Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/fWxAWe7FNQHl72525jh3CvQUjPI.roa
File: fWxAWe7FNQHl72525jh3CvQUjPI.roa (raw, json)
Hash identifier: wZ498wFmeXSTeDsoNJdQ0818F8qSsmRp/ozGqSUyBQ0=
Subject key identifier: 7D:6C:40:59:EE:C5:35:01:E5:EF:6E:76:E6:38:77:0A:F4:14:8C:F2
Certificate issuer: /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial: 0194266C3C83B60857CB6365FD8614B148C7
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/fWxAWe7FNQHl72525jh3CvQUjPI.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 178.20.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3c:83:b6:08:57:cb:63:65:fd:86:14:b1:48:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d6c4059eec53501e5ef6e76e638770af4148cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:82:8c:8a:02:3d:83:54:4d:df:38:c8:3f:da:
5b:c2:79:0f:14:fa:35:15:03:4a:d8:45:f6:e2:37:
62:22:be:6c:30:60:d9:b0:44:62:f7:42:45:ba:2d:
23:3c:91:50:8a:95:36:bf:94:d6:99:ca:0c:06:cc:
92:47:72:ec:02:95:34:91:17:7a:0c:01:75:fb:d1:
bc:1f:3c:a3:de:5d:82:a0:8b:9b:86:c9:85:09:27:
fb:de:e0:b8:dc:6d:a8:25:1c:7b:83:14:c3:d3:e2:
ad:3b:b3:61:69:91:6c:6b:ed:b3:e3:cd:fd:2f:d7:
34:50:de:f0:be:f3:09:86:a6:2e:be:52:68:b0:3f:
79:ba:26:9d:47:f7:d6:d2:a7:3a:3c:30:d0:9f:2c:
89:27:6e:a0:3c:9d:cc:74:c6:b9:d8:cb:6a:12:71:
b8:a3:d4:e9:1b:f5:38:ff:20:9e:ac:da:c0:6d:02:
d2:17:78:19:86:b8:51:2a:dd:43:56:89:56:9e:cf:
22:46:88:ad:c7:dd:2b:68:7f:d6:bf:ce:94:49:80:
38:35:ff:d8:31:6b:f1:da:b5:33:54:49:12:82:96:
c7:df:98:0e:d9:69:f7:8c:d8:f5:48:1d:70:5c:0e:
d1:4d:2c:8f:8b:3c:dc:26:ad:2d:0a:4a:8d:0a:b0:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6C:40:59:EE:C5:35:01:E5:EF:6E:76:E6:38:77:0A:F4:14:8C:F2
X509v3 Authority Key Identifier:
keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/fWxAWe7FNQHl72525jh3CvQUjPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.210.0/23
Signature Algorithm: sha256WithRSAEncryption
be:86:78:f3:b3:69:f6:60:9c:5a:f4:a9:9a:5d:90:94:20:61:
3c:ed:6b:92:76:2a:7b:d0:0e:41:c4:86:ec:47:82:3c:ea:f1:
e9:4d:44:7c:bf:ff:59:fc:ca:0a:8b:5f:6c:54:a2:21:22:66:
af:29:6c:3b:2f:f0:fd:b4:12:34:e5:0d:37:e5:29:67:89:05:
e4:23:1f:db:7b:c7:23:74:cb:f0:9e:e6:a6:1f:2f:11:76:00:
67:f6:00:46:5b:2d:9d:fd:27:1d:3a:09:66:a1:f1:99:3e:52:
62:6b:16:06:87:d0:b4:0e:08:c1:2a:31:74:eb:86:f8:00:01:
45:b9:35:f3:c4:70:8c:fa:3c:7b:44:30:d6:b7:c3:e9:cc:65:
d8:d4:3e:1d:8e:74:ec:88:0a:6d:ba:8c:d0:e6:51:69:7c:e8:
6a:a5:c2:8c:d4:bf:21:2d:69:25:c5:b4:fb:c6:11:b3:1c:3e:
c4:8a:3e:c4:fa:cf:db:d1:c2:03:0e:01:b8:c3:49:9d:da:05:
8d:ed:9a:0e:21:aa:14:db:fc:a8:a8:b1:32:9e:57:e7:5b:fa:
e0:87:b0:92:e0:7f:d6:36:2f:f7:a0:b5:d9:71:dd:69:80:f1:
76:0e:22:3e:68:35:38:cd:09:9c:c0:68:80:52:8f:00:f1:c7:
48:fc:02:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmbDyDtghXy2Nl/YYUsUjHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj
ZTNmNmUwHhcNMjUwMTAyMDk1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDZjNDA1OWVlYzUzNTAxZTVlZjZlNzZlNjM4NzcwYWY0MTQ4Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IKMigI9g1RN3zjIP9pbwnkPFPo1
FQNK2EX24jdiIr5sMGDZsERi90JFui0jPJFQipU2v5TWmcoMBsySR3LsApU0kRd6
DAF1+9G8Hzyj3l2CoIubhsmFCSf73uC43G2oJRx7gxTD0+KtO7NhaZFsa+2z4839
L9c0UN7wvvMJhqYuvlJosD95uiadR/fW0qc6PDDQnyyJJ26gPJ3MdMa52MtqEnG4
o9TpG/U4/yCerNrAbQLSF3gZhrhRKt1DVolWns8iRoitx90raH/Wv86USYA4Nf/Y
MWvx2rUzVEkSgpbH35gO2Wn3jNj1SB1wXA7RTSyPizzcJq0tCkqNCrBUwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1sQFnuxTUB5e9uduY4dwr0FIzyMB8GA1UdIwQY
MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt
MDVkNThmMGNiODhjLzEvZld4QVdlN0ZOUUhsNzI1MjVqaDNDdlFValBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj
LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBshTSMA0G
CSqGSIb3DQEBCwUAA4IBAQC+hnjzs2n2YJxa9KmaXZCUIGE87WuSdip70A5BxIbs
R4I86vHpTUR8v/9Z/MoKi19sVKIhImavKWw7L/D9tBI05Q035SlniQXkIx/be8cj
dMvwnuamHy8RdgBn9gBGWy2d/ScdOglmofGZPlJiaxYGh9C0DgjBKjF064b4AAFF
uTXzxHCM+jx7RDDWt8PpzGXY1D4djnTsiAptuozQ5lFpfOhqpcKM1L8hLWklxbT7
xhGzHD7Eij7E+s/b0cIDDgG4w0md2gWN7ZoOIaoU2/yoqLEynlfnW/rgh7CS4H/W
Ni/3oLXZcd1pgPF2DiI+aDU4zQmcwGiAUo8A8cdI/AKM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:08 2025 by rpki-client