Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/f1wBKCsXK0uC2nsel0GIe5b0KZk.roa
File: f1wBKCsXK0uC2nsel0GIe5b0KZk.roa (raw, json)
Hash identifier: G9RLd4HtWguPLDAL1JjtSWQmaqJ7AZGAeDkABfQH220=
Subject key identifier: 7F:5C:01:28:2B:17:2B:4B:82:DA:7B:1E:97:41:88:7B:96:F4:29:99
Certificate issuer: /CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Certificate serial: 01942823B4E50E3BF64CB9F0577D4AFE7CD6
Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/f1wBKCsXK0uC2nsel0GIe5b0KZk.roa
Signing time: Thu 02 Jan 2025 17:50:16 +0000
ROA not before: Thu 02 Jan 2025 17:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206561
IP address blocks: 185.173.188.0/24 maxlen: 24
185.173.189.0/24 maxlen: 24
185.173.190.0/24 maxlen: 24
185.173.191.0/24 maxlen: 24
2a0f:46c0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:b4:e5:0e:3b:f6:4c:b9:f0:57:7d:4a:fe:7c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Validity
Not Before: Jan 2 17:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f5c01282b172b4b82da7b1e9741887b96f42999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:45:b4:fe:73:20:35:92:4c:3f:1a:f6:4b:
32:ca:eb:73:60:36:b1:fa:45:a8:17:39:d4:f7:80:
c4:65:b7:72:5d:38:7d:23:8f:94:25:14:c6:ac:f3:
41:6e:c3:9f:3c:80:b3:1a:fa:b3:fe:37:d8:f0:b8:
ef:2d:c8:b1:fa:93:10:35:46:00:bd:2a:11:bf:74:
bb:8a:d4:c5:4b:11:c0:91:33:71:10:de:73:7f:51:
75:e6:f8:f5:61:d0:e7:d1:90:51:87:47:de:85:18:
68:8d:df:ff:cb:28:27:3f:1f:94:73:35:e4:7c:f8:
dd:7c:fc:6c:eb:a7:84:fc:ce:26:a3:32:50:e2:c0:
b3:fc:03:40:08:5c:68:39:f0:fd:3d:63:c6:3a:40:
a2:70:2e:fb:4e:8c:17:ef:d8:91:51:9a:20:fb:ee:
2e:bc:24:5f:bc:bf:34:c9:72:76:a0:0a:81:bb:ef:
f5:c4:28:bf:c3:e3:8c:fd:29:19:7f:e5:2b:ef:99:
aa:f2:56:25:58:a9:ab:ed:65:45:c2:53:f2:7c:81:
e3:4a:7e:bb:be:86:88:d5:38:92:ab:d9:15:2e:22:
64:f7:f4:a9:98:57:1b:9d:45:00:ac:6d:79:7c:f2:
21:b8:6e:1f:63:28:df:09:b7:f1:ff:fd:07:41:c1:
0d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5C:01:28:2B:17:2B:4B:82:DA:7B:1E:97:41:88:7B:96:F4:29:99
X509v3 Authority Key Identifier:
keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/f1wBKCsXK0uC2nsel0GIe5b0KZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.188.0/22
IPv6:
2a0f:46c0::/29
Signature Algorithm: sha256WithRSAEncryption
31:aa:4f:ef:82:5b:2d:d4:8c:5b:23:d2:cd:d1:5d:38:33:28:
22:c5:15:e7:ac:95:1f:53:70:e3:57:25:64:41:4d:f6:ff:95:
b2:3f:28:5d:43:ba:99:45:c1:68:05:f9:a1:cd:21:69:6e:a2:
70:0d:c7:9c:6a:b7:01:49:3b:7c:9e:ea:b1:c7:c9:dd:46:a7:
f8:23:6b:98:06:62:5e:49:dc:2b:a5:69:47:95:4c:7a:d8:2b:
cc:6e:51:6e:99:43:b3:43:de:50:f7:b9:07:5f:86:59:db:5a:
f0:ce:26:c0:ae:ca:06:e0:c4:26:74:1f:6e:2c:b5:67:69:99:
66:f9:79:c8:2b:44:6c:7c:2f:65:12:ea:93:2a:35:64:5c:73:
10:fb:b5:15:da:a9:38:59:47:40:78:55:af:3d:40:88:01:22:
ef:09:d5:8b:a4:f1:a5:10:18:9f:a9:39:11:b8:c2:40:0c:67:
13:46:1c:d7:7e:63:df:84:ad:9c:e9:fc:d5:be:fc:45:f7:f1:
38:50:5b:7d:0c:81:c0:f2:ba:aa:9f:1d:53:05:2d:73:43:4b:
55:56:3a:ea:cc:02:73:6f:f8:bb:22:16:ed:a0:3e:79:fa:6a:
5e:18:20:9b:f9:eb:72:bf:28:68:79:c5:61:f6:a5:49:5f:96:
4f:eb:c9:89
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoI7TlDjv2TLnwV31K/nzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2UzNDFjMWUxNGQzNWE3NDk2Y2U3ODI4ZTMwNTVmODYz
OTM1Y2YwHhcNMjUwMTAyMTc1MDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjVjMDEyODJiMTcyYjRiODJkYTdiMWU5NzQxODg3Yjk2ZjQyOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oBFtP5zIDWSTD8a9ksyyutzYDax
+kWoFznU94DEZbdyXTh9I4+UJRTGrPNBbsOfPICzGvqz/jfY8LjvLcix+pMQNUYA
vSoRv3S7itTFSxHAkTNxEN5zf1F15vj1YdDn0ZBRh0fehRhojd//yygnPx+UczXk
fPjdfPxs66eE/M4mozJQ4sCz/ANACFxoOfD9PWPGOkCicC77TowX79iRUZog++4u
vCRfvL80yXJ2oAqBu+/1xCi/w+OM/SkZf+Ur75mq8lYlWKmr7WVFwlPyfIHjSn67
voaI1TiSq9kVLiJk9/SpmFcbnUUArG15fPIhuG4fYyjfCbfx//0HQcEN1QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH9cASgrFytLgtp7HpdBiHuW9CmZMB8GA1UdIwQY
MBaAFME+NBweFNNadJbOeCjjBV+GOTXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNGFiZjMtNGFmMy00MTgwLTgzNDAt
YjEzYTFmMjBkMTVmLzEvZjF3QktDc1hLMHVDMm5zZWwwR0llNWIwS1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNGFiZjMtNGFmMy00MTgwLTgzNDAtYjEzYTFmMjBkMTVm
LzEvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua28MA0E
AgACMAcDBQMqD0bAMA0GCSqGSIb3DQEBCwUAA4IBAQAxqk/vglst1IxbI9LN0V04
MygixRXnrJUfU3DjVyVkQU32/5WyPyhdQ7qZRcFoBfmhzSFpbqJwDcecarcBSTt8
nuqxx8ndRqf4I2uYBmJeSdwrpWlHlUx62CvMblFumUOzQ95Q97kHX4ZZ21rwzibA
rsoG4MQmdB9uLLVnaZlm+XnIK0RsfC9lEuqTKjVkXHMQ+7UV2qk4WUdAeFWvPUCI
ASLvCdWLpPGlEBifqTkRuMJADGcTRhzXfmPfhK2c6fzVvvxF9/E4UFt9DIHA8rqq
nx1TBS1zQ0tVVjrqzAJzb/i7IhbtoD55+mpeGCCb+etyvyhoecVh9qVJX5ZP68mJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:20 2025 by rpki-client