Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/wDk7LmI6cHqgPwoPiReork5n7TM.roa
File: wDk7LmI6cHqgPwoPiReork5n7TM.roa (raw, json)
Hash identifier: f4jrE7YABghrHsA4bobpIqsKuhp5LdVQIAwVcPaNdyg=
Subject key identifier: C0:39:3B:2E:62:3A:70:7A:A0:3F:0A:0F:89:17:A8:AE:4E:67:ED:33
Certificate issuer: /CN=26c672da72a34cc282adc40f282676de75117654
Certificate serial: 019445FBD468B1A74A14A7F04FF65CEEFB4A
Authority key identifier: 26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/wDk7LmI6cHqgPwoPiReork5n7TM.roa
Signing time: Wed 08 Jan 2025 12:55:19 +0000
ROA not before: Wed 08 Jan 2025 12:55:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 31.88.0.0/15 maxlen: 24
218.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:45:fb:d4:68:b1:a7:4a:14:a7:f0:4f:f6:5c:ee:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c672da72a34cc282adc40f282676de75117654
Validity
Not Before: Jan 8 12:55:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0393b2e623a707aa03f0a0f8917a8ae4e67ed33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:a3:7d:28:20:ca:99:d5:e1:7a:6e:03:d3:
ab:0c:1d:dd:c1:37:10:2f:ad:cb:65:0c:d9:7e:4d:
32:d7:7c:a8:74:ed:a5:6d:2c:94:f0:8b:c4:b9:ba:
14:be:4a:99:bf:05:65:4b:e7:4d:34:b7:fa:d1:1e:
5a:1d:26:6d:9d:ef:9e:2a:f3:38:ab:80:f6:6a:6f:
d9:aa:cb:0d:e9:d2:df:68:d2:f3:e0:8d:25:7b:e4:
26:60:ac:8e:da:df:0d:3e:84:3f:95:d9:fb:c2:41:
bf:66:d9:7a:60:38:90:96:9a:26:93:e0:43:fb:a2:
e5:1f:25:81:10:4f:98:65:70:f7:ee:bf:d0:c7:82:
ca:41:fa:2c:96:c9:ec:e5:e0:28:e3:8c:c7:e6:66:
b1:b3:16:1c:99:c4:0b:0d:0d:75:f7:27:f6:b3:e3:
7d:eb:e4:c2:a3:c7:0e:4b:32:5b:6b:78:0b:23:3c:
8d:0c:68:8f:aa:0d:95:99:ff:db:2c:da:4c:52:19:
b7:43:25:e7:8e:14:9b:02:c1:58:da:ad:1c:f9:ca:
15:9f:5b:55:e6:3c:bb:39:71:15:fc:08:be:9f:dd:
84:fd:ab:74:ad:cf:10:54:72:e1:15:6b:14:8a:41:
75:bd:60:9e:bf:43:13:a6:8d:8b:fc:bc:06:a6:c7:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:39:3B:2E:62:3A:70:7A:A0:3F:0A:0F:89:17:A8:AE:4E:67:ED:33
X509v3 Authority Key Identifier:
keyid:26:C6:72:DA:72:A3:4C:C2:82:AD:C4:0F:28:26:76:DE:75:11:76:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsZy2nKjTMKCrcQPKCZ23nURdlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/wDk7LmI6cHqgPwoPiReork5n7TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7fe015-5cd5-4429-8b7d-22d027197712/1/JsZy2nKjTMKCrcQPKCZ23nURdlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.88.0.0/15
