Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/sawpGpcuf4-n5sEtCqSKyL_QY1k.roa
File: sawpGpcuf4-n5sEtCqSKyL_QY1k.roa (raw, json)
Hash identifier: rDJzyr7M43rxz6yNHIvnYuFcQB38wF5tetYlXAU536M=
Subject key identifier: B1:AC:29:1A:97:2E:7F:8F:A7:E6:C1:2D:0A:A4:8A:C8:BF:D0:63:59
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0194481F4F45A19DA6AA544BBBEE10FDB2E3
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/sawpGpcuf4-n5sEtCqSKyL_QY1k.roa
Signing time: Wed 08 Jan 2025 22:53:19 +0000
ROA not before: Wed 08 Jan 2025 22:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60223
IP address blocks: 195.96.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:48:1f:4f:45:a1:9d:a6:aa:54:4b:bb:ee:10:fd:b2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 8 22:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1ac291a972e7f8fa7e6c12d0aa48ac8bfd06359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:b2:26:1b:42:10:15:29:db:6e:95:76:fd:
15:6a:7e:ea:cd:89:d7:37:b3:48:37:78:0f:30:1b:
3b:6b:f4:4d:e4:f9:3d:1c:17:17:fe:83:0e:fb:0a:
f9:f7:2d:12:c9:2b:66:16:53:6b:b7:b0:e3:8b:41:
2c:c8:c8:e3:61:4d:f9:04:67:42:47:41:17:98:f8:
ca:0c:c2:a0:b0:90:11:79:ea:4a:ae:b9:4e:44:72:
11:36:9a:b2:55:ca:4f:2b:76:df:93:25:1a:0d:7c:
29:50:1d:81:a1:d1:ff:3b:ab:1e:5c:92:2e:92:d8:
f5:2d:12:ce:02:e9:cc:8f:5d:02:92:4f:a1:10:c3:
40:ed:07:cc:f1:27:99:a6:e6:d6:43:22:d4:01:59:
9e:32:78:5b:52:99:f3:8b:ea:5a:ec:f0:f0:b6:5a:
0e:68:a8:a1:74:a0:31:24:15:ea:fb:11:b1:80:83:
07:9a:cf:d0:69:3a:45:de:e3:db:a3:a9:a0:ad:0d:
ef:87:e2:32:8e:5f:14:b3:b3:f9:f8:68:08:f8:b5:
bd:48:b6:f3:fc:f1:4e:a3:d9:15:af:03:45:25:e5:
4b:d0:9a:dd:69:df:14:26:15:83:6d:08:d1:ed:91:
af:f3:67:51:da:30:8d:23:43:f4:65:65:01:64:a6:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:29:1A:97:2E:7F:8F:A7:E6:C1:2D:0A:A4:8A:C8:BF:D0:63:59
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/sawpGpcuf4-n5sEtCqSKyL_QY1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.129.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:9f:f0:22:48:0a:fb:3b:cb:b6:b3:40:66:0e:5c:5f:47:3b:
5d:1f:29:aa:54:12:98:f3:c9:ab:94:ec:42:b2:b7:3e:d4:21:
19:51:01:e7:ea:37:95:3b:2b:d9:c3:da:9a:39:9a:2a:9f:b5:
a4:1c:92:ef:e8:e9:82:a0:76:dd:98:62:56:03:75:aa:5d:81:
98:43:6f:1b:78:3a:1a:80:01:50:38:e9:f3:22:90:5d:4f:61:
fa:f2:b8:f6:c7:10:e6:62:69:b4:cb:5c:fd:5e:b8:99:57:0f:
e7:de:ab:2a:fd:f7:d7:d3:68:54:e3:74:76:a1:85:b3:d8:e5:
92:bc:3c:0e:3e:cb:0a:4b:c0:04:d6:58:cd:e4:d3:99:25:39:
07:54:79:f3:31:1a:44:b8:5e:5d:a5:1a:da:8d:e2:f4:78:25:
7a:5e:57:db:41:93:a5:2c:7d:f1:d4:c4:47:5d:86:5d:6d:2f:
b9:c3:26:c5:69:b1:e1:93:52:8e:08:0c:bc:90:ca:90:a6:5a:
d0:b6:af:07:05:a0:09:59:f9:53:5b:11:75:ff:a6:18:90:01:
9e:a4:be:2f:f3:ce:81:f2:aa:04:d5:c1:f1:dd:b3:3e:04:a7:
0e:b9:e9:00:b7:e4:e3:1a:99:79:44:fd:b0:21:e4:e6:98:6a:
33:3a:bf:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRIH09FoZ2mqlRLu+4Q/bLjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjUwMTA4MjI1MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWFjMjkxYTk3MmU3ZjhmYTdlNmMxMmQwYWE0OGFjOGJmZDA2MzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06yJhtCEBUp226Vdv0Van7qzYnX
N7NIN3gPMBs7a/RN5Pk9HBcX/oMO+wr59y0SyStmFlNrt7Dji0EsyMjjYU35BGdC
R0EXmPjKDMKgsJAReepKrrlORHIRNpqyVcpPK3bfkyUaDXwpUB2BodH/O6seXJIu
ktj1LRLOAunMj10Ckk+hEMNA7QfM8SeZpubWQyLUAVmeMnhbUpnzi+pa7PDwtloO
aKihdKAxJBXq+xGxgIMHms/QaTpF3uPbo6mgrQ3vh+Iyjl8Us7P5+GgI+LW9SLbz
/PFOo9kVrwNFJeVL0Jrdad8UJhWDbQjR7ZGv82dR2jCNI0P0ZWUBZKYV6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGsKRqXLn+Pp+bBLQqkisi/0GNZMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvc2F3cEdwY3VmNC1uNXNFdENxU0t5TF9RWTFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CBMA0G
CSqGSIb3DQEBCwUAA4IBAQDKn/AiSAr7O8u2s0BmDlxfRztdHymqVBKY88mrlOxC
src+1CEZUQHn6jeVOyvZw9qaOZoqn7WkHJLv6OmCoHbdmGJWA3WqXYGYQ28beDoa
gAFQOOnzIpBdT2H68rj2xxDmYmm0y1z9XriZVw/n3qsq/ffX02hU43R2oYWz2OWS
vDwOPssKS8AE1ljN5NOZJTkHVHnzMRpEuF5dpRrajeL0eCV6XlfbQZOlLH3x1MRH
XYZdbS+5wybFabHhk1KOCAy8kMqQplrQtq8HBaAJWflTWxF1/6YYkAGepL4v886B
8qoE1cHx3bM+BKcOuekAt+TjGpl5RP2wIeTmmGozOr9P
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:13:25 2025 by rpki-client