Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/CkwsooE7nrxtlqqph0yaMoh0SPs.roa
File: CkwsooE7nrxtlqqph0yaMoh0SPs.roa (raw, json)
Hash identifier: BfTuS/ccODYBmRHfvVTi0dKEG8UY29fMsBhXpAWmQtw=
Subject key identifier: 0A:4C:2C:A2:81:3B:9E:BC:6D:96:AA:A9:87:4C:9A:32:88:74:48:FB
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018B4EA545D55FACEAEDCFFDC37DA2B1B67D
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/CkwsooE7nrxtlqqph0yaMoh0SPs.roa
Signing time: Fri 20 Oct 2023 19:52:16 +0000
ROA not before: Fri 20 Oct 2023 19:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203963
IP address blocks: 94.74.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4e:a5:45:d5:5f:ac:ea:ed:cf:fd:c3:7d:a2:b1:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Oct 20 19:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a4c2ca2813b9ebc6d96aaa9874c9a32887448fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:c3:80:cf:9e:d5:c4:e1:02:54:d9:06:d1:
db:43:f9:75:cc:87:4f:74:f1:83:a1:50:f8:63:63:
62:69:3c:dd:8a:11:c8:83:40:fe:03:18:4e:c7:cb:
5d:4e:6d:49:6d:16:18:60:71:49:83:f5:57:ec:3b:
9f:12:ec:d6:22:09:14:43:ec:05:99:e4:17:18:1f:
5e:91:29:7a:04:f6:ca:d5:1d:3a:75:c7:59:e2:6e:
86:7e:ba:c1:54:a7:32:75:e1:d6:bc:cb:d0:a1:89:
18:9c:b4:fd:23:4c:03:01:b4:88:77:de:2f:ac:28:
e1:3e:a8:9f:3f:be:7e:e5:5c:9b:2d:83:98:68:a6:
e2:d5:2d:d1:5b:a8:89:70:44:81:bc:f1:3c:07:e9:
89:d4:1e:9c:1f:ac:11:0d:7a:4b:84:17:e8:0d:20:
4a:06:00:e8:15:ba:85:47:68:79:35:6f:9c:8a:7a:
11:99:65:60:23:d2:30:f4:ec:3b:81:cc:cc:3e:5d:
13:e6:5d:f4:d6:38:17:67:78:25:99:f5:b3:0e:1b:
d8:73:e0:f2:06:08:58:83:0e:17:cc:d5:cb:d2:47:
5b:8d:51:38:f8:91:f1:a0:ea:cd:93:17:69:60:f3:
96:7d:92:d9:e2:e8:1f:48:b5:ef:70:f9:68:f3:5b:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4C:2C:A2:81:3B:9E:BC:6D:96:AA:A9:87:4C:9A:32:88:74:48:FB
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/CkwsooE7nrxtlqqph0yaMoh0SPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.140.0/24
Signature Algorithm: sha256WithRSAEncryption
89:72:74:eb:e2:2d:1c:42:b8:66:81:1b:2f:4b:9e:85:17:02:
8d:f9:87:36:70:d3:69:12:2a:dd:aa:bb:5c:21:32:66:3c:27:
51:21:3b:c7:fa:4e:29:a1:e0:90:8a:c4:21:ad:ca:01:03:77:
b9:fc:62:71:fd:36:d6:66:ea:76:5e:78:cf:fd:a2:4e:d6:e5:
0f:e8:fe:6c:6b:53:23:fc:91:0a:88:e1:29:1d:7c:93:f7:5a:
0c:1d:f2:95:4c:b9:51:0d:f1:81:48:89:af:f9:30:01:dd:c6:
96:e3:86:c1:09:2f:cf:6b:19:cb:a4:52:3c:1d:57:f2:05:30:
ee:5f:78:95:e0:d5:7b:e2:ed:f7:62:63:07:1e:45:c6:97:4c:
f1:f2:48:e2:5a:26:5a:09:43:52:eb:a7:7e:2d:6c:49:52:3c:
ba:7f:9c:9c:ef:06:a0:b3:1f:45:9e:2d:f3:20:62:96:50:a7:
34:e7:88:f8:b9:e9:2d:86:22:c2:c9:36:a4:dc:c3:1f:ca:f9:
30:a9:ce:29:0e:d5:dc:ad:39:32:1d:90:21:70:25:f5:38:d7:
8d:46:f0:9c:4c:c4:8c:b6:f3:0e:5c:5b:2c:64:88:84:16:63:
6c:b1:58:bd:15:c1:70:0d:21:16:4d:13:fa:37:57:31:d9:d7:
cb:d6:a8:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtOpUXVX6zq7c/9w32isbZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjMxMDIwMTk1MjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTRjMmNhMjgxM2I5ZWJjNmQ5NmFhYTk4NzRjOWEzMjg4NzQ0OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3vDgM+e1cThAlTZBtHbQ/l1zIdP
dPGDoVD4Y2NiaTzdihHIg0D+AxhOx8tdTm1JbRYYYHFJg/VX7DufEuzWIgkUQ+wF
meQXGB9ekSl6BPbK1R06dcdZ4m6GfrrBVKcydeHWvMvQoYkYnLT9I0wDAbSId94v
rCjhPqifP75+5VybLYOYaKbi1S3RW6iJcESBvPE8B+mJ1B6cH6wRDXpLhBfoDSBK
BgDoFbqFR2h5NW+cinoRmWVgI9Iw9Ow7gczMPl0T5l301jgXZ3glmfWzDhvYc+Dy
BghYgw4XzNXL0kdbjVE4+JHxoOrNkxdpYPOWfZLZ4ugfSLXvcPlo81utzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFApMLKKBO568bZaqqYdMmjKIdEj7MB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvQ2t3c29vRTducnh0bHFxcGgweWFNb2gwU1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXkqMMA0G
CSqGSIb3DQEBCwUAA4IBAQCJcnTr4i0cQrhmgRsvS56FFwKN+Yc2cNNpEirdqrtc
ITJmPCdRITvH+k4poeCQisQhrcoBA3e5/GJx/TbWZup2XnjP/aJO1uUP6P5sa1Mj
/JEKiOEpHXyT91oMHfKVTLlRDfGBSImv+TAB3caW44bBCS/PaxnLpFI8HVfyBTDu
X3iV4NV74u33YmMHHkXGl0zx8kjiWiZaCUNS66d+LWxJUjy6f5yc7wagsx9Fni3z
IGKWUKc054j4uekthiLCyTak3MMfyvkwqc4pDtXcrTkyHZAhcCX1ONeNRvCcTMSM
tvMOXFssZIiEFmNssVi9FcFwDSEWTRP6N1cx2dfL1qgv
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:23 2025 by rpki-client