Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/wIBTBVQwXEpg1VcEfToXz9-SzCM.roa
File: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (raw, json)
Hash identifier: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=
Subject key identifier: C0:80:53:05:54:30:5C:4A:60:D5:57:04:7D:3A:17:CF:DF:92:CC:23
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 01941FFA93ECFD16DDF6D0CE1767F9FDDF16
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/wIBTBVQwXEpg1VcEfToXz9-SzCM.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50464
IP address blocks: 195.191.76.0/23 maxlen: 24
195.191.76.196/32 maxlen: 32
195.191.76.210/32 maxlen: 32
195.191.77.99/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:93:ec:fd:16:dd:f6:d0:ce:17:67:f9:fd:df:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c080530554305c4a60d557047d3a17cfdf92cc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:c3:ef:40:ec:e5:3c:13:a8:9c:34:c5:4e:
22:57:54:82:48:51:84:ab:41:51:12:82:86:c8:2e:
23:d1:0d:63:e1:bc:04:44:08:14:77:1c:9a:c1:12:
cd:76:d5:d7:1f:d8:bd:30:69:dd:7c:b4:2f:af:18:
13:af:cc:ee:c7:c1:2d:41:3f:ba:cd:8f:47:67:15:
7d:f0:7c:ef:1d:a3:73:cd:55:b1:74:d8:a1:48:6e:
81:3c:57:14:78:bd:77:a9:0b:8d:85:b1:01:3c:0a:
d5:a7:93:60:53:07:e3:50:5d:4b:75:f6:1f:0c:d2:
1e:56:7d:34:ae:e7:53:c9:ee:c2:26:24:7f:31:3c:
51:45:93:88:08:b3:ad:ea:d7:3d:67:d4:87:b7:7b:
fd:5e:9b:4a:89:7a:23:f7:60:d0:c5:38:8a:9c:ef:
f0:f7:69:f4:52:8a:7d:7c:76:68:f8:f8:c9:14:0e:
eb:f0:4e:63:29:2f:53:b1:75:31:8e:2a:94:57:69:
f0:66:49:f7:7e:5d:ea:02:5b:d7:10:4f:fc:22:ee:
a7:e2:0e:0b:f4:88:c6:0e:8c:24:ff:7f:2c:fa:ba:
85:a5:a5:16:65:fe:37:3b:16:e6:94:e6:f3:fb:1d:
96:3e:e0:e9:3b:cf:ed:16:9f:18:34:b4:70:97:ac:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:80:53:05:54:30:5C:4A:60:D5:57:04:7D:3A:17:CF:DF:92:CC:23
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/wIBTBVQwXEpg1VcEfToXz9-SzCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.76.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:12:cc:42:93:8c:5b:8a:48:e6:88:fe:38:fc:c8:9f:a2:0d:
a4:4b:1d:37:ac:d9:dc:81:76:05:36:a9:ac:90:22:d6:cc:c3:
7b:cd:93:fe:7b:f2:c3:00:02:b2:ee:92:d3:2c:f0:c7:fc:eb:
e3:dd:dc:f2:2f:38:05:68:a8:32:f8:47:e3:e4:0f:4b:7f:8a:
b2:02:10:7a:31:7d:e4:cc:d5:6d:6b:51:0a:a4:29:bf:fd:cc:
7f:78:81:d4:6a:69:34:84:06:55:b0:66:01:be:3e:10:ca:73:
58:06:9d:7e:25:a0:17:f7:03:04:2c:f9:68:a8:5b:44:ca:c8:
17:98:6f:16:58:04:fd:16:58:af:e4:b4:52:11:1c:77:bb:4c:
f7:3b:1b:5b:62:ed:df:c0:a9:b4:f4:8a:50:75:cf:00:84:72:
82:78:34:aa:f0:96:bb:10:3a:01:de:f1:b1:97:1f:09:32:7f:
31:f8:63:3e:93:96:47:5e:12:a9:e8:8e:8d:38:ff:45:01:9c:
57:fd:d2:9d:b1:51:dc:66:9b:60:cd:06:77:c9:b7:d8:47:89:
4f:e1:56:7f:31:af:34:51:3b:62:e6:0f:9f:9f:69:8c:ed:a1:
70:90:41:e3:12:6e:e1:42:05:1d:6b:1c:94:2d:f5:b8:09:30:
91:05:8a:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+pPs/Rbd9tDOF2f5/d8WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw
YTViNmMwHhcNMjUwMTAxMDM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDgwNTMwNTU0MzA1YzRhNjBkNTU3MDQ3ZDNhMTdjZmRmOTJjYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA423D70Ds5TwTqJw0xU4iV1SCSFGE
q0FREoKGyC4j0Q1j4bwERAgUdxyawRLNdtXXH9i9MGndfLQvrxgTr8zux8EtQT+6
zY9HZxV98HzvHaNzzVWxdNihSG6BPFcUeL13qQuNhbEBPArVp5NgUwfjUF1LdfYf
DNIeVn00rudTye7CJiR/MTxRRZOICLOt6tc9Z9SHt3v9XptKiXoj92DQxTiKnO/w
92n0Uop9fHZo+PjJFA7r8E5jKS9TsXUxjiqUV2nwZkn3fl3qAlvXEE/8Iu6n4g4L
9IjGDowk/38s+rqFpaUWZf43OxbmlObz+x2WPuDpO8/tFp8YNLRwl6yG3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMCAUwVUMFxKYNVXBH06F8/fkswjMB8GA1UdIwQY
MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt
MTFkZmZlMTA4MTQ3LzEvd0lCVEJWUXdYRXBnMVZjRWZUb1h6OS1TekNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3
LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79MMA0G
CSqGSIb3DQEBCwUAA4IBAQAMEsxCk4xbikjmiP44/Mifog2kSx03rNncgXYFNqms
kCLWzMN7zZP+e/LDAAKy7pLTLPDH/Ovj3dzyLzgFaKgy+Efj5A9Lf4qyAhB6MX3k
zNVta1EKpCm//cx/eIHUamk0hAZVsGYBvj4QynNYBp1+JaAX9wMELPloqFtEysgX
mG8WWAT9Fliv5LRSERx3u0z3OxtbYu3fwKm09IpQdc8AhHKCeDSq8Ja7EDoB3vGx
lx8JMn8x+GM+k5ZHXhKp6I6NOP9FAZxX/dKdsVHcZptgzQZ3ybfYR4lP4VZ/Ma80
UTti5g+fn2mM7aFwkEHjEm7hQgUdaxyULfW4CTCRBYry
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:34 2025 by rpki-client