Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/NaHC5uyte6wsq4i6YhkiG09XqWk.roa
File: NaHC5uyte6wsq4i6YhkiG09XqWk.roa (raw, json)
Hash identifier: S7BnJyhzpRWM+pe+pRH+VWqjXq2cYljcWm4cTa2Cuag=
Subject key identifier: 35:A1:C2:E6:EC:AD:7B:AC:2C:AB:88:BA:62:19:22:1B:4F:57:A9:69
Certificate issuer: /CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Certificate serial: 019424457711F9868466D0B23EA5B8148BFA
Authority key identifier: 72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/NaHC5uyte6wsq4i6YhkiG09XqWk.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209094
IP address blocks: 5.182.188.0/24 maxlen: 24
2a0e:6400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:77:11:f9:86:84:66:d0:b2:3e:a5:b8:14:8b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=728c2bfd6bb503a01d018602bda152d734ed56f0
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35a1c2e6ecad7bac2cab88ba6219221b4f57a969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:a8:e8:11:6f:3f:b9:10:f2:dc:0c:d5:24:
c8:f5:89:ed:95:99:45:26:44:56:49:c8:c0:b8:94:
f1:be:eb:61:69:aa:d3:ea:83:72:e3:38:5c:57:0d:
d5:6a:81:76:d8:fe:85:b2:25:d4:72:4a:ee:e3:6c:
f7:a3:90:92:bb:95:3c:80:5a:cc:f9:05:5a:59:69:
83:39:e9:a7:da:31:74:a3:17:87:33:4f:d1:63:59:
52:67:76:7f:9c:b8:a8:ec:4f:91:27:00:10:37:34:
22:4e:a4:01:ba:aa:6d:7a:db:2f:9b:3c:be:64:a9:
7c:11:1b:a6:8d:3d:ca:fa:9d:22:11:60:45:e6:bf:
a6:8e:3a:53:da:b8:14:af:5e:3f:79:b2:5e:09:a1:
6b:f7:b5:ce:13:ce:96:8b:bb:24:25:7b:71:6a:67:
30:3d:a1:9c:5a:97:d8:74:a4:24:b0:7d:92:5b:ed:
ef:81:0f:cd:7f:41:02:c2:88:73:7b:a2:50:84:ba:
5b:e5:b9:55:15:0f:be:d9:ba:de:27:a8:bd:35:2e:
25:7c:3e:9b:a7:69:e5:ef:ff:c5:44:58:76:9a:00:
7d:16:b7:7b:82:41:ce:d1:a9:c7:9d:5a:f9:80:9d:
e0:ca:2f:be:b0:b9:3b:ce:24:8b:f6:c7:24:2f:5b:
41:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:C2:E6:EC:AD:7B:AC:2C:AB:88:BA:62:19:22:1B:4F:57:A9:69
X509v3 Authority Key Identifier:
keyid:72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/NaHC5uyte6wsq4i6YhkiG09XqWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.188.0/24
IPv6:
2a0e:6400::/32
Signature Algorithm: sha256WithRSAEncryption
9a:ac:32:c5:3c:f8:fe:c1:75:16:7d:d5:3a:76:3f:8f:13:8d:
ac:74:81:93:2f:57:bb:b4:bb:3c:e2:27:cc:da:34:e1:f6:92:
43:26:33:37:c7:c9:14:ee:8f:93:49:3a:6b:c4:0c:6a:87:eb:
bf:be:71:7a:c4:a8:8f:e7:03:00:d1:fa:e8:30:1e:cf:bc:eb:
07:5f:35:26:57:4e:3a:8a:32:33:fa:1d:43:0f:9b:63:0d:34:
c5:bb:79:dc:1f:3a:c4:46:62:4f:70:3e:e9:78:18:fa:5b:1d:
b0:0c:f5:7f:7f:90:83:62:2b:78:ac:2b:78:04:0c:c2:88:ea:
ed:e9:41:df:72:a9:27:2a:5d:07:ff:cd:c4:59:2c:4e:79:a3:
e6:d7:2e:83:8b:4d:de:8b:89:83:70:13:d1:6d:99:a0:b5:e8:
2c:3d:09:3e:3b:3e:72:73:1d:1a:88:a3:69:12:a3:4d:b8:46:
8a:e5:e0:8e:6c:41:e4:5b:95:f7:5a:c4:e1:88:41:a7:c1:56:
d3:80:3a:c5:e5:19:a8:88:2d:04:0a:9e:04:54:c7:da:c4:34:
a9:dd:3e:09:56:ae:6e:6c:e4:34:4d:8e:19:6e:09:b9:d2:fc:
04:a7:bc:10:9a:9a:37:fe:9a:14:35:05:58:00:9b:d0:be:94:
1c:79:ff:dd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQkRXcR+YaEZtCyPqW4FIv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyOGMyYmZkNmJiNTAzYTAxZDAxODYwMmJkYTE1MmQ3MzRl
ZDU2ZjAwHhcNMjUwMTAxMjM0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWExYzJlNmVjYWQ3YmFjMmNhYjg4YmE2MjE5MjIxYjRmNTdhOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXeo6BFvP7kQ8twM1STI9YntlZlF
JkRWScjAuJTxvuthaarT6oNy4zhcVw3VaoF22P6FsiXUckru42z3o5CSu5U8gFrM
+QVaWWmDOemn2jF0oxeHM0/RY1lSZ3Z/nLio7E+RJwAQNzQiTqQBuqptetsvmzy+
ZKl8ERumjT3K+p0iEWBF5r+mjjpT2rgUr14/ebJeCaFr97XOE86Wi7skJXtxamcw
PaGcWpfYdKQksH2SW+3vgQ/Nf0ECwohze6JQhLpb5blVFQ++2breJ6i9NS4lfD6b
p2nl7//FRFh2mgB9Frd7gkHO0anHnVr5gJ3gyi++sLk7ziSL9sckL1tBzQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDWhwubsrXusLKuIumIZIhtPV6lpMB8GA1UdIwQY
MBaAFHKMK/1rtQOgHQGGAr2hUtc07VbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY293cl9XdTFBNkFkQVlZQ3ZhRlMxelR0VnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82N2Y0MmUtNzA2Mi00MTEyLWFkNDIt
OTM0OWYxMGEyNjQ5LzEvTmFIQzV1eXRlNndzcTRpNlloa2lHMDlYcVdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS82N2Y0MmUtNzA2Mi00MTEyLWFkNDItOTM0OWYxMGEyNjQ5
LzEvY293cl9XdTFBNkFkQVlZQ3ZhRlMxelR0VnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQABba8MA0E
AgACMAcDBQAqDmQAMA0GCSqGSIb3DQEBCwUAA4IBAQCarDLFPPj+wXUWfdU6dj+P
E42sdIGTL1e7tLs84ifM2jTh9pJDJjM3x8kU7o+TSTprxAxqh+u/vnF6xKiP5wMA
0froMB7PvOsHXzUmV046ijIz+h1DD5tjDTTFu3ncHzrERmJPcD7peBj6Wx2wDPV/
f5CDYit4rCt4BAzCiOrt6UHfcqknKl0H/83EWSxOeaPm1y6Di03ei4mDcBPRbZmg
tegsPQk+Oz5ycx0aiKNpEqNNuEaK5eCObEHkW5X3WsThiEGnwVbTgDrF5RmoiC0E
Cp4EVMfaxDSp3T4JVq5ubOQ0TY4Zbgm50vwEp7wQmpo3/poUNQVYAJvQvpQcef/d
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:23 2025 by rpki-client