Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w71fbAuxvT6lL-qblvPRAQSaLCs.roa
File: w71fbAuxvT6lL-qblvPRAQSaLCs.roa (raw, json)
Hash identifier: bYfvAEXwNnowuwGeqLj878Y/DncjL1HRTgZVlVmkoTA=
Subject key identifier: C3:BD:5F:6C:0B:B1:BD:3E:A5:2F:EA:9B:96:F3:D1:01:04:9A:2C:2B
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 0185CFD50C2E66F6BFFAD2E097F91A1615E2
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w71fbAuxvT6lL-qblvPRAQSaLCs.roa
Signing time: Fri 20 Jan 2023 15:38:43 +0000
ROA not before: Fri 20 Jan 2023 15:38:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202360
IP address blocks: 194.6.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cf:d5:0c:2e:66:f6:bf:fa:d2:e0:97:f9:1a:16:15:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 20 15:38:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3bd5f6c0bb1bd3ea52fea9b96f3d101049a2c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0a:f6:2f:26:8f:0a:81:7d:87:69:e8:a8:dd:
2c:ff:4e:1c:19:7e:e0:9e:da:7e:44:03:ca:0e:d8:
85:ce:94:43:89:7f:a6:82:e0:79:5a:59:ad:fd:04:
07:b7:f4:03:fe:0a:e3:16:50:4b:4f:6b:a5:91:5e:
a3:93:7c:64:78:d1:9f:72:93:64:06:1f:f9:c5:04:
4e:72:1b:90:65:e6:71:9c:15:9e:24:10:fd:da:6e:
21:d1:3a:ec:d5:4c:1e:a4:c7:31:35:da:c2:3d:b6:
17:e4:ea:34:9f:7a:48:54:a6:f7:ec:4e:9b:54:0d:
7d:38:d5:4b:59:19:bc:1b:a4:c4:fe:3b:ae:c8:33:
27:73:02:a1:1c:db:49:c4:11:7b:e3:b4:d3:19:3c:
55:31:f7:dc:5a:a3:e7:29:3c:3e:ae:79:c9:42:fb:
b1:1d:b0:84:dc:22:de:c3:86:76:9b:b9:4a:9a:e5:
85:26:0e:46:4c:3c:b3:a8:13:08:46:17:5a:25:c9:
4b:0b:a3:9c:46:40:b2:b8:b2:29:49:67:e0:e0:81:
bd:34:3b:a1:01:99:d6:0c:3a:0c:13:e6:d7:be:31:
77:11:9b:60:48:a8:82:b0:63:3a:3e:e2:75:48:2f:
bb:e1:5c:10:09:3d:bc:1c:0f:3e:5b:24:3f:cd:5f:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:5F:6C:0B:B1:BD:3E:A5:2F:EA:9B:96:F3:D1:01:04:9A:2C:2B
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/w71fbAuxvT6lL-qblvPRAQSaLCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.186.0/24
Signature Algorithm: sha256WithRSAEncryption
47:47:96:e7:b6:16:92:f6:17:54:99:6e:23:1c:87:07:82:9b:
83:45:67:39:9e:96:5e:1f:e9:79:cc:82:92:1b:7e:e7:e2:88:
d1:5e:32:87:43:df:df:b5:3c:4b:65:de:05:0d:35:47:fb:b0:
8b:f5:6b:cc:35:1d:02:40:2a:6c:9e:04:4a:d9:86:27:7e:33:
cf:3c:0e:01:9e:82:a1:ce:f1:f4:39:69:5b:9a:15:2c:d5:b2:
f1:75:9b:f5:6a:a6:c1:79:e4:b6:b3:96:f3:4b:27:39:9d:c9:
67:f5:b4:38:3b:99:cc:2d:12:dd:82:83:6d:fc:79:ab:be:10:
7c:26:9b:20:08:42:a3:45:09:30:90:83:64:ae:8d:8f:43:cd:
9e:ec:62:de:b7:89:7e:35:e0:54:10:b7:bb:f5:4e:c7:6c:0f:
fe:c1:58:f9:f9:85:6b:de:b8:1c:96:56:3e:91:22:ac:bf:43:
d6:74:20:54:2e:f9:5f:b4:02:84:73:0f:2d:ec:76:c3:f1:9d:
75:a2:9e:e3:00:9d:15:a1:d0:18:d7:e8:22:37:22:ab:01:9b:
91:7a:35:90:e3:c8:cc:15:58:ce:c8:3a:fc:bb:51:93:d1:33:
2d:70:3b:51:19:09:26:6d:af:73:93:56:be:cd:08:f0:a2:ea:
71:cb:aa:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXP1QwuZva/+tLgl/kaFhXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjMwMTIwMTUzODQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2JkNWY2YzBiYjFiZDNlYTUyZmVhOWI5NmYzZDEwMTA0OWEyYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwr2LyaPCoF9h2noqN0s/04cGX7g
ntp+RAPKDtiFzpRDiX+mguB5Wlmt/QQHt/QD/grjFlBLT2ulkV6jk3xkeNGfcpNk
Bh/5xQROchuQZeZxnBWeJBD92m4h0Trs1UwepMcxNdrCPbYX5Oo0n3pIVKb37E6b
VA19ONVLWRm8G6TE/juuyDMncwKhHNtJxBF747TTGTxVMffcWqPnKTw+rnnJQvux
HbCE3CLew4Z2m7lKmuWFJg5GTDyzqBMIRhdaJclLC6OcRkCyuLIpSWfg4IG9NDuh
AZnWDDoME+bXvjF3EZtgSKiCsGM6PuJ1SC+74VwQCT28HA8+WyQ/zV/UMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMO9X2wLsb0+pS/qm5bz0QEEmiwrMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvdzcxZmJBdXh2VDZsTC1xYmx2UFJBUVNhTENzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwga6MA0G
CSqGSIb3DQEBCwUAA4IBAQBHR5bnthaS9hdUmW4jHIcHgpuDRWc5npZeH+l5zIKS
G37n4ojRXjKHQ9/ftTxLZd4FDTVH+7CL9WvMNR0CQCpsngRK2YYnfjPPPA4BnoKh
zvH0OWlbmhUs1bLxdZv1aqbBeeS2s5bzSyc5ncln9bQ4O5nMLRLdgoNt/HmrvhB8
JpsgCEKjRQkwkINkro2PQ82e7GLet4l+NeBUELe79U7HbA/+wVj5+YVr3rgcllY+
kSKsv0PWdCBULvlftAKEcw8t7HbD8Z11op7jAJ0VodAY1+giNyKrAZuRejWQ48jM
FVjOyDr8u1GT0TMtcDtRGQkmba9zk1a+zQjwoupxy6p2
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:32:35 2025 by rpki-client