Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/CgLkc1SkIFf4pj0n2JX7alL00KE.roa
File: CgLkc1SkIFf4pj0n2JX7alL00KE.roa (raw, json)
Hash identifier: MhOOK2DgwXLBocx/6QarDx4Ly7ohhneMABES0xkWluY=
Subject key identifier: 0A:02:E4:73:54:A4:20:57:F8:A6:3D:27:D8:95:FB:6A:52:F4:D0:A1
Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial: 0194266BB1D0A85559CE0CCDF1E094589E0A
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/CgLkc1SkIFf4pj0n2JX7alL00KE.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 260
IP address blocks: 78.40.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b1:d0:a8:55:59:ce:0c:cd:f1:e0:94:58:9e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a02e47354a42057f8a63d27d895fb6a52f4d0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:cf:aa:75:5a:4f:73:51:97:59:12:2e:d9:
08:07:a1:97:06:64:9e:56:bf:15:46:8c:91:32:53:
50:39:29:7b:f1:a5:f3:ca:5f:d6:f0:a5:83:38:e0:
07:73:85:9f:fa:c3:d3:ca:6d:42:dc:c4:6b:16:55:
af:37:5b:c9:26:96:6c:09:92:77:90:b3:64:54:75:
e5:8f:30:db:44:60:f9:13:7d:41:39:e6:07:69:42:
72:db:a2:7d:04:2f:35:89:42:cc:41:71:4f:31:e3:
47:98:9c:72:41:b2:f5:91:8e:fa:e1:93:55:b3:b7:
c7:0a:bc:a4:31:b1:9c:20:4c:c4:8e:90:20:34:6a:
a3:99:2d:f9:c2:10:67:bd:6e:bd:5e:d7:11:30:67:
5b:71:a8:53:ea:eb:a8:03:d8:1b:24:4c:e4:4b:2e:
5b:39:55:30:3e:38:dd:6b:2a:33:1a:57:42:20:69:
bd:87:80:b1:8f:74:4b:53:8b:fe:7d:c4:27:66:07:
de:5b:9f:05:a2:bd:09:80:3f:90:1c:11:5c:ba:1f:
ff:81:d4:2a:bf:1d:58:a0:00:cd:31:4b:b2:33:f2:
3b:77:c4:f0:34:80:a5:04:3a:03:03:30:e3:6c:48:
46:21:cb:3d:6c:b4:57:62:b5:6f:25:2d:23:a0:75:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:02:E4:73:54:A4:20:57:F8:A6:3D:27:D8:95:FB:6A:52:F4:D0:A1
X509v3 Authority Key Identifier:
keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/CgLkc1SkIFf4pj0n2JX7alL00KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.204.0/23
Signature Algorithm: sha256WithRSAEncryption
41:f5:64:6f:f8:47:4d:25:ea:9c:e7:61:e6:8e:5f:d5:76:1d:
f5:c8:dd:51:44:e3:22:ae:91:53:40:cf:1b:24:60:11:ca:7a:
47:a2:37:49:bc:82:cd:0b:3f:66:5b:b3:07:64:e3:eb:ac:78:
5c:4e:f0:47:e8:7b:60:f3:08:9b:79:f4:ee:9b:ab:21:b7:77:
41:96:d9:bb:da:3e:57:d8:0e:3b:02:f4:ac:a1:91:51:b5:ca:
0e:03:b3:1a:89:7b:ca:62:17:53:a9:7a:fc:09:e4:e5:b2:8f:
ff:a1:4c:3e:b6:ac:b8:2b:73:9a:ef:0d:5b:c1:24:34:87:ff:
63:38:9f:28:47:ce:34:bf:fb:8d:1a:4b:0a:72:1a:39:f1:15:
fc:37:40:44:1f:2b:16:1b:b7:5f:23:27:00:b9:70:d2:e5:c8:
2b:a1:a2:d6:10:04:26:ba:e9:ed:91:e6:6c:0b:97:bd:02:60:
2c:19:d2:b6:98:5f:2a:ae:df:24:86:69:0b:9f:3a:71:03:e9:
42:c9:e2:4f:bb:9a:3b:ca:07:02:5d:81:b4:42:1f:3d:18:01:
76:31:aa:24:da:98:7d:54:b7:42:fc:54:6d:a7:15:9b:b2:e3:
49:39:0b:41:5b:e3:b8:81:55:3a:e4:f8:85:68:a7:1f:db:51:
46:17:3b:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma7HQqFVZzgzN8eCUWJ4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5
YWY5OWYwHhcNMjUwMTAyMDk0OTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTAyZTQ3MzU0YTQyMDU3ZjhhNjNkMjdkODk1ZmI2YTUyZjRkMGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2rPqnVaT3NRl1kSLtkIB6GXBmSe
Vr8VRoyRMlNQOSl78aXzyl/W8KWDOOAHc4Wf+sPTym1C3MRrFlWvN1vJJpZsCZJ3
kLNkVHXljzDbRGD5E31BOeYHaUJy26J9BC81iULMQXFPMeNHmJxyQbL1kY764ZNV
s7fHCrykMbGcIEzEjpAgNGqjmS35whBnvW69XtcRMGdbcahT6uuoA9gbJEzkSy5b
OVUwPjjdayozGldCIGm9h4Cxj3RLU4v+fcQnZgfeW58For0JgD+QHBFcuh//gdQq
vx1YoADNMUuyM/I7d8TwNIClBDoDAzDjbEhGIcs9bLRXYrVvJS0joHVOkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAoC5HNUpCBX+KY9J9iV+2pS9NChMB8GA1UdIwQY
MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt
MzQ2M2I1NmUzNzJjLzEvQ2dMa2MxU2tJRmY0cGowbjJKWDdhbEwwMEtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj
LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTijMMA0G
CSqGSIb3DQEBCwUAA4IBAQBB9WRv+EdNJeqc52Hmjl/Vdh31yN1RROMirpFTQM8b
JGARynpHojdJvILNCz9mW7MHZOPrrHhcTvBH6Htg8wibefTum6sht3dBltm72j5X
2A47AvSsoZFRtcoOA7MaiXvKYhdTqXr8CeTlso//oUw+tqy4K3Oa7w1bwSQ0h/9j
OJ8oR840v/uNGksKcho58RX8N0BEHysWG7dfIycAuXDS5cgroaLWEAQmuuntkeZs
C5e9AmAsGdK2mF8qrt8khmkLnzpxA+lCyeJPu5o7ygcCXYG0Qh89GAF2Maok2ph9
VLdC/FRtpxWbsuNJOQtBW+O4gVU65PiFaKcf21FGFzvo
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:44 2025 by rpki-client