Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa
File: lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa (raw, json)
Hash identifier: yGaK09dhA4d1XHm7tuZO0sTpyctbGTSJ/ciNb0ty54Q=
Subject key identifier: 97:05:A4:EA:06:03:7C:F8:13:8B:0D:48:D4:51:FE:72:9A:07:9B:EE
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 0194266B451045D6BE83D07F704B7928E16A
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa
Signing time: Thu 02 Jan 2025 09:49:11 +0000
ROA not before: Thu 02 Jan 2025 09:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61207
IP address blocks: 212.16.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:45:10:45:d6:be:83:d0:7f:70:4b:79:28:e1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Jan 2 09:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9705a4ea06037cf8138b0d48d451fe729a079bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:30:b8:a6:02:6b:53:58:3c:6f:c5:3a:68:
7f:de:54:cc:cf:c9:59:14:53:ac:1f:23:7a:a0:fd:
e3:4e:cc:a8:a5:3e:b1:d4:a4:c1:63:da:82:18:fa:
77:64:47:81:3b:58:be:be:48:fa:23:72:67:50:0a:
51:44:d0:f6:39:c2:e9:e0:6d:0d:d0:96:3f:8e:6b:
a7:11:0f:f5:55:65:86:fa:81:6c:95:c9:a4:d9:12:
fe:e4:b7:54:9a:4b:0b:b1:a6:ea:39:c2:30:8d:8c:
8c:e4:d3:2a:ba:c2:2e:32:53:6e:3e:5f:4d:04:b0:
af:3e:db:cf:39:51:7e:04:2b:60:a9:d3:24:0c:f8:
d6:1b:c2:dd:87:7d:88:7d:97:66:ed:10:c6:28:0e:
b6:33:67:1a:e4:7c:2f:4d:dc:85:96:78:ed:27:be:
a4:3e:28:53:65:16:24:5a:40:25:c1:83:45:59:13:
fd:5e:97:72:68:c3:07:49:61:16:55:80:ed:24:12:
31:24:ab:f2:e8:29:c0:a0:90:c3:09:1b:7f:36:24:
84:88:66:87:b8:73:5a:82:ff:e1:0c:a2:9c:b8:14:
47:67:21:ed:ec:54:4a:dc:4b:7d:c2:fe:8c:77:5e:
5b:37:b0:6d:72:33:60:a2:f6:3d:56:f1:11:f3:3f:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:05:A4:EA:06:03:7C:F8:13:8B:0D:48:D4:51:FE:72:9A:07:9B:EE
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/lwWk6gYDfPgTiw1I1FH-cpoHm-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.184.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:22:4b:16:58:3a:22:8d:04:b5:d8:79:44:e3:50:38:dd:76:
db:6d:53:6c:30:d6:16:7c:b0:73:e3:de:15:07:7c:36:9b:5f:
b0:7c:fc:5b:e3:fc:f9:35:01:6a:27:2e:dc:20:d8:e7:a8:d0:
2f:f2:12:0d:2f:d7:e4:99:02:4a:3b:7d:79:11:a0:16:43:7b:
f3:ec:5c:97:55:f3:4c:f7:65:94:46:6d:a9:e5:a3:76:29:a1:
f2:8c:f6:9b:07:75:55:ef:68:97:62:13:c9:4f:74:91:56:07:
e9:93:9d:62:67:43:b6:1b:f1:91:f2:6a:d5:25:d8:93:7b:a8:
db:45:3b:77:3c:ab:e6:0f:45:fb:e6:71:b4:0d:4e:0c:09:cf:
01:7d:1d:90:50:4b:75:7d:4a:54:ad:1b:b3:39:fc:d1:8f:04:
31:63:e3:bc:62:88:7f:2b:87:91:d4:a4:7b:b2:a1:11:78:13:
60:b6:c7:8c:e6:59:b0:62:d4:b8:00:88:f4:3c:55:b0:28:45:
bd:e2:36:63:0a:85:7d:37:ff:1f:e1:17:1d:b5:29:1c:8c:da:
a6:32:e2:e8:4b:ff:a8:4b:12:af:0c:a6:f2:41:24:ef:78:5b:
99:d9:2d:60:38:65:ea:7f:95:62:1d:71:c6:36:40:69:7c:e2:
be:a3:ba:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma0UQRda+g9B/cEt5KOFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjUwMTAyMDk0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzA1YTRlYTA2MDM3Y2Y4MTM4YjBkNDhkNDUxZmU3MjlhMDc5YmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12EwuKYCa1NYPG/FOmh/3lTMz8lZ
FFOsHyN6oP3jTsyopT6x1KTBY9qCGPp3ZEeBO1i+vkj6I3JnUApRRND2OcLp4G0N
0JY/jmunEQ/1VWWG+oFslcmk2RL+5LdUmksLsabqOcIwjYyM5NMqusIuMlNuPl9N
BLCvPtvPOVF+BCtgqdMkDPjWG8Ldh32IfZdm7RDGKA62M2ca5HwvTdyFlnjtJ76k
PihTZRYkWkAlwYNFWRP9XpdyaMMHSWEWVYDtJBIxJKvy6CnAoJDDCRt/NiSEiGaH
uHNagv/hDKKcuBRHZyHt7FRK3Et9wv6Md15bN7BtcjNgovY9VvER8z+MXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJcFpOoGA3z4E4sNSNRR/nKaB5vuMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEvbHdXazZnWURmUGdUaXcxSTFGSC1jcG9IbS00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1BC4MA0G
CSqGSIb3DQEBCwUAA4IBAQAMIksWWDoijQS12HlE41A43XbbbVNsMNYWfLBz494V
B3w2m1+wfPxb4/z5NQFqJy7cINjnqNAv8hINL9fkmQJKO315EaAWQ3vz7FyXVfNM
92WURm2p5aN2KaHyjPabB3VV72iXYhPJT3SRVgfpk51iZ0O2G/GR8mrVJdiTe6jb
RTt3PKvmD0X75nG0DU4MCc8BfR2QUEt1fUpUrRuzOfzRjwQxY+O8Yoh/K4eR1KR7
sqEReBNgtseM5lmwYtS4AIj0PFWwKEW94jZjCoV9N/8f4RcdtSkcjNqmMuLoS/+o
SxKvDKbyQSTveFuZ2S1gOGXqf5ViHXHGNkBpfOK+o7qg
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:29 2025 by rpki-client