Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/rWWtViyVg9Ga_1O7kdT05PDkaAc.roa
File: rWWtViyVg9Ga_1O7kdT05PDkaAc.roa (raw, json)
Hash identifier: kijszIN3pJ4lSRT5HY7sBpzI8BFMSxQM0PwUrKmZLcY=
Subject key identifier: AD:65:AD:56:2C:95:83:D1:9A:FF:53:BB:91:D4:F4:E4:F0:E4:68:07
Certificate issuer: /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial: 0195CFBF853D7952DA04B2AEAAD746EF76A2
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/rWWtViyVg9Ga_1O7kdT05PDkaAc.roa
Signing time: Tue 25 Mar 2025 23:59:50 +0000
ROA not before: Tue 25 Mar 2025 23:59:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209439
IP address blocks: 92.192.0.0/16 maxlen: 16
92.200.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cf:bf:85:3d:79:52:da:04:b2:ae:aa:d7:46:ef:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Validity
Not Before: Mar 25 23:59:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad65ad562c9583d19aff53bb91d4f4e4f0e46807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9d:c4:15:50:df:b7:a4:10:44:80:ef:55:6a:
3a:3e:9e:74:52:f1:24:f2:a7:38:b2:08:d0:15:16:
39:45:52:7b:86:43:66:b9:a2:e8:c2:2f:07:ce:9f:
c8:6a:9a:b5:6a:1d:34:74:9a:1f:b9:75:19:8f:61:
11:dd:b8:e4:16:56:b6:f5:13:9a:2f:18:88:b6:66:
bf:d4:11:ed:0f:86:dc:bb:7d:36:a2:40:e1:4f:1f:
16:18:b0:6b:ed:63:1a:15:8b:92:2a:38:5b:75:df:
1a:0d:15:17:75:01:4c:9d:a5:ed:b0:b4:fa:dd:4c:
9c:f5:86:9d:14:94:ea:f4:53:3d:40:65:7d:00:32:
5b:12:2c:d4:39:2b:bc:49:d7:48:d0:c8:10:78:86:
21:cf:80:46:84:e6:e3:27:c1:94:11:b1:f1:07:5c:
75:3d:2f:c7:44:1a:30:72:ac:57:6b:bd:88:a1:6c:
ca:e1:55:46:70:10:57:ec:93:b7:0b:cc:c0:96:d2:
ae:66:1d:22:91:f4:4e:02:e7:10:88:b1:1c:21:40:
a1:7b:59:f1:c5:64:18:f4:fb:73:f6:cd:b4:a4:29:
42:28:7d:fb:5d:66:f7:47:7a:59:9b:d6:1f:9c:6a:
28:94:54:bb:39:78:d6:a1:9d:b6:27:e2:1f:2c:f6:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:65:AD:56:2C:95:83:D1:9A:FF:53:BB:91:D4:F4:E4:F0:E4:68:07
X509v3 Authority Key Identifier:
keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/rWWtViyVg9Ga_1O7kdT05PDkaAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.192.0.0/16
92.200.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:98:96:22:0d:e4:63:b5:6e:4b:c2:71:7d:42:bf:a1:af:01:
28:81:6a:8b:e3:51:43:6a:4f:c8:ff:45:5c:1e:04:25:f5:3a:
ac:70:c1:7d:41:db:39:7c:f0:d6:38:4b:f5:94:dd:ea:b9:26:
fc:7c:32:f3:1f:0f:35:64:0f:6a:a8:4f:67:34:ba:d0:04:2f:
62:9f:7c:f1:3e:fb:03:1b:b7:16:b3:33:3e:40:25:a1:ab:59:
28:dd:b1:84:4f:0c:e6:cb:0d:63:78:75:8c:21:40:17:8b:d8:
58:80:5a:2c:c7:ff:b0:35:df:76:3e:e8:76:01:24:94:78:05:
07:a9:f6:ab:71:91:59:a5:eb:a9:5a:04:b3:bf:69:51:3b:12:
96:4c:a3:d6:12:3c:07:6d:3f:85:4b:09:d9:16:56:56:b4:f7:
47:11:8c:38:cc:ce:2b:36:92:b7:0d:09:00:27:0d:8d:f8:31:
c6:21:57:73:2c:10:8f:5e:a5:a5:75:e8:04:2d:e6:9f:6b:7f:
db:e1:63:60:a8:4d:b5:18:2b:bd:f8:07:a1:e9:67:21:dd:0d:
49:0c:5f:5f:9b:4a:2a:1c:53:0f:34:69:86:f7:87:84:8a:2d:
8e:bf:7b:e2:a9:78:76:d2:19:41:a4:80:36:78:a0:66:64:fb:
cc:23:ae:bc
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZXPv4U9eVLaBLKuqtdG73aiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMDY2Y2I4NDg4ZGFlN2U0MjM0YWE3Yzg5MjQzMGRhZDEx
ZmU1YjEwHhcNMjUwMzI1MjM1OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDY1YWQ1NjJjOTU4M2QxOWFmZjUzYmI5MWQ0ZjRlNGYwZTQ2ODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz53EFVDft6QQRIDvVWo6Pp50UvEk
8qc4sgjQFRY5RVJ7hkNmuaLowi8Hzp/Iapq1ah00dJofuXUZj2ER3bjkFla29ROa
LxiItma/1BHtD4bcu302okDhTx8WGLBr7WMaFYuSKjhbdd8aDRUXdQFMnaXtsLT6
3Uyc9YadFJTq9FM9QGV9ADJbEizUOSu8SddI0MgQeIYhz4BGhObjJ8GUEbHxB1x1
PS/HRBowcqxXa72IoWzK4VVGcBBX7JO3C8zAltKuZh0ikfROAucQiLEcIUChe1nx
xWQY9Ptz9s20pClCKH37XWb3R3pZm9YfnGoolFS7OXjWoZ22J+IfLPalCQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFK1lrVYslYPRmv9Tu5HU9OTw5GgHMB8GA1UdIwQY
MBaAFJ0GbLhIja5+QjSqfIkkMNrRH+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQt
M2VmMDJkNTE0MGI3LzEvcldXdFZpeVZnOUdhXzFPN2tkVDA1UERrYUFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kMGQyZmQtYWE5MC00MjA3LTkxMDQtM2VmMDJkNTE0MGI3
LzEvblFac3VFaU5ybjVDTktwOGlTUXcydEVmNWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAXMADAwBc
yDANBgkqhkiG9w0BAQsFAAOCAQEAT5iWIg3kY7VuS8JxfUK/oa8BKIFqi+NRQ2pP
yP9FXB4EJfU6rHDBfUHbOXzw1jhL9ZTd6rkm/Hwy8x8PNWQPaqhPZzS60AQvYp98
8T77Axu3FrMzPkAloatZKN2xhE8M5ssNY3h1jCFAF4vYWIBaLMf/sDXfdj7odgEk
lHgFB6n2q3GRWaXrqVoEs79pUTsSlkyj1hI8B20/hUsJ2RZWVrT3RxGMOMzOKzaS
tw0JACcNjfgxxiFXcywQj16lpXXoBC3mn2t/2+FjYKhNtRgrvfgHoelnId0NSQxf
X5tKKhxTDzRphveHhIotjr974ql4dtIZQaSANnigZmT7zCOuvA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 12:36:10 2025 by rpki-client