Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/wrTNSbQCV_sqEKYaMegJZeu6Fao.roa
File: wrTNSbQCV_sqEKYaMegJZeu6Fao.roa (raw, json)
Hash identifier: 9egcLNOB56ksEzcqwbZfhyLPf28Zb07vEJxvDh1GLGc=
Subject key identifier: C2:B4:CD:49:B4:02:57:FB:2A:10:A6:1A:31:E8:09:65:EB:BA:15:AA
Certificate issuer: /CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Certificate serial: 024B1374
Authority key identifier: 87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/wrTNSbQCV_sqEKYaMegJZeu6Fao.roa
Signing time: Thu 27 Jan 2022 11:13:50 +0000
ROA not before: Thu 27 Jan 2022 11:13:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206233
IP address blocks: 84.238.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38474612 (0x24b1374)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8756d27768e11d94a0bbcdfb3fbcd740d45a00f4
Validity
Not Before: Jan 27 11:13:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c2b4cd49b40257fb2a10a61a31e80965ebba15aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:23:71:38:5d:28:b7:86:00:39:8b:92:5f:
38:2b:3c:9b:0e:4f:40:5c:3b:e5:67:b1:fb:e8:7b:
b6:8a:62:23:13:f1:65:f4:57:3a:95:0a:85:13:8f:
93:7d:cb:c3:e6:39:7a:e7:27:29:5e:f4:10:4c:b0:
5d:08:ac:6b:90:38:3e:16:90:27:85:42:36:dc:4d:
5d:5a:95:80:bb:f4:b7:40:cd:b4:01:a7:cf:66:12:
a0:42:64:f8:a3:84:6b:8c:8f:e1:78:7d:62:42:ab:
27:48:c2:e0:ae:dc:e0:ed:31:61:fc:8b:a4:85:10:
7a:13:d9:5c:a1:32:bb:25:71:c5:ec:cc:66:cc:d6:
a5:53:46:68:40:7f:1b:04:bb:86:ec:cf:6e:d5:33:
d5:43:1f:b7:a8:79:ff:e7:7e:c4:7d:fd:30:78:ff:
af:a7:ab:9f:3d:13:22:94:bf:b0:da:9b:f1:3f:61:
ef:02:2d:b1:d6:0e:56:2c:c3:fb:24:15:20:25:91:
6c:d7:90:f5:e3:1a:75:ed:c0:da:a5:97:bd:0d:65:
b0:92:2e:8a:8e:45:f0:85:2e:8b:8c:1f:0b:7a:04:
f1:7f:52:b5:1a:f9:62:41:fd:d8:ef:d0:61:fa:49:
23:a1:c9:65:98:b5:cf:67:9c:46:ff:f1:9f:42:86:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:CD:49:B4:02:57:FB:2A:10:A6:1A:31:E8:09:65:EB:BA:15:AA
X509v3 Authority Key Identifier:
keyid:87:56:D2:77:68:E1:1D:94:A0:BB:CD:FB:3F:BC:D7:40:D4:5A:00:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1bSd2jhHZSgu837P7zXQNRaAPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/wrTNSbQCV_sqEKYaMegJZeu6Fao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/957bb3-2de5-45cf-acf3-c3a02d7c0697/1/h1bSd2jhHZSgu837P7zXQNRaAPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.238.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:75:98:30:0f:0b:c2:56:da:21:f1:90:8f:82:9f:5f:27:d6:
