Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_wA6baHKSjUU4uYAJVQGQ4P4buo.roa
File: _wA6baHKSjUU4uYAJVQGQ4P4buo.roa (raw, json)
Hash identifier: yPkCcDCU0hgY7hB5st+oxWHt7DxHHE88YX0/0D5OH0M=
Subject key identifier: FF:00:3A:6D:A1:CA:4A:35:14:E2:E6:00:25:54:06:43:83:F8:6E:EA
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424451CCEF105A9DEF731F7834CA75019
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_wA6baHKSjUU4uYAJVQGQ4P4buo.roa
Signing time: Wed 01 Jan 2025 23:48:16 +0000
ROA not before: Wed 01 Jan 2025 23:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50430
IP address blocks: 93.157.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1c:ce:f1:05:a9:de:f7:31:f7:83:4c:a7:50:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff003a6da1ca4a3514e2e6002554064383f86eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:5c:84:58:38:55:f9:20:d0:eb:93:19:9d:
95:74:f4:bb:c6:1d:e7:8e:60:74:fa:07:98:94:11:
86:7e:9d:5a:43:16:89:cf:55:43:d5:cc:71:30:a8:
96:0b:62:0f:3c:20:c4:be:a0:51:15:32:8c:b8:3c:
f1:4e:71:b9:0e:84:6e:29:a8:48:28:bc:2d:ae:bd:
5d:1f:06:f9:1a:02:f3:fa:18:fe:e2:a0:50:3f:06:
b1:e3:4b:1f:51:1e:1e:15:96:88:38:3f:dd:09:d0:
4d:79:de:37:d8:2e:9a:64:2e:36:83:c4:af:62:5b:
5a:82:00:af:e9:c7:25:51:28:92:02:ab:72:9a:cd:
bd:d7:52:a5:64:27:46:28:8d:25:79:11:e2:17:ac:
39:25:5b:b2:99:0b:9c:3c:14:29:e3:a0:de:2f:f5:
19:c4:eb:44:79:80:ef:ac:08:65:22:15:77:53:6d:
eb:84:15:4c:47:ab:d4:4b:73:2e:cb:07:db:83:b3:
39:c6:28:f6:23:83:4d:55:61:f1:82:98:40:82:d3:
c3:fa:ac:f0:8f:8b:4d:ce:8e:b1:ed:3b:9d:bc:00:
9a:5d:0b:12:c9:69:4b:30:cb:17:44:fa:5c:96:a8:
35:0e:2c:76:8f:f6:e6:31:f5:fb:74:43:54:39:5c:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:00:3A:6D:A1:CA:4A:35:14:E2:E6:00:25:54:06:43:83:F8:6E:EA
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/_wA6baHKSjUU4uYAJVQGQ4P4buo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.110.0/24
Signature Algorithm: sha256WithRSAEncryption
25:0c:ef:96:f3:69:e6:69:d8:5e:9d:83:c0:4f:e7:bc:6c:45:
bf:b1:c6:40:fe:c8:31:88:1e:03:3d:9c:fa:4d:04:88:38:95:
af:3b:4f:e2:b3:3b:36:90:c2:1a:6c:00:7f:00:b5:5b:88:61:
27:1d:dd:3e:4b:22:79:0e:6f:b7:ed:e0:76:3d:c4:8d:8a:f9:
55:ac:15:cc:e2:26:b8:72:b1:7b:ab:92:b6:33:0e:0a:87:e6:
f1:59:eb:a5:08:dc:2f:7c:d6:96:b8:42:af:42:2f:84:d2:95:
bb:15:85:4d:bb:3c:d8:ac:36:94:4c:74:c4:f2:51:9c:85:c2:
9f:ef:95:08:b9:b1:be:4d:ff:af:7a:43:d1:98:47:25:02:4b:
13:f4:9e:c6:c1:10:35:e8:b8:3e:c8:b5:9e:dd:53:97:8f:2c:
12:16:d6:a5:ee:2c:3f:ae:c2:36:17:65:d0:df:3b:e7:5f:97:
51:cf:75:02:4b:f1:e0:7c:ad:71:23:bd:c3:b5:19:77:9e:f2:
65:5d:20:3e:78:02:5c:3d:a0:52:5b:4b:db:65:7c:63:6f:67:
f7:32:c2:50:da:40:64:5e:14:48:7c:46:7b:d6:f6:fa:eb:8b:
36:ee:a9:2c:3c:9d:79:12:0f:cc:62:0e:55:6d:f3:6f:c2:29:
c1:aa:ea:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRRzO8QWp3vcx94NMp1AZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjAwM2E2ZGExY2E0YTM1MTRlMmU2MDAyNTU0MDY0MzgzZjg2ZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aZchFg4Vfkg0OuTGZ2VdPS7xh3n
jmB0+geYlBGGfp1aQxaJz1VD1cxxMKiWC2IPPCDEvqBRFTKMuDzxTnG5DoRuKahI
KLwtrr1dHwb5GgLz+hj+4qBQPwax40sfUR4eFZaIOD/dCdBNed432C6aZC42g8Sv
YltaggCv6cclUSiSAqtyms2911KlZCdGKI0leRHiF6w5JVuymQucPBQp46DeL/UZ
xOtEeYDvrAhlIhV3U23rhBVMR6vUS3Muywfbg7M5xij2I4NNVWHxgphAgtPD+qzw
j4tNzo6x7TudvACaXQsSyWlLMMsXRPpclqg1Dix2j/bmMfX7dENUOVy6GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8AOm2hyko1FOLmACVUBkOD+G7qMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvX3dBNmJhSEtTalVVNHVZQUpWUUdRNFA0YnVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ1uMA0G
CSqGSIb3DQEBCwUAA4IBAQAlDO+W82nmadhenYPAT+e8bEW/scZA/sgxiB4DPZz6
TQSIOJWvO0/iszs2kMIabAB/ALVbiGEnHd0+SyJ5Dm+37eB2PcSNivlVrBXM4ia4
crF7q5K2Mw4Kh+bxWeulCNwvfNaWuEKvQi+E0pW7FYVNuzzYrDaUTHTE8lGchcKf
75UIubG+Tf+vekPRmEclAksT9J7GwRA16Lg+yLWe3VOXjywSFtal7iw/rsI2F2XQ
3zvnX5dRz3UCS/HgfK1xI73DtRl3nvJlXSA+eAJcPaBSW0vbZXxjb2f3MsJQ2kBk
XhRIfEZ71vb664s27qksPJ15Eg/MYg5VbfNvwinBqur9
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:41 2025 by rpki-client