Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wfV6g8bCyfjY-q8qOCb42jB3SVw.roa
File: wfV6g8bCyfjY-q8qOCb42jB3SVw.roa (raw, json)
Hash identifier: tdt9myrSVnnipTeZQJjpnWIHSj35hhKuPkiJkdRuRdI=
Subject key identifier: C1:F5:7A:83:C6:C2:C9:F8:D8:FA:AF:2A:38:26:F8:DA:30:77:49:5C
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B64C80F896F2161DD2DACA2440F6D9
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wfV6g8bCyfjY-q8qOCb42jB3SVw.roa
Signing time: Thu 02 Jan 2025 15:50:45 +0000
ROA not before: Thu 02 Jan 2025 15:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34088
IP address blocks: 92.204.152.0/21 maxlen: 21
151.106.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:4c:80:f8:96:f2:16:1d:d2:da:ca:24:40:f6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1f57a83c6c2c9f8d8faaf2a3826f8da3077495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:df:13:32:49:6f:30:c9:86:39:90:d8:c2:de:
b7:23:6f:46:29:bc:4f:63:c9:55:a6:dc:15:d8:21:
8c:60:ec:20:f1:76:49:ad:f4:20:05:7c:f8:5e:56:
aa:da:65:36:fc:23:e3:c9:01:e5:1d:f4:5d:e3:eb:
07:ce:62:8f:99:c7:02:40:0a:33:2a:53:3a:51:f6:
b0:fe:27:d9:4f:3f:bf:d8:8e:3d:e2:5a:9b:83:51:
63:6b:86:89:15:05:11:4a:ba:ee:67:d3:f6:47:81:
da:2f:e6:b3:05:f2:7d:11:d4:f9:a2:81:31:d1:1c:
7a:99:21:91:9d:54:c7:cb:de:9f:9a:68:48:18:fd:
23:fa:6f:e4:62:c5:60:7d:c0:3f:b4:04:2b:47:8d:
55:74:8e:9c:c9:a0:c1:65:8c:46:ad:54:cf:b2:1c:
3b:52:8b:bb:54:5d:eb:8a:9c:c2:80:ab:8b:66:cd:
b5:06:fb:c2:8b:08:97:74:f2:b8:01:ab:36:a6:9a:
7b:08:63:22:72:39:88:b6:c4:03:d0:59:1a:a4:c9:
63:55:bc:e9:f6:92:69:b5:6d:af:0b:99:63:34:f1:
aa:38:2f:3b:a3:87:fc:68:a0:d0:ad:28:e4:e7:24:
72:ec:b5:a4:82:c4:48:ee:b1:4a:5b:d3:3f:c2:15:
4d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:7A:83:C6:C2:C9:F8:D8:FA:AF:2A:38:26:F8:DA:30:77:49:5C
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/wfV6g8bCyfjY-q8qOCb42jB3SVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.204.152.0/21
151.106.32.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:4c:53:00:5a:01:f1:cb:9a:b7:f7:71:98:30:05:1b:4a:1c:
49:e7:c5:bb:0c:19:02:55:40:e3:63:72:e0:8c:b9:2c:c9:fd:
4d:89:a9:f5:a4:bf:e2:f0:40:93:85:bb:12:00:f3:b6:90:32:
a3:4f:bc:21:3a:89:18:8f:ab:97:eb:4b:d5:87:de:c2:9d:75:
ff:8e:85:54:ee:f5:93:1a:6f:ee:6a:36:8e:01:27:b5:89:6e:
61:2d:22:4e:ba:5c:58:95:8f:25:3d:f3:83:5f:4a:5f:c0:de:
ca:5a:b9:8e:0e:08:a1:a9:ea:60:f3:59:57:57:de:f2:47:83:
ea:0d:ab:da:85:b1:b1:8e:1f:ca:a1:4b:14:ce:08:98:9b:35:
2b:31:c5:36:1a:81:28:de:a4:61:29:6e:9b:23:fe:df:ff:ac:
7f:15:cc:26:d0:69:3d:b5:27:f2:c5:ea:fa:9b:7c:f9:dc:e6:
6c:7b:87:2e:db:82:cf:c4:fd:89:ab:22:0a:46:77:13:49:20:
49:cf:cd:f6:67:df:4d:a5:b6:6d:b9:33:83:6b:2d:11:0d:87:
c4:61:06:00:d3:94:06:47:12:8d:3d:6b:17:30:bd:34:39:a4:
4e:1d:f2:eb:a0:e6:8a:6a:76:94:b0:81:cc:d8:7e:16:72:b8:
44:1a:4c:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntkyA+JbyFh3S2sokQPbZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjUwMTAyMTU1MDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWY1N2E4M2M2YzJjOWY4ZDhmYWFmMmEzODI2ZjhkYTMwNzc0OTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz98TMklvMMmGOZDYwt63I29GKbxP
Y8lVptwV2CGMYOwg8XZJrfQgBXz4Xlaq2mU2/CPjyQHlHfRd4+sHzmKPmccCQAoz
KlM6Ufaw/ifZTz+/2I494lqbg1Fja4aJFQURSrruZ9P2R4HaL+azBfJ9EdT5ooEx
0Rx6mSGRnVTHy96fmmhIGP0j+m/kYsVgfcA/tAQrR41VdI6cyaDBZYxGrVTPshw7
Uou7VF3ripzCgKuLZs21BvvCiwiXdPK4Aas2ppp7CGMicjmItsQD0FkapMljVbzp
9pJptW2vC5ljNPGqOC87o4f8aKDQrSjk5yRy7LWkgsRI7rFKW9M/whVNmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMH1eoPGwsn42PqvKjgm+Nowd0lcMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvd2ZWNmc4YkN5ZmpZLXE4cU9DYjQyakIzU1Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXMyYAwQE
l2ogMA0GCSqGSIb3DQEBCwUAA4IBAQCzTFMAWgHxy5q393GYMAUbShxJ58W7DBkC
VUDjY3LgjLksyf1Nian1pL/i8ECThbsSAPO2kDKjT7whOokYj6uX60vVh97CnXX/
joVU7vWTGm/uajaOASe1iW5hLSJOulxYlY8lPfODX0pfwN7KWrmODgihqepg81lX
V97yR4PqDavahbGxjh/KoUsUzgiYmzUrMcU2GoEo3qRhKW6bI/7f/6x/Fcwm0Gk9
tSfyxer6m3z53OZse4cu24LPxP2JqyIKRncTSSBJz832Z99NpbZtuTODay0RDYfE
YQYA05QGRxKNPWsXML00OaROHfLroOaKanaUsIHM2H4WcrhEGkxt
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:46 2025 by rpki-client