Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa
File: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (raw, json)
Hash identifier: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=
Subject key identifier: 73:09:AA:D7:02:7A:02:45:CA:E8:F7:34:A4:ED:98:49:78:E6:C8:CE
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 0194214440B9754E32D6B40CC97C62C0B433
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa
Signing time: Wed 01 Jan 2025 09:48:28 +0000
ROA not before: Wed 01 Jan 2025 09:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198028
IP address blocks: 194.12.51.0/24 maxlen: 24
194.12.52.0/24 maxlen: 24
194.12.53.0/24 maxlen: 24
194.12.54.0/24 maxlen: 24
194.12.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:40:b9:75:4e:32:d6:b4:0c:c9:7c:62:c0:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Jan 1 09:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7309aad7027a0245cae8f734a4ed984978e6c8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:35:83:99:93:59:9a:bb:90:f1:40:2b:de:
9f:f0:6a:4d:58:68:0c:5a:cf:90:20:32:ad:05:41:
6a:60:ad:47:e5:82:be:df:38:d9:b5:e9:37:f7:30:
32:09:51:d4:f0:5d:96:95:23:18:14:fd:ad:6c:ee:
73:14:b9:74:fa:73:d0:42:44:78:b8:bd:0c:04:25:
9d:d1:58:34:72:c0:5c:b2:15:2c:50:5d:af:3e:0e:
86:e8:50:c2:22:7e:bb:fd:66:e2:80:e9:f3:7f:c4:
33:48:3c:b2:dc:c4:13:b6:5f:c9:25:89:d0:5d:cc:
0b:27:96:a2:b5:9f:f2:cc:00:a2:db:19:88:b3:c9:
6f:0c:b7:6c:d0:33:78:b4:93:43:f2:af:b8:4d:8e:
d0:03:a3:2d:d6:b2:b4:5f:a5:5e:c7:98:34:69:b4:
46:53:1d:c5:9a:27:a3:76:fd:33:d2:f8:f0:d9:0f:
8a:bb:ff:6f:1b:f6:92:c5:80:10:c5:66:2d:a3:ce:
ef:7a:60:2a:9c:00:24:e9:3b:b6:e3:59:f7:1a:6d:
a4:ac:5b:2a:31:fc:32:87:2b:e2:ea:c5:53:0d:49:
11:e9:c3:f6:b9:e0:a7:0e:45:71:24:21:db:36:cb:
05:d8:f1:97:9d:fc:1f:94:81:fa:95:fd:f6:a0:a1:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:09:AA:D7:02:7A:02:45:CA:E8:F7:34:A4:ED:98:49:78:E6:C8:CE
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.12.51.0-194.12.55.255
Signature Algorithm: sha256WithRSAEncryption
21:33:d6:bb:89:a0:a0:c4:f2:9c:e3:8d:8a:e9:e1:9e:8c:24:
35:8a:00:48:6d:f5:ab:c6:46:a4:81:a7:4f:79:c2:af:60:ed:
f5:d2:91:e4:2d:3e:5b:92:d3:be:e8:9f:aa:22:e8:0f:cb:aa:
a5:51:c7:88:a7:c0:1a:a3:7c:4c:b7:b7:94:1d:de:42:11:66:
da:c4:23:1e:b2:ff:f7:6a:d3:43:62:14:f5:48:35:e6:9c:cf:
0c:85:d6:4a:bc:cc:ff:05:de:73:7e:a9:7e:33:06:8c:9b:20:
aa:50:42:6f:e6:01:80:be:07:f2:a6:b4:c1:d2:5d:51:41:9f:
51:db:17:87:9f:40:1a:c4:f6:f8:5a:ca:e0:34:b9:bc:84:f6:
32:88:b5:e3:fe:90:27:be:8d:08:7d:d0:86:eb:30:40:f1:27:
20:fe:1f:16:6f:d1:0d:e7:3f:42:44:8e:c0:07:52:38:4f:fb:
00:1a:17:12:e1:ba:70:84:0d:a5:53:52:94:87:8c:c5:55:fc:
0b:a7:8a:6d:77:23:6d:39:3b:f1:33:7c:d8:f8:96:ef:8c:24:
00:bc:df:61:36:76:ae:01:ea:5d:3d:5b:19:ec:1c:89:cb:ad:
bf:c0:84:70:f9:c7:92:58:7d:3d:d6:6c:89:29:66:52:13:3d:
f7:53:07:20
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQhREC5dU4y1rQMyXxiwLQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjUwMTAxMDk0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzA5YWFkNzAyN2EwMjQ1Y2FlOGY3MzRhNGVkOTg0OTc4ZTZjOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnU1g5mTWZq7kPFAK96f8GpNWGgM
Ws+QIDKtBUFqYK1H5YK+3zjZtek39zAyCVHU8F2WlSMYFP2tbO5zFLl0+nPQQkR4
uL0MBCWd0Vg0csBcshUsUF2vPg6G6FDCIn67/WbigOnzf8QzSDyy3MQTtl/JJYnQ
XcwLJ5aitZ/yzACi2xmIs8lvDLds0DN4tJND8q+4TY7QA6Mt1rK0X6Vex5g0abRG
Ux3Fmiejdv0z0vjw2Q+Ku/9vG/aSxYAQxWYto87vemAqnAAk6Tu241n3Gm2krFsq
Mfwyhyvi6sVTDUkR6cP2ueCnDkVxJCHbNssF2PGXnfwflIH6lf32oKEDTwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHMJqtcCegJFyuj3NKTtmEl45sjOMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvY3dtcTF3SjZBa1hLNlBjMHBPMllTWGpteU00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCDDMD
BAPCDDAwDQYJKoZIhvcNAQELBQADggEBACEz1ruJoKDE8pzjjYrp4Z6MJDWKAEht
9avGRqSBp095wq9g7fXSkeQtPluS077on6oi6A/LqqVRx4inwBqjfEy3t5Qd3kIR
ZtrEIx6y//dq00NiFPVINeaczwyF1kq8zP8F3nN+qX4zBoybIKpQQm/mAYC+B/Km
tMHSXVFBn1HbF4efQBrE9vhayuA0ubyE9jKIteP+kCe+jQh90IbrMEDxJyD+HxZv
0Q3nP0JEjsAHUjhP+wAaFxLhunCEDaVTUpSHjMVV/Aunim13I205O/EzfNj4lu+M
JAC832E2dq4B6l09WxnsHInLrb/AhHD5x5JYfT3WbIkpZlITPfdTByA=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:58:30 2025 by rpki-client