Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa
File: CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa (raw, json)
Hash identifier: kwrireSUCM8B5X7b/jFwe6owVISrGhqj47+KxFuhlXE=
Subject key identifier: 09:6C:19:2A:D8:E2:73:C8:60:A1:4A:96:F1:0D:82:D8:06:C0:39:C8
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E2A1E730B04F5156E19B819F674BA
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197860
IP address blocks: 109.105.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2a:1e:73:0b:04:f5:15:6e:19:b8:19:f6:74:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=096c192ad8e273c860a14a96f10d82d806c039c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:2a:be:e2:95:83:5d:9c:1a:55:20:ec:cb:
fc:6d:a8:7c:dc:b8:af:fd:38:14:b5:64:bc:2c:5a:
c9:62:3e:7b:4d:8e:25:58:64:c1:55:2a:8b:c4:d7:
36:23:86:df:8a:24:bc:a2:cd:39:10:44:05:62:22:
89:b8:ac:b3:0d:77:8b:ed:35:ec:f7:25:a1:fc:4e:
89:e8:54:56:12:05:ff:41:3a:ef:d7:1c:2f:f8:e2:
14:4f:33:d0:6b:55:00:9a:ab:52:6d:f2:ec:4f:1f:
3d:45:01:37:ea:77:63:c3:70:36:3c:27:97:67:56:
0b:3f:bc:e6:d9:d0:55:2e:f8:50:a3:2a:83:7c:33:
d3:54:25:ca:43:f7:80:a7:ea:f9:ed:98:f4:f1:42:
3b:4f:cc:3f:68:37:f1:24:f9:7e:a9:0c:0f:d0:33:
99:97:fb:fe:01:31:e3:b5:e1:a3:46:e3:85:fd:ef:
7d:2e:5d:66:1b:4b:10:bf:6b:10:2d:e7:02:b3:3c:
fd:0e:1e:45:94:25:87:9c:d6:bc:3a:de:59:bb:79:
b2:60:63:a1:2d:17:47:ec:c3:b1:78:cc:3a:3c:21:
59:37:4c:2e:23:7f:8c:76:fb:6f:eb:1b:08:80:00:
12:59:11:8b:6f:ae:8b:b8:e0:b1:8e:07:7b:85:00:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:19:2A:D8:E2:73:C8:60:A1:4A:96:F1:0D:82:D8:06:C0:39:C8
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/CWwZKtjic8hgoUqW8Q2C2AbAOcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.193.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6b:33:ff:87:e9:1a:77:a7:fc:f4:e7:88:d4:b1:e1:38:9a:
13:75:54:59:10:fa:02:d7:10:c8:14:50:80:67:c2:1b:5d:87:
0a:11:af:4d:b9:5e:71:6d:d8:48:82:0c:85:d2:ab:53:80:e9:
ba:c2:14:5c:60:81:ba:0a:83:7c:5a:9c:c1:48:f4:89:a2:65:
54:fd:e1:c3:f2:af:5e:d2:3f:4c:c2:e6:90:cf:fe:5f:92:a5:
3c:cb:12:a5:21:f7:f3:41:bd:3b:1f:19:20:d2:f6:74:56:60:
d4:74:4a:b6:ee:1b:a5:e8:2f:fd:b8:21:19:2b:c0:75:9e:67:
0c:bc:3c:f4:80:64:a8:b8:4a:37:fa:cc:ce:3a:54:a7:3b:fc:
ee:72:40:dc:ee:e4:f0:ee:af:a1:da:22:63:10:9c:d9:c3:94:
95:54:7e:87:43:3a:39:a0:12:ee:d3:91:ba:c4:34:81:39:f7:
cb:d5:3c:2d:03:50:8c:3a:3a:b8:57:99:89:2c:9e:2a:86:11:
07:8e:e3:aa:9a:37:85:00:b6:37:07:b2:2b:37:77:cb:93:e9:
0d:0d:ed:a3:fb:16:be:cd:8d:4d:4b:dd:42:40:0d:f3:0d:1e:
de:0a:f5:c7:6e:6f:1f:88:40:c6:db:c2:78:bc:eb:b5:c9:22:
13:26:53:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijioecwsE9RVuGbgZ9nS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjUwMTAxMTU0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTZjMTkyYWQ4ZTI3M2M4NjBhMTRhOTZmMTBkODJkODA2YzAzOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy0qvuKVg12cGlUg7Mv8bah83Liv
/TgUtWS8LFrJYj57TY4lWGTBVSqLxNc2I4bfiiS8os05EEQFYiKJuKyzDXeL7TXs
9yWh/E6J6FRWEgX/QTrv1xwv+OIUTzPQa1UAmqtSbfLsTx89RQE36ndjw3A2PCeX
Z1YLP7zm2dBVLvhQoyqDfDPTVCXKQ/eAp+r57Zj08UI7T8w/aDfxJPl+qQwP0DOZ
l/v+ATHjteGjRuOF/e99Ll1mG0sQv2sQLecCszz9Dh5FlCWHnNa8Ot5Zu3myYGOh
LRdH7MOxeMw6PCFZN0wuI3+Mdvtv6xsIgAASWRGLb66LuOCxjgd7hQAyKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAlsGSrY4nPIYKFKlvENgtgGwDnIMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvQ1d3Wkt0amljOGhnb1VxVzhRMkMyQWJBT2NnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnBMA0G
CSqGSIb3DQEBCwUAA4IBAQCWazP/h+kad6f89OeI1LHhOJoTdVRZEPoC1xDIFFCA
Z8IbXYcKEa9NuV5xbdhIggyF0qtTgOm6whRcYIG6CoN8WpzBSPSJomVU/eHD8q9e
0j9MwuaQz/5fkqU8yxKlIffzQb07Hxkg0vZ0VmDUdEq27hul6C/9uCEZK8B1nmcM
vDz0gGSouEo3+szOOlSnO/zuckDc7uTw7q+h2iJjEJzZw5SVVH6HQzo5oBLu05G6
xDSBOffL1TwtA1CMOjq4V5mJLJ4qhhEHjuOqmjeFALY3B7IrN3fLk+kNDe2j+xa+
zY1NS91CQA3zDR7eCvXHbm8fiEDG28J4vOu1ySITJlMY
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:26 2025 by rpki-client