218.254.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2c:4e:a6:12:76:51:1a:42:e9:fb:ad:4f:69:ee:57:6e:a6:13:
94:bb:d3:4a:71:47:ad:2c:60:e0:3e:a7:a1:0d:b9:d2:3f:67:
a1:14:36:3d:bd:0e:9c:8b:a0:6a:25:b8:95:75:34:ff:90:d4:
d2:ed:16:8b:08:0e:70:ef:0a:42:98:e1:53:10:e7:5d:00:75:
4c:0b:c2:e9:a3:1c:ba:7c:5c:0e:98:d2:f4:77:1d:98:0d:27:
1a:14:f9:02:8a:0a:03:ed:9f:3d:98:af:43:82:43:84:2b:4a:
7a:97:95:e7:90:05:1a:e0:c3:47:bb:96:8c:9e:07:fa:95:75:
f8:a5:67:fe:05:db:0b:b3:f1:2f:54:d7:9f:13:fa:3a:62:ce:
64:46:7b:71:bc:da:54:77:d8:1b:8f:be:b8:85:69:fe:05:d8:
d0:0b:e4:fa:6c:a4:c9:49:67:a1:82:53:d9:5b:98:20:3a:9b:
5e:26:09:92:df:27:e9:65:1f:a8:4b:89:a7:0b:d7:98:c1:ac:
8c:6e:44:ee:27:80:62:c3:1e:57:39:6c:7b:ba:72:70:91:ea:
10:d3:d3:46:8c:86:e8:0d:a0:eb:a5:46:82:12:02:c8:90:1f:
91:76:70:a1:bd:d9:e6:89:97:d2:ab:b9:cd:62:b7:b3:6b:ba:
86:ee:be:68
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZRF+9RosadKFKfwT/Zc7vtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YzY3MmRhNzJhMzRjYzI4MmFkYzQwZjI4MjY3NmRlNzUx
MTc2NTQwHhcNMjUwMTA4MTI1NTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDM5M2IyZTYyM2E3MDdhYTAzZjBhMGY4OTE3YThhZTRlNjdlZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1SjfSggypnV4XpuA9OrDB3dwTcQ
L63LZQzZfk0y13yodO2lbSyU8IvEuboUvkqZvwVlS+dNNLf60R5aHSZtne+eKvM4
q4D2am/ZqssN6dLfaNLz4I0le+QmYKyO2t8NPoQ/ldn7wkG/Ztl6YDiQlpomk+BD
+6LlHyWBEE+YZXD37r/Qx4LKQfoslsns5eAo44zH5maxsxYcmcQLDQ119yf2s+N9
6+TCo8cOSzJba3gLIzyNDGiPqg2Vmf/bLNpMUhm3QyXnjhSbAsFY2q0c+coVn1tV
5jy7OXEV/Ai+n92E/at0rc8QVHLhFWsUikF1vWCev0MTpo2L/LwGpsehiwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFMA5Oy5iOnB6oD8KD4kXqK5OZ+0zMB8GA1UdIwQY
MBaAFCbGctpyo0zCgq3EDygmdt51EXZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZmUwMTUtNWNkNS00NDI5LThiN2Qt
MjJkMDI3MTk3NzEyLzEvd0RrN0xtSTZjSHFnUHdvUGlSZW9yazVuN1RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83ZmUwMTUtNWNkNS00NDI5LThiN2QtMjJkMDI3MTk3NzEy
LzEvSnNaeTJuS2pUTUtDcmNRUEtDWjIzblVSZGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMBH1gDAwDa
/jANBgkqhkiG9w0BAQsFAAOCAQEALE6mEnZRGkLp+61Pae5XbqYTlLvTSnFHrSxg
4D6noQ250j9noRQ2Pb0OnIugaiW4lXU0/5DU0u0WiwgOcO8KQpjhUxDnXQB1TAvC
6aMcunxcDpjS9HcdmA0nGhT5AooKA+2fPZivQ4JDhCtKepeV55AFGuDDR7uWjJ4H
+pV1+KVn/gXbC7PxL1TXnxP6OmLOZEZ7cbzaVHfYG4++uIVp/gXY0Avk+mykyUln
oYJT2VuYIDqbXiYJkt8n6WUfqEuJpwvXmMGsjG5E7ieAYsMeVzlse7pycJHqENPT
RoyG6A2g66VGghICyJAfkXZwob3Z5omX0qu5zWK3s2u6hu6+aA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:47:50 2025 by rpki-client