Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa
File: W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa (raw, json)
Hash identifier: 1ojxt/gCQbbmS26YV73zKnO5/4dtGXpP+YX1jufGKFE=
Subject key identifier: 5B:82:6F:45:61:CC:E1:CF:6E:1E:DB:83:88:66:D6:6D:F5:BA:FE:86
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 0194282788E5B303B046F712847BEBBDE384
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa
Signing time: Thu 02 Jan 2025 17:54:27 +0000
ROA not before: Thu 02 Jan 2025 17:54:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1072
IP address blocks: 193.118.169.0/24 maxlen: 24
193.118.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:88:e5:b3:03:b0:46:f7:12:84:7b:eb:bd:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Jan 2 17:54:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b826f4561cce1cf6e1edb838866d66df5bafe86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:e0:bc:5b:98:e8:93:63:d7:26:82:09:f2:
a7:df:e5:88:f1:ae:2a:f1:f4:b5:ba:b5:88:93:94:
c6:76:f5:b4:cd:70:f9:9b:8d:c6:11:e9:b8:9a:9f:
d4:f0:14:ae:c6:37:53:b2:f6:10:2f:fd:a9:04:b4:
9f:3f:23:f6:52:c1:d5:e8:a1:cb:3f:fb:72:5e:7f:
6a:0c:a7:b6:6d:e5:e5:ef:f4:f1:71:a1:6a:4b:ef:
12:d5:cf:fa:48:97:fd:89:3a:a9:16:6c:7f:b2:f2:
47:2a:4f:06:2a:f0:fe:3d:8e:ac:23:4f:c6:9a:43:
08:f6:60:72:31:2a:e9:59:70:59:56:c0:49:07:bc:
c5:7f:86:65:2f:3b:74:21:76:27:7f:87:d9:09:1d:
4d:df:05:93:47:3b:33:c9:14:28:71:d9:d5:97:91:
e2:85:dd:a7:3a:67:3e:18:b3:cb:0d:35:ec:99:d5:
0b:0f:7e:6b:57:21:33:fb:1f:e0:bf:77:b4:f3:6b:
d2:53:9d:21:52:a7:59:8e:40:88:43:b1:92:98:52:
d0:83:4e:da:84:93:33:30:cf:43:5e:84:69:b3:24:
4b:53:28:f8:59:0f:f8:da:3a:0a:60:38:f3:0b:c6:
61:15:37:5c:97:6f:7d:90:bd:25:c4:60:e2:cc:27:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:6F:45:61:CC:E1:CF:6E:1E:DB:83:88:66:D6:6D:F5:BA:FE:86
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.169.0-193.118.170.255
Signature Algorithm: sha256WithRSAEncryption
4d:3e:be:8e:08:92:29:6b:eb:c5:32:1e:fd:b8:e4:db:c8:ca:
e5:c1:c7:e0:cf:60:e8:7b:78:0c:51:7c:44:e8:0a:87:f3:e2:
13:cd:ef:f5:65:a2:ac:d8:d7:3c:df:be:fd:25:d6:b2:a0:ce:
0a:86:98:84:a2:fb:71:4e:43:fe:23:e0:19:69:b8:a0:4a:8d:
e1:da:5e:b3:11:e3:77:09:68:72:8d:41:36:4e:c6:6c:65:3d:
25:8c:62:29:8d:55:fa:66:16:e8:c6:58:36:9c:0e:c1:e0:d4:
51:0c:c3:16:5d:c6:e6:87:57:dd:1b:35:91:1f:54:7b:64:87:
66:e4:6f:83:33:f7:81:2b:28:33:e4:f0:e3:6e:dd:60:c1:f1:
11:0b:2a:78:d9:5d:1d:b8:ad:58:ec:8c:a1:a5:24:e9:45:af:
9b:9c:8b:5e:74:68:d6:34:66:fc:77:30:0f:5a:75:f9:6f:d7:
7d:e9:6b:9a:22:ad:04:f0:2f:3b:27:1a:33:fb:b5:0a:cf:c5:
35:31:da:20:cc:bd:ee:22:cf:57:a7:38:ad:d2:2e:f7:6b:fc:
4d:46:58:93:92:00:38:73:9d:33:88:b6:31:8d:e9:db:e8:4b:
5f:64:3d:f3:e4:16:64:c7:a1:82:12:0e:4d:50:a3:58:e0:71:
f7:e0:9b:68
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQoJ4jlswOwRvcShHvrveOEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjUwMTAyMTc1NDI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjgyNmY0NTYxY2NlMWNmNmUxZWRiODM4ODY2ZDY2ZGY1YmFmZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie7gvFuY6JNj1yaCCfKn3+WI8a4q
8fS1urWIk5TGdvW0zXD5m43GEem4mp/U8BSuxjdTsvYQL/2pBLSfPyP2UsHV6KHL
P/tyXn9qDKe2beXl7/TxcaFqS+8S1c/6SJf9iTqpFmx/svJHKk8GKvD+PY6sI0/G
mkMI9mByMSrpWXBZVsBJB7zFf4ZlLzt0IXYnf4fZCR1N3wWTRzszyRQocdnVl5Hi
hd2nOmc+GLPLDTXsmdULD35rVyEz+x/gv3e082vSU50hUqdZjkCIQ7GSmFLQg07a
hJMzMM9DXoRpsyRLUyj4WQ/42joKYDjzC8ZhFTdcl299kL0lxGDizCf6sQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFuCb0VhzOHPbh7bg4hm1m31uv6GMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvVzRKdlJXSE00Yzl1SHR1RGlHYldiZlc2X29ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBdqkD
BADBdqowDQYJKoZIhvcNAQELBQADggEBAE0+vo4Ikilr68UyHv245NvIyuXBx+DP
YOh7eAxRfEToCofz4hPN7/VloqzY1zzfvv0l1rKgzgqGmISi+3FOQ/4j4BlpuKBK
jeHaXrMR43cJaHKNQTZOxmxlPSWMYimNVfpmFujGWDacDsHg1FEMwxZdxuaHV90b
NZEfVHtkh2bkb4Mz94ErKDPk8ONu3WDB8RELKnjZXR24rVjsjKGlJOlFr5uci150
aNY0Zvx3MA9adflv133pa5oirQTwLzsnGjP7tQrPxTUx2iDMve4iz1enOK3SLvdr
/E1GWJOSADhznTOItjGN6dvoS19kPfPkFmTHoYISDk1Qo1jgcffgm2g=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:48 2025 by rpki-client