Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wctQHW78Dkrjk5Nj0mMyiDO6opY.roa
File: wctQHW78Dkrjk5Nj0mMyiDO6opY.roa (raw, json)
Hash identifier: XIxii8XIPGwoj6MCViDpY5u/pog30KjRzo6A/wGuKGI=
Subject key identifier: C1:CB:50:1D:6E:FC:0E:4A:E3:93:93:63:D2:63:32:88:33:BA:A2:96
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F90BDC2709D0150B507B49B98EFD8
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wctQHW78Dkrjk5Nj0mMyiDO6opY.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48525
IP address blocks: 194.147.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:90:bd:c2:70:9d:01:50:b5:07:b4:9b:98:ef:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1cb501d6efc0e4ae3939363d263328833baa296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:61:3b:fe:fd:78:a2:dd:ef:cf:df:b6:f4:
06:9a:dc:79:f6:2f:fe:76:2b:1d:cf:0e:0f:85:6d:
af:1b:73:ed:16:44:7d:b0:4c:64:03:c5:f0:62:18:
fe:a0:93:e0:54:3e:bd:e3:33:35:23:e3:62:9d:e0:
0e:33:17:9e:41:a0:03:96:ee:81:81:08:50:64:7f:
e8:e8:0b:7a:5d:d6:56:05:d8:39:e9:50:bd:5c:94:
8c:a6:5c:de:81:aa:05:4f:ea:a1:dd:3a:e3:4b:70:
3f:f4:06:46:cc:d6:cc:35:55:b7:a3:82:32:b6:87:
7e:b6:8f:9e:1b:05:08:7a:92:2d:9d:9b:50:7a:df:
fc:13:d1:46:15:db:81:6f:45:55:f1:7e:b8:3d:74:
01:aa:e9:9a:f5:a4:e1:22:6d:e0:92:3c:68:49:d5:
4f:0c:d2:08:ab:3c:7f:d2:57:11:7b:50:a1:7b:69:
16:78:82:b3:b0:35:e3:c7:2b:db:33:0a:e2:76:6d:
3e:0d:de:42:a5:cd:14:99:90:c4:7e:c5:55:27:37:
f7:6c:d4:22:4e:f7:dd:17:6b:73:ad:0e:89:12:3c:
01:bc:9b:e5:04:96:7c:ee:66:7f:d8:54:7b:09:0c:
f8:93:27:e0:b0:7b:69:ff:27:2f:4e:ba:c1:b3:5c:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CB:50:1D:6E:FC:0E:4A:E3:93:93:63:D2:63:32:88:33:BA:A2:96
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wctQHW78Dkrjk5Nj0mMyiDO6opY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.110.0/23
Signature Algorithm: sha256WithRSAEncryption
87:58:ff:64:5d:b1:40:de:29:a2:d3:ab:5a:dd:f5:46:a0:30:
bd:8e:5f:2e:9d:e4:5d:7b:44:75:b5:55:57:5e:39:61:6a:47:
d1:5d:b7:74:29:cf:e0:6e:6a:c6:ad:db:2d:38:90:22:e9:37:
2b:a4:5b:de:90:c0:ea:cc:f7:42:19:2f:3c:ee:4a:f5:07:b2:
fe:bf:2b:bf:98:26:17:f6:55:29:c7:2d:8b:17:50:08:f8:6e:
f5:8b:e7:5a:e4:86:a3:1e:66:73:bc:47:be:f7:81:82:64:c5:
2b:35:c9:db:8e:b3:7e:07:0e:73:dd:44:be:e7:49:e3:4e:5e:
83:86:3a:8d:8f:84:c6:33:a6:3d:c2:4c:ff:d6:4c:43:60:89:
3c:c6:25:75:52:0b:70:de:8f:9f:25:9f:f5:81:8d:e3:66:47:
0b:fd:7f:9f:5a:59:6e:4b:8c:a0:81:ea:79:9e:f6:58:b8:f6:
ce:f7:f2:0b:ee:92:a6:45:35:c8:3e:9f:de:51:ec:b3:aa:72:
c9:32:55:30:65:1c:ea:70:5e:53:a7:17:e1:3d:18:4f:83:26:
c5:6c:9c:ad:f4:7c:ee:1d:85:c6:ae:3a:76:c8:1f:3d:72:1a:
d1:d4:2c:27:1a:2c:8f:30:7c:84:5a:7c:5c:e0:e6:30:7a:8d:
e6:e0:a4:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5C9wnCdAVC1B7SbmO/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWNiNTAxZDZlZmMwZTRhZTM5MzkzNjNkMjYzMzI4ODMzYmFhMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6BhO/79eKLd78/ftvQGmtx59i/+
disdzw4PhW2vG3PtFkR9sExkA8XwYhj+oJPgVD694zM1I+NineAOMxeeQaADlu6B
gQhQZH/o6At6XdZWBdg56VC9XJSMplzegaoFT+qh3TrjS3A/9AZGzNbMNVW3o4Iy
tod+to+eGwUIepItnZtQet/8E9FGFduBb0VV8X64PXQBquma9aThIm3gkjxoSdVP
DNIIqzx/0lcRe1Che2kWeIKzsDXjxyvbMwridm0+Dd5Cpc0UmZDEfsVVJzf3bNQi
TvfdF2tzrQ6JEjwBvJvlBJZ87mZ/2FR7CQz4kyfgsHtp/ycvTrrBs1w9GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHLUB1u/A5K45OTY9JjMogzuqKWMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvd2N0UUhXNzhEa3JqazVOajBtTXlpRE82b3BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwpNuMA0G
CSqGSIb3DQEBCwUAA4IBAQCHWP9kXbFA3imi06ta3fVGoDC9jl8uneRde0R1tVVX
XjlhakfRXbd0Kc/gbmrGrdstOJAi6TcrpFvekMDqzPdCGS887kr1B7L+vyu/mCYX
9lUpxy2LF1AI+G71i+da5IajHmZzvEe+94GCZMUrNcnbjrN+Bw5z3US+50njTl6D
hjqNj4TGM6Y9wkz/1kxDYIk8xiV1Ugtw3o+fJZ/1gY3jZkcL/X+fWlluS4yggep5
nvZYuPbO9/IL7pKmRTXIPp/eUeyzqnLJMlUwZRzqcF5TpxfhPRhPgybFbJyt9Hzu
HYXGrjp2yB89chrR1CwnGiyPMHyEWnxc4OYweo3m4KQ5
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:13:00 2025 by rpki-client