:28:73:8d:0b:89:54:51:c3:a6:
70:fd:02:1d:4f:a0:f1:f6:ee:5b:52:67:85:bc:3e:92:d2:5c:
3e:f8:0e:ef:2a:b8:fd:64:1b:56:c6:96:81:87:f1:84:9d:3a:
aa:fa:8a:2c:53:d4:a5:49:a1:a9:0b:33:5a:89:f5:27:70:6c:
71:d2:a9:8e:38:e6:4d:61:50:9a:2f:95:71:73:b5:a8:7a:af:
8b:53:a6:ca:f2:cd:fe:ea:ab:d5:03:3a:10:ba:df:48:02:d9:
e1:b8:2a:05:54:2d:15:0b:5e:b2:bf:cd:9b:4e:20:5f:f3:20:
ba:f1:33:6c:c3:e2:11:0c:1a:37:02:11:78:a6:16:33:52:a1:
76:1c:b8:b0:32:22:bd:30:7d:07:d8:05:cf:d2:6c:26:5e:92:
ca:56:a5:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaibRQF69DM/n/lCkQPbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNWQ2NDU3NDEyMTU2NzdiNzc0OGQxZmRlZmQ0MTYyMDdh
ZGIxMmQwHhcNMjUwMTAxMTk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDY1YTNlMmYzNzgzZGE5MjFlMjljYjg2Njg0NjM3ZjA3NjdkNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23FZtSkqpm3w9i0/0ZLX1IQGeoJJ
jT2MqpafaUNO7M1bQngIPiTL3rc8n8RODE7z3d/T7RvEJGPnHesB6JyKvipz26WG
X18LZdQICUMHn2nqE5VLz4l17PNKeYe4iJS8TvSphGBz5pAV9PAXO9f/Z69hDxgg
8Qm4fePzRBucJMAouyunZf4Bgm8q4Si4VCNBrSqGxdLLQj14u66OJrID1jW2fySu
+5C8okdV6jAyu3Dq3Y+vJQyP3NSNUi9MpqavpXbdLcoU8EvD8WMIEP9y/MLcJUin
iib2K1x2bcLtId7Iug5ykwxREJ4ECa1Qy3T6B1/8XjXo5ko1iH284oLKHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1lo+LzeD2pIeKcuGaEY38HZ9UEMB8GA1UdIwQY
MBaAFEBdZFdBIVZ3t3SNH979QWIHrbEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDkt
NDQwZGQwMTJiMTQxLzEvZldXajR2TjRQYWtoNHB5NFpvUmpmd2RuMVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni80M2Q4MzAtOTgxMS00NTk5LTgzNDktNDQwZGQwMTJiMTQx
LzEvUUYxa1YwRWhWbmUzZEkwZjN2MUJZZ2V0c1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQhNMA0G
CSqGSIb3DQEBCwUAA4IBAQAgsNvUO+hd/nSDpUI77N8Hd2UM3Eyn6wc38eALa0Cz
bWZULKmM3Itp7d0eUzG1+x5iJQNPxLaf8XD58Vs6PRGUybQErFKFzEaS2GT/SliK
1XkqN1FQq9tnNm5J901Egy/Y2scoc40LiVRRw6Zw/QIdT6Dx9u5bUmeFvD6S0lw+
+A7vKrj9ZBtWxpaBh/GEnTqq+oosU9SlSaGpCzNaifUncGxx0qmOOOZNYVCaL5Vx
c7Woeq+LU6bK8s3+6qvVAzoQut9IAtnhuCoFVC0VC16yv82bTiBf8yC68TNsw+IR
DBo3AhF4phYzUqF2HLiwMiK9MH0H2AXP0mwmXpLKVqUS
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:01 2025 by rpki-client