9b:e9:73:60:18:78:bf:ad:88:79:53:b0:d1:3d:22:36:ea:7e:
87:fd:18:6f:c7:04:3d:b0:de:61:2c:92:d4:c0:2b:9b:e1:81:
51:ab:d7:96:36:33:ca:96:2a:92:de:4b:e4:8a:25:65:93:b7:
4f:97:09:22:08:b3:3c:95:0b:22:0c:9a:e4:aa:74:56:4c:81:
48:e7:ba:90:07:5b:4f:f1:09:bf:e3:e6:c7:2e:2b:df:f5:a2:
40:16:dd:82:ba:99:b4:fc:99:f2:3b:77:30:1f:a9:14:94:5a:
dc:c3:a1:f2:79:d9:9a:3f:b2:74:00:7b:d4:c4:5c:2e:86:3a:
36:b0:57:2a:d4:c4:7f:b2:9b:f5:4b:4b:fc:8e:76:19:90:f2:
3a:c3:80:91:13:0a:96:bd:f3:a5:1d:3d:17:31:52:d1:b9:c1:
e4:3f:1e:d7:2a:44:50:ad:37:9b:27:5e:50:1a:95:be:01:87:
86:3b:13:3f:f9:c1:f0:0b:b5:43:b9:99:d4:58:ca:03:76:f1:
42:e5:52:76:c3:0e:79:b2:0f:60:f4:fa:fa:11:1e:c3:06:d7:
f1:db:53:a4:a9:69:02:55:a3:f8:c8:68:e5:06:7a:91:d2:6e:
46:1e:b5:6e
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAksTdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
NzU2ZDI3NzY4ZTExZDk0YTBiYmNkZmIzZmJjZDc0MGQ0NWEwMGY0MB4XDTIyMDEy
NzExMTM1MFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYzJiNGNkNDliNDAy
NTdmYjJhMTBhNjFhMzFlODA5NjVlYmJhMTVhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJXnI3E4XSi3hgA5i5JfOCs8mw5PQFw75Wex++h7topiIxPx
ZfRXOpUKhROPk33Lw+Y5eucnKV70EEywXQisa5A4PhaQJ4VCNtxNXVqVgLv0t0DN
tAGnz2YSoEJk+KOEa4yP4Xh9YkKrJ0jC4K7c4O0xYfyLpIUQehPZXKEyuyVxxezM
ZszWpVNGaEB/GwS7huzPbtUz1UMft6h5/+d+xH39MHj/r6ernz0TIpS/sNqb8T9h
7wItsdYOVizD+yQVICWRbNeQ9eMade3A2qWXvQ1lsJIuio5F8IUui4wfC3oE8X9S
tRr5YkH92O/QYfpJI6HJZZi1z2ecRv/xn0KGbzsCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTCtM1JtAJX+yoQphox6All67oVqjAfBgNVHSMEGDAWgBSHVtJ3aOEdlKC7
zfs/vNdA1FoA9DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2gxYlNkMmpoSFpTZ3U4MzdQN3pYUU5SYUFQUS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWIvOTU3YmIzLTJkZTUtNDVjZi1hY2YzLWMzYTAyZDdjMDY5Ny8x
L3dyVE5TYlFDVl9zcUVLWWFNZWdKWmV1NkZhby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIv
OTU3YmIzLTJkZTUtNDVjZi1hY2YzLWMzYTAyZDdjMDY5Ny8xL2gxYlNkMmpoSFpT
Z3U4MzdQN3pYUU5SYUFQUS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFTusTANBgkqhkiG9w0BAQsFAAOC
AQEAK3WYMA8LwlbaIfGQj4KfXyfWm+lzYBh4v62IeVOw0T0iNup+h/0Yb8cEPbDe
YSyS1MArm+GBUavXljYzypYqkt5L5IolZZO3T5cJIgizPJULIgya5Kp0VkyBSOe6
kAdbT/EJv+Pmxy4r3/WiQBbdgrqZtPyZ8jt3MB+pFJRa3MOh8nnZmj+ydAB71MRc
LoY6NrBXKtTEf7Kb9UtL/I52GZDyOsOAkRMKlr3zpR09FzFS0bnB5D8e1ypEUK03
mydeUBqVvgGHhjsTP/nB8Au1Q7mZ1FjKA3bxQuVSdsMOebIPYPT6+hEewwbX8dtT
pKlpAlWj+Mho5QZ6kdJuRh61bg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:03:57 2025 by rpki-client