Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/CwwBxU06yQHOSN9FW346av3eJSg.roa
File: CwwBxU06yQHOSN9FW346av3eJSg.roa (raw, json)
Hash identifier: sN559HrGwcrwAx9RFEK1aPRGFezwF0x6CyfsT0lApC0=
Subject key identifier: 0B:0C:01:C5:4D:3A:C9:01:CE:48:DF:45:5B:7E:3A:6A:FD:DE:25:28
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0195A2C22F1B2107326A581F6993FC641064
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/CwwBxU06yQHOSN9FW346av3eJSg.roa
Signing time: Mon 17 Mar 2025 06:19:49 +0000
ROA not before: Mon 17 Mar 2025 06:19:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 185.217.194.0/24 maxlen: 24
194.116.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a2:c2:2f:1b:21:07:32:6a:58:1f:69:93:fc:64:10:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Mar 17 06:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b0c01c54d3ac901ce48df455b7e3a6afdde2528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:44:9d:1d:14:91:23:c9:1d:9d:a7:b2:7f:
86:7a:c1:ca:e3:49:5b:f5:0c:34:82:12:3f:93:70:
61:a8:34:44:ce:6e:b1:97:86:24:52:06:39:be:88:
55:72:1b:e7:f1:93:f0:5a:8c:19:8d:f6:5e:b9:cd:
3d:f5:4a:eb:42:4d:e3:9b:a9:cb:d2:4d:93:6e:5a:
e8:64:9c:e9:08:9b:e3:bf:c0:61:40:43:ac:3b:a6:
7c:bb:f3:5d:fe:c4:d3:78:e3:fa:60:7e:27:2d:be:
d3:b3:59:01:75:b2:7a:25:35:21:ab:52:0b:d6:cb:
5f:cc:48:b4:3a:00:40:a0:af:d1:c4:80:15:35:c0:
e9:59:25:21:37:b8:24:eb:bf:b9:67:2d:f4:e8:2c:
af:7b:88:c6:34:45:27:15:34:ce:c6:c3:5a:50:11:
21:78:a3:dc:eb:b7:22:eb:d6:e7:99:55:79:72:ae:
f8:5f:1a:df:40:94:a1:ed:d9:2f:a0:f0:f4:08:41:
ac:82:7b:d5:74:52:f6:c9:c5:ed:aa:78:5a:81:be:
1b:7f:0e:1e:80:cd:ad:b7:43:5a:ca:db:b5:9d:9b:
90:cb:b3:1d:90:01:5a:40:c8:c7:ff:79:3f:eb:72:
92:5d:45:32:75:0d:3f:d5:07:73:af:c6:83:62:ef:
be:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:01:C5:4D:3A:C9:01:CE:48:DF:45:5B:7E:3A:6A:FD:DE:25:28
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/CwwBxU06yQHOSN9FW346av3eJSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.194.0/24
194.116.235.0/24
Signature Algorithm: sha256WithRSAEncryption
99:8c:ac:a8:94:bd:6e:f7:36:9a:d1:30:be:5f:a9:5c:e7:1e:
e5:62:ee:eb:50:b7:97:c0:d0:16:27:fc:b2:87:5f:bb:97:c6:
e2:b5:d7:23:93:09:99:a6:7b:b0:1f:57:87:e1:de:aa:fd:a6:
a4:1e:49:92:81:32:c7:77:f2:ba:6f:9b:0a:7e:74:3c:9f:1e:
83:f0:2d:76:5e:bb:43:8a:d8:58:4b:66:5b:c4:9c:c6:82:d7:
92:8d:d9:61:e9:8e:03:1d:d5:7b:ee:8a:c2:45:c7:f8:29:ec:
85:c7:d8:2b:db:46:ac:b0:b3:26:60:fa:a1:5d:42:cf:25:e4:
d3:6f:4c:4a:a9:fa:11:20:d9:24:1f:c7:b4:d0:f8:8c:dd:95:
b4:07:e3:7e:5a:31:35:d7:f0:c5:e4:67:a9:56:1a:7b:cf:23:
a1:d0:00:ad:2c:76:f5:48:72:d5:e1:e9:ec:01:72:11:6a:3a:
27:d7:30:62:21:32:b5:2d:27:ac:d1:a2:aa:7b:4b:d9:58:09:
53:f9:d5:b5:49:f5:c7:41:56:6c:2a:28:c9:9f:84:ea:09:60:
d2:ad:0b:02:21:8a:a6:7b:14:7d:aa:a5:66:9e:00:48:19:d3:
ac:ef:b8:c5:2f:f4:0c:65:37:2e:ec:e7:cb:e2:a9:c5:f8:39:
12:d3:92:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWiwi8bIQcyalgfaZP8ZBBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjUwMzE3MDYxOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjBjMDFjNTRkM2FjOTAxY2U0OGRmNDU1YjdlM2E2YWZkZGUyNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2xEnR0UkSPJHZ2nsn+GesHK40lb
9Qw0ghI/k3BhqDREzm6xl4YkUgY5vohVchvn8ZPwWowZjfZeuc099UrrQk3jm6nL
0k2TblroZJzpCJvjv8BhQEOsO6Z8u/Nd/sTTeOP6YH4nLb7Ts1kBdbJ6JTUhq1IL
1stfzEi0OgBAoK/RxIAVNcDpWSUhN7gk67+5Zy306Cyve4jGNEUnFTTOxsNaUBEh
eKPc67ci69bnmVV5cq74XxrfQJSh7dkvoPD0CEGsgnvVdFL2ycXtqnhagb4bfw4e
gM2tt0Naytu1nZuQy7MdkAFaQMjH/3k/63KSXUUydQ0/1Qdzr8aDYu++LwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAsMAcVNOskBzkjfRVt+Omr93iUoMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvQ3d3QnhVMDZ5UUhPU045RlczNDZhdjNlSlNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudnCAwQA
wnTrMA0GCSqGSIb3DQEBCwUAA4IBAQCZjKyolL1u9zaa0TC+X6lc5x7lYu7rULeX
wNAWJ/yyh1+7l8bitdcjkwmZpnuwH1eH4d6q/aakHkmSgTLHd/K6b5sKfnQ8nx6D
8C12XrtDithYS2ZbxJzGgteSjdlh6Y4DHdV77orCRcf4KeyFx9gr20assLMmYPqh
XULPJeTTb0xKqfoRINkkH8e00PiM3ZW0B+N+WjE11/DF5GepVhp7zyOh0ACtLHb1
SHLV4ensAXIRajon1zBiITK1LSes0aKqe0vZWAlT+dW1SfXHQVZsKijJn4TqCWDS
rQsCIYqmexR9qqVmngBIGdOs77jFL/QMZTcu7OfL4qnF+DkS05J8
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:38:27 2025 by rpki-client