Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x5wmbZx0sWB60ULumig9Nfrufi0.roa
File: x5wmbZx0sWB60ULumig9Nfrufi0.roa (raw, json)
Hash identifier: 1m24A59yB02O6R7PbEDFpwjGr+Jcjr/rxT77V0qn4o8=
Subject key identifier: C7:9C:26:6D:9C:74:B1:60:7A:D1:42:EE:9A:28:3D:35:FA:EE:7E:2D
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067CC4B01BF595B587346897461244D
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x5wmbZx0sWB60ULumig9Nfrufi0.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48038
IP address blocks: 212.243.39.0/24 maxlen: 24
2001:918:ff3e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cc:4b:01:bf:59:5b:58:73:46:89:74:61:24:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c79c266d9c74b1607ad142ee9a283d35faee7e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:24:98:5f:bd:2c:9c:77:2c:da:0c:63:f9:
b0:86:30:36:84:3c:24:9d:86:2e:4b:7f:db:86:56:
ea:da:65:73:29:fa:49:7c:21:eb:7f:b5:2e:c0:6a:
86:f0:b7:04:95:2c:1a:eb:2d:48:f0:af:a3:f3:1f:
1e:ac:9f:7d:be:f9:67:9f:37:c9:7a:fa:47:84:4b:
d7:f8:d8:e6:60:b9:a3:fa:81:c6:e2:5a:6e:66:61:
bc:bb:d8:33:3a:5a:15:4b:0c:79:f1:e3:ea:60:d2:
2c:3e:fc:36:1d:25:a0:21:2f:62:9f:a2:c0:ba:d6:
3d:89:59:4a:0f:72:72:0e:38:52:71:d8:2b:c0:f8:
32:b0:11:4c:14:c0:6b:e0:99:7c:bf:3d:d3:ac:b9:
a0:b6:e2:4f:b0:ae:c3:83:16:0a:cf:51:00:70:92:
ee:d8:0f:4b:5b:ec:fa:ea:c6:63:75:20:f6:c5:ee:
3c:b7:0b:79:18:eb:1c:8a:60:c7:97:46:b2:7d:67:
cf:0f:e2:a3:87:83:f5:36:3e:b6:2b:15:2e:4a:53:
63:95:de:df:3b:41:80:2b:72:bf:72:77:b2:f5:6c:
d3:4c:10:d7:49:dc:9b:2d:e5:d2:28:33:90:39:ae:
a6:f7:2f:c1:a7:a5:a7:46:97:25:d4:9b:c8:8a:0f:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9C:26:6D:9C:74:B1:60:7A:D1:42:EE:9A:28:3D:35:FA:EE:7E:2D
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/x5wmbZx0sWB60ULumig9Nfrufi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.243.39.0/24
IPv6:
2001:918:ff3e::/48
Signature Algorithm: sha256WithRSAEncryption
24:6b:3d:1f:d4:b5:1d:46:fc:4a:0f:52:35:4c:65:73:d6:c1:
87:54:2b:25:57:d4:69:d6:a5:6c:c5:81:51:94:c8:c9:86:6f:
93:6c:da:a6:67:e2:40:b0:0e:ac:15:ad:a2:89:6c:dc:38:65:
f2:86:83:eb:de:2b:65:80:57:38:70:af:3e:8e:f9:81:f1:30:
d0:55:ab:43:bf:10:bb:fe:2e:7d:ba:a8:4f:25:a6:68:12:0e:
58:5f:f3:58:e2:57:58:20:0d:e8:4f:14:9a:6f:04:5c:01:e9:
a3:ad:b4:26:68:8f:12:37:b4:fe:9e:2c:1e:d0:a5:26:e1:f1:
f5:ed:72:ed:b4:a5:ed:e4:a9:54:33:f6:04:fc:e7:9c:63:9c:
55:c9:2c:c7:f9:da:28:53:de:40:8b:78:d5:0a:b8:c1:85:a4:
92:7a:fc:95:08:df:22:83:94:e2:2e:19:9d:c9:ab:94:51:69:
51:6f:9b:24:47:8e:c4:c0:c3:72:9f:af:07:fc:7b:6e:01:4a:
58:5a:64:3e:f1:c4:7f:f6:5b:7c:45:f5:cf:70:6f:f5:5f:5a:
7a:60:0c:fb:a8:3c:6b:18:1c:d4:ff:a5:95:7b:75:15:64:85:
ce:81:2c:5c:c6:a1:f6:42:99:b0:38:c5:3b:d0:a0:1b:fd:3f:
cc:dc:51:8a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQgZ8xLAb9ZW1hzRol0YSRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy
MDRjOGQwHhcNMjUwMTAxMDU0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzljMjY2ZDljNzRiMTYwN2FkMTQyZWU5YTI4M2QzNWZhZWU3ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHYkmF+9LJx3LNoMY/mwhjA2hDwk
nYYuS3/bhlbq2mVzKfpJfCHrf7UuwGqG8LcElSwa6y1I8K+j8x8erJ99vvlnnzfJ
evpHhEvX+NjmYLmj+oHG4lpuZmG8u9gzOloVSwx58ePqYNIsPvw2HSWgIS9in6LA
utY9iVlKD3JyDjhScdgrwPgysBFMFMBr4Jl8vz3TrLmgtuJPsK7DgxYKz1EAcJLu
2A9LW+z66sZjdSD2xe48twt5GOscimDHl0ayfWfPD+Kjh4P1Nj62KxUuSlNjld7f
O0GAK3K/cney9WzTTBDXSdybLeXSKDOQOa6m9y/Bp6WnRpcl1JvIig9k0wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMecJm2cdLFgetFC7pooPTX67n4tMB8GA1UdIwQY
MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEveDV3bWJaeDBzV0I2MFVMdW1pZzlOZnJ1ZmkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1PMnMA8E
AgACMAkDBwAgAQkY/z4wDQYJKoZIhvcNAQELBQADggEBACRrPR/UtR1G/EoPUjVM
ZXPWwYdUKyVX1GnWpWzFgVGUyMmGb5Ns2qZn4kCwDqwVraKJbNw4ZfKGg+veK2WA
Vzhwrz6O+YHxMNBVq0O/ELv+Ln26qE8lpmgSDlhf81jiV1ggDehPFJpvBFwB6aOt
tCZojxI3tP6eLB7QpSbh8fXtcu20pe3kqVQz9gT855xjnFXJLMf52ihT3kCLeNUK
uMGFpJJ6/JUI3yKDlOIuGZ3Jq5RRaVFvmyRHjsTAw3Kfrwf8e24BSlhaZD7xxH/2
W3xF9c9wb/VfWnpgDPuoPGsYHNT/pZV7dRVkhc6BLFzGofZCmbA4xTvQoBv9P8zc
UYo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:29 2025 by rpki-client