Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Wv2I90ZUdwYyGG9nKMWiQTLMCpg.roa
File: Wv2I90ZUdwYyGG9nKMWiQTLMCpg.roa (raw, json)
Hash identifier: QH2ZNBstXj5WpkUvusu/H0mIqFsmkL4wNuuxCKXsp8Y=
Subject key identifier: 5A:FD:88:F7:46:54:77:06:32:18:6F:67:28:C5:A2:41:32:CC:0A:98
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01939BB8D81659FE98584B79F2368312B53B
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Wv2I90ZUdwYyGG9nKMWiQTLMCpg.roa
Signing time: Fri 06 Dec 2024 11:26:42 +0000
ROA not before: Fri 06 Dec 2024 11:26:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201320
IP address blocks: 194.48.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9b:b8:d8:16:59:fe:98:58:4b:79:f2:36:83:12:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Dec 6 11:26:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5afd88f74654770632186f6728c5a24132cc0a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:94:36:cb:9d:90:c8:40:5a:e5:18:60:8b:
4d:ab:62:1e:87:88:4f:45:b0:c0:bb:30:82:28:44:
3d:01:c2:5c:e5:9a:8f:79:65:ef:7e:43:22:70:a7:
28:b2:20:15:d7:3a:a3:a4:0d:1d:e7:d4:6b:61:56:
57:80:65:76:57:50:23:6d:d3:b7:ac:3b:bf:d1:0e:
00:f3:09:46:13:5b:04:94:1f:d7:b0:ba:4c:79:e7:
62:fd:99:39:11:0c:9f:f2:f9:58:80:91:1c:b2:e5:
f9:c5:a7:4c:e7:1f:4e:e6:c5:22:59:ec:18:97:64:
33:01:39:ed:c6:a3:6b:4d:40:ad:03:fd:5d:84:61:
5b:83:64:91:21:97:83:d9:e3:c8:54:51:ac:43:b8:
63:2c:c8:f2:43:0c:50:6d:73:ca:ee:a9:e4:55:77:
25:77:3f:0e:b4:25:d1:ff:3b:72:ef:4f:7c:b7:23:
0c:b7:8f:63:19:c2:cc:6d:94:93:fc:0d:91:f6:9b:
27:0e:1f:7a:8c:cc:b2:29:f8:74:b5:c8:69:83:d4:
87:22:a7:44:4b:a7:53:fb:59:42:49:c4:0c:57:53:
f5:a3:2c:e6:24:f2:ca:c2:d8:4a:ae:04:3d:46:eb:
92:08:70:48:d3:8a:da:23:d6:f3:47:1c:84:06:28:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:88:F7:46:54:77:06:32:18:6F:67:28:C5:A2:41:32:CC:0A:98
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/Wv2I90ZUdwYyGG9nKMWiQTLMCpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.93.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a4:b5:88:8b:ab:b7:bb:df:46:7b:63:bd:88:d9:22:f8:26:
de:26:22:09:a1:d0:5f:81:1f:5f:0d:6c:4b:d4:b4:25:f1:af:
31:aa:bb:a4:82:08:ae:05:b5:49:e7:93:ba:1c:90:f6:a5:7e:
6a:be:94:4f:fe:9f:15:0a:31:d3:d0:ba:82:f6:a5:08:27:63:
33:15:cc:15:7a:3c:d0:45:04:05:8b:32:2f:d0:5d:e1:c1:10:
d9:da:f7:a3:a5:a0:03:7b:96:3d:10:1b:b4:1c:d1:08:74:24:
68:12:5f:44:f2:0f:50:06:3f:a7:f9:40:d6:70:ac:83:37:62:
f4:aa:e9:61:59:ec:4f:2c:81:8c:4b:51:42:03:51:2f:71:67:
99:1f:5e:a3:01:cc:76:ba:a3:e0:80:10:db:0d:0d:65:97:82:
6c:3a:9e:0f:54:a1:5c:9e:cd:a5:f1:c9:8f:80:73:a6:07:50:
5f:65:bd:bd:92:3e:04:0f:98:29:f5:ef:2e:25:b1:bb:e5:eb:
86:e0:d0:f3:92:bd:c9:92:43:d4:83:b5:12:38:3a:74:94:81:
b4:9e:0e:9c:dd:4f:1e:f2:a5:a1:9b:ee:6b:bc:89:9b:4a:09:
61:c2:03:45:e9:ca:ff:aa:db:f6:f2:a4:6e:00:5c:39:f8:7f:
80:23:f6:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZObuNgWWf6YWEt58jaDErU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjQxMjA2MTEyNjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWZkODhmNzQ2NTQ3NzA2MzIxODZmNjcyOGM1YTI0MTMyY2MwYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzOUNsudkMhAWuUYYItNq2Ieh4hP
RbDAuzCCKEQ9AcJc5ZqPeWXvfkMicKcosiAV1zqjpA0d59RrYVZXgGV2V1AjbdO3
rDu/0Q4A8wlGE1sElB/XsLpMeedi/Zk5EQyf8vlYgJEcsuX5xadM5x9O5sUiWewY
l2QzATntxqNrTUCtA/1dhGFbg2SRIZeD2ePIVFGsQ7hjLMjyQwxQbXPK7qnkVXcl
dz8OtCXR/zty7098tyMMt49jGcLMbZST/A2R9psnDh96jMyyKfh0tchpg9SHIqdE
S6dT+1lCScQMV1P1oyzmJPLKwthKrgQ9RuuSCHBI04raI9bzRxyEBijq3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFr9iPdGVHcGMhhvZyjFokEyzAqYMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvV3YySTkwWlVkd1l5R0c5bktNV2lRVExNQ3BnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjBdMA0G
CSqGSIb3DQEBCwUAA4IBAQCHpLWIi6u3u99Ge2O9iNki+CbeJiIJodBfgR9fDWxL
1LQl8a8xqrukggiuBbVJ55O6HJD2pX5qvpRP/p8VCjHT0LqC9qUIJ2MzFcwVejzQ
RQQFizIv0F3hwRDZ2vejpaADe5Y9EBu0HNEIdCRoEl9E8g9QBj+n+UDWcKyDN2L0
qulhWexPLIGMS1FCA1EvcWeZH16jAcx2uqPggBDbDQ1ll4JsOp4PVKFcns2l8cmP
gHOmB1BfZb29kj4ED5gp9e8uJbG75euG4NDzkr3JkkPUg7USODp0lIG0ng6c3U8e
8qWhm+5rvImbSglhwgNF6cr/qtv28qRuAFw5+H+AI/a5
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:27:37 2025 by rpki-client