Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WK0LdDjEPnVjpdkGJ1resP7bkeQ.roa
File: WK0LdDjEPnVjpdkGJ1resP7bkeQ.roa (raw, json)
Hash identifier: k5U+omsrGk1vcZl/CEJiNVooQ5rxlHuGpPPry7ilFhk=
Subject key identifier: 58:AD:0B:74:38:C4:3E:75:63:A5:D9:06:27:5A:DE:B0:FE:DB:91:E4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195DB8A040558600F4FA1FB4CDA4FC74FE6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WK0LdDjEPnVjpdkGJ1resP7bkeQ.roa
Signing time: Fri 28 Mar 2025 06:56:50 +0000
ROA not before: Fri 28 Mar 2025 06:56:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 45.95.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:db:8a:04:05:58:60:0f:4f:a1:fb:4c:da:4f:c7:4f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 28 06:56:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58ad0b7438c43e7563a5d906275adeb0fedb91e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:66:72:12:cd:18:ea:94:3f:fe:54:e7:51:5f:
01:bb:27:e7:27:b4:86:a4:c5:75:23:30:e9:12:6f:
dc:5f:9e:c7:cc:8e:90:bf:0b:db:4a:4e:fd:4a:75:
5d:db:cb:b5:7f:37:15:ed:6f:e6:00:ff:0c:93:01:
14:52:0d:41:27:d3:de:5c:2d:2c:5c:ce:e3:61:8d:
8d:d5:c1:44:b6:ac:0a:4b:e3:91:d2:9b:62:ea:0e:
33:19:38:a3:a8:d8:f2:b1:f8:cf:42:99:7a:52:ed:
f9:1c:61:a9:d7:b2:9e:6f:99:b0:70:10:17:b3:3f:
6a:53:c5:23:82:05:62:60:ea:58:e9:a3:9d:29:85:
94:f1:24:63:14:f6:1f:a7:0e:be:09:bd:17:81:8f:
44:eb:49:f0:cb:70:41:ab:37:ad:e8:5f:0a:b1:54:
f9:af:c0:b1:ac:e6:aa:7d:ec:73:f3:cf:82:46:84:
28:cc:3a:b6:64:35:30:4e:4f:0d:95:4a:73:ee:cb:
b6:ed:ee:3a:a8:08:2a:f0:06:7f:b4:76:f9:4e:8f:
d3:ee:9d:c8:72:84:29:0e:e4:be:e6:6a:b1:89:06:
74:a8:76:e9:c2:e4:58:22:cf:dc:b8:e4:ef:e6:0d:
a8:83:13:d6:58:40:e9:87:2e:bb:01:52:d8:3d:9e:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:0B:74:38:C4:3E:75:63:A5:D9:06:27:5A:DE:B0:FE:DB:91:E4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WK0LdDjEPnVjpdkGJ1resP7bkeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c8:7e:e7:da:ba:2c:3c:6d:e6:04:c6:52:e0:f4:0a:f7:be:
b1:5e:1f:65:1c:b1:69:68:48:f5:fc:0f:a6:63:92:67:4f:8e:
4f:be:9c:f1:42:6d:ba:20:51:02:e1:77:a0:49:1b:2a:7b:38:
0c:87:9f:8b:86:92:f9:8f:eb:71:dd:41:93:aa:2c:c4:50:5e:
9e:1e:66:b5:f6:f4:e9:20:c5:1a:44:05:26:6a:b3:8e:7f:d2:
03:07:6c:a2:0a:cf:e5:27:91:c3:97:24:3d:b1:7d:5b:2d:38:
25:5b:b1:3e:69:aa:cf:47:fa:bc:c0:40:25:af:fd:7a:4e:ee:
96:09:2f:12:08:20:2c:a3:0d:e3:30:ea:8c:e0:8c:c8:bf:32:
3d:10:52:c8:0a:35:28:51:24:ab:ec:1d:69:c2:2a:5a:7e:3f:
e2:7d:af:13:c1:4a:48:d2:df:93:11:7d:9b:f9:65:e3:42:a6:
d7:de:d3:26:a5:5e:46:58:6f:eb:06:9f:99:e6:7d:79:97:13:
79:f8:57:37:67:03:d2:c3:a9:23:89:c8:d9:3f:02:d7:7e:b6:
ea:0b:bc:2b:98:94:7a:34:16:0b:0d:46:99:35:e4:35:77:af:
d7:31:9d:39:8f:b9:d1:65:f8:78:bb:e1:4c:cd:56:b3:c5:f4:
a7:e4:8d:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXbigQFWGAPT6H7TNpPx0/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzI4MDY1NjUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGFkMGI3NDM4YzQzZTc1NjNhNWQ5MDYyNzVhZGViMGZlZGI5MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumZyEs0Y6pQ//lTnUV8BuyfnJ7SG
pMV1IzDpEm/cX57HzI6QvwvbSk79SnVd28u1fzcV7W/mAP8MkwEUUg1BJ9PeXC0s
XM7jYY2N1cFEtqwKS+OR0pti6g4zGTijqNjysfjPQpl6Uu35HGGp17Keb5mwcBAX
sz9qU8UjggViYOpY6aOdKYWU8SRjFPYfpw6+Cb0XgY9E60nwy3BBqzet6F8KsVT5
r8CxrOaqfexz88+CRoQozDq2ZDUwTk8NlUpz7su27e46qAgq8AZ/tHb5To/T7p3I
coQpDuS+5mqxiQZ0qHbpwuRYIs/cuOTv5g2ogxPWWEDphy67AVLYPZ4a0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFitC3Q4xD51Y6XZBida3rD+25HkMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvV0swTGREakVQblZqcGRrR0oxcmVzUDdia2VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV8BMA0G
CSqGSIb3DQEBCwUAA4IBAQA7yH7n2rosPG3mBMZS4PQK976xXh9lHLFpaEj1/A+m
Y5JnT45PvpzxQm26IFEC4XegSRsqezgMh5+LhpL5j+tx3UGTqizEUF6eHma19vTp
IMUaRAUmarOOf9IDB2yiCs/lJ5HDlyQ9sX1bLTglW7E+aarPR/q8wEAlr/16Tu6W
CS8SCCAsow3jMOqM4IzIvzI9EFLICjUoUSSr7B1pwipafj/ifa8TwUpI0t+TEX2b
+WXjQqbX3tMmpV5GWG/rBp+Z5n15lxN5+Fc3ZwPSw6kjicjZPwLXfrbqC7wrmJR6
NBYLDUaZNeQ1d6/XMZ05j7nRZfh4u+FMzVazxfSn5I3j
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:12 2025 by rpki-client