Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/RR-wG56YXYGUEbsQFd9GOjHnKvM.roa
File: RR-wG56YXYGUEbsQFd9GOjHnKvM.roa (raw, json)
Hash identifier: eG7mgkU6tN6hBwmEUuDYJD2Lxu/DlOxJUe50nzg9em4=
Subject key identifier: 45:1F:B0:1B:9E:98:5D:81:94:11:BB:10:15:DF:46:3A:31:E7:2A:F3
Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9
Certificate serial: 019422FB263A10BBD80D0A0EB4134D3D4A5B
Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/RR-wG56YXYGUEbsQFd9GOjHnKvM.roa
Signing time: Wed 01 Jan 2025 17:47:52 +0000
ROA not before: Wed 01 Jan 2025 17:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 213.171.3.0/24 maxlen: 24
213.171.4.0/24 maxlen: 24
213.171.5.0/24 maxlen: 24
213.171.6.0/24 maxlen: 24
213.171.7.0/24 maxlen: 24
213.171.8.0/24 maxlen: 24
213.171.9.0/24 maxlen: 24
213.171.10.0/24 maxlen: 24
213.171.12.0/24 maxlen: 24
213.171.14.0/24 maxlen: 24
213.171.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:26:3a:10:bb:d8:0d:0a:0e:b4:13:4d:3d:4a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=451fb01b9e985d819411bb1015df463a31e72af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:0a:52:28:60:50:61:76:4c:72:19:2f:e0:
0c:d5:cb:cb:0c:f8:98:94:4c:b5:ad:a0:9c:5c:2e:
65:92:e9:2b:45:2f:22:db:18:8d:c4:ae:24:d5:5e:
9a:90:62:16:77:6e:61:22:9a:0c:a5:cb:dd:4e:9e:
2b:15:6f:6b:86:80:fc:d9:9d:e2:42:80:f1:24:0b:
d9:0e:07:53:82:f2:51:84:b4:af:78:f2:7f:da:ee:
11:3f:65:a1:84:1c:7d:11:9e:9d:12:2b:e6:49:57:
8c:69:33:5e:9e:89:d0:fd:d1:1c:51:62:6d:08:a2:
a7:6b:85:7d:1f:27:65:61:7a:23:f0:b3:f0:d1:75:
c9:a0:c0:0c:21:42:e5:d7:bc:32:0e:18:2a:76:50:
6f:1a:fd:2c:64:94:70:29:79:fc:f5:eb:f2:85:97:
65:75:99:13:8d:97:39:51:35:33:cf:54:c8:1c:1e:
06:be:be:f8:3c:70:fa:29:2c:2c:2d:7d:35:83:67:
d9:da:32:7a:a8:c1:c8:ea:32:a6:27:cc:cd:5d:29:
f1:80:03:d5:c6:c9:b9:f6:d3:e6:ba:37:02:17:a5:
3b:19:b8:65:cb:d7:29:bb:f9:cd:c8:57:83:a4:22:
69:5e:3d:51:ec:35:75:42:8e:10:19:8f:45:dd:d0:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1F:B0:1B:9E:98:5D:81:94:11:BB:10:15:DF:46:3A:31:E7:2A:F3
X509v3 Authority Key Identifier:
keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/RR-wG56YXYGUEbsQFd9GOjHnKvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.171.3.0-213.171.10.255
213.171.12.0/24
213.171.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:39:ed:16:83:e9:a3:94:90:07:12:1c:8b:55:47:98:a6:29:
17:67:d7:0b:83:8b:1c:99:3c:21:0a:35:9b:d3:0b:52:97:e6:
fe:9f:aa:11:5f:22:25:b4:fd:92:f1:de:f0:d8:51:ee:ac:bb:
b6:a7:bd:89:6c:e7:0a:24:68:ea:c0:33:26:a9:07:ad:e8:7f:
75:a4:a7:ae:56:79:b0:09:c6:2f:3a:43:03:e1:32:de:fe:34:
e1:43:b5:da:59:ac:33:be:89:39:47:7f:e6:9b:c3:3d:a8:e3:
79:b7:2d:c3:d5:92:b6:b1:75:8b:af:cc:5b:d5:97:00:e7:89:
20:fb:71:8a:14:7f:9e:2b:b4:be:c1:b0:80:2b:b6:31:7f:59:
31:76:1f:c7:c6:b3:30:c4:d9:43:c5:71:36:15:a0:7f:cd:b2:
df:df:55:d1:22:63:38:42:51:0a:1b:9d:2a:4a:33:99:66:b4:
c0:a9:9c:6a:cc:7e:7f:45:85:72:29:06:99:39:30:8c:66:35:
3c:a4:e3:d1:1e:0f:cc:3e:92:5b:c4:80:d1:bd:5f:de:bc:a0:
8b:37:b9:35:b3:a6:1c:f9:73:34:f3:9f:12:66:1a:30:8e:e9:
09:32:72:39:9e:ff:a2:1c:e2:eb:17:35:4b:23:12:70:fb:79:
2e:6d:64:d3
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZQi+yY6ELvYDQoOtBNNPUpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4ODg2MDA3ZGExNzMwYjA3NzBkODYwNGRiNzNkMTJmZDI2
NGYzZjkwHhcNMjUwMTAxMTc0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTFmYjAxYjllOTg1ZDgxOTQxMWJiMTAxNWRmNDYzYTMxZTcyYWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnkKUihgUGF2THIZL+AM1cvLDPiY
lEy1raCcXC5lkukrRS8i2xiNxK4k1V6akGIWd25hIpoMpcvdTp4rFW9rhoD82Z3i
QoDxJAvZDgdTgvJRhLSvePJ/2u4RP2WhhBx9EZ6dEivmSVeMaTNenonQ/dEcUWJt
CKKna4V9HydlYXoj8LPw0XXJoMAMIULl17wyDhgqdlBvGv0sZJRwKXn89evyhZdl
dZkTjZc5UTUzz1TIHB4Gvr74PHD6KSwsLX01g2fZ2jJ6qMHI6jKmJ8zNXSnxgAPV
xsm59tPmujcCF6U7Gbhly9cpu/nNyFeDpCJpXj1R7DV1Qo4QGY9F3dCb/wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFEUfsBuemF2BlBG7EBXfRjox5yrzMB8GA1UdIwQY
MBaAFBiIYAfaFzCwdw2GBNtz0S/SZPP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEt
MTY5YzgzNmJkNmIwLzEvUlItd0c1NllYWUdVRWJzUUZkOUdPakhuS3ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEtMTY5YzgzNmJkNmIw
LzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADVqwMD
BADVqwoDBADVqwwDBAHVqw4wDQYJKoZIhvcNAQELBQADggEBAKU57RaD6aOUkAcS
HItVR5imKRdn1wuDixyZPCEKNZvTC1KX5v6fqhFfIiW0/ZLx3vDYUe6su7anvYls
5wokaOrAMyapB63of3Wkp65WebAJxi86QwPhMt7+NOFDtdpZrDO+iTlHf+abwz2o
43m3LcPVkraxdYuvzFvVlwDniSD7cYoUf54rtL7BsIArtjF/WTF2H8fGszDE2UPF
cTYVoH/Nst/fVdEiYzhCUQobnSpKM5lmtMCpnGrMfn9FhXIpBpk5MIxmNTyk49Ee
D8w+klvEgNG9X968oIs3uTWzphz5czTznxJmGjCO6Qkycjme/6Ic4usXNUsjEnD7
eS5tZNM=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:11:08 2025 by rpki-client