Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/acwxUWbdpUsqhVn5F3e7J-KWE_s.roa
File: acwxUWbdpUsqhVn5F3e7J-KWE_s.roa (raw, json)
Hash identifier: k6IT6xJnQ84kL4p0G7+fu3bTiBrlku3nIpx+yEYBw0M=
Subject key identifier: 69:CC:31:51:66:DD:A5:4B:2A:85:59:F9:17:77:BB:27:E2:96:13:FB
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 0194228DBA4B52F3782A83CEC72805F667AE
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/acwxUWbdpUsqhVn5F3e7J-KWE_s.roa
Signing time: Wed 01 Jan 2025 15:48:20 +0000
ROA not before: Wed 01 Jan 2025 15:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25178
IP address blocks: 212.9.96.0/19 maxlen: 24
2a02:2b90::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ba:4b:52:f3:78:2a:83:ce:c7:28:05:f6:67:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jan 1 15:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69cc315166dda54b2a8559f91777bb27e29613fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:3c:a6:d7:a4:49:00:c7:d5:b6:f4:af:cf:
3c:1a:23:0b:0e:cd:5b:4f:c4:cc:b6:af:be:ea:4b:
da:94:0c:66:f5:38:e1:7b:86:48:b8:62:b4:81:f2:
45:fa:ce:90:3d:48:67:6d:4a:8e:7d:b6:4d:c9:3b:
27:1e:0f:af:d6:01:16:11:8c:c1:65:c9:05:27:5d:
25:40:11:cb:1f:5d:f0:3c:52:33:a8:d6:9f:08:4e:
5d:3c:40:6d:b7:6e:68:59:84:77:6d:58:5b:4d:c1:
ad:e8:24:5b:94:0a:cb:2b:72:1d:3a:7b:66:0b:40:
c9:9b:b4:ea:95:84:7e:21:56:2d:f2:d5:8e:fe:ed:
e7:70:2f:39:88:55:73:82:39:f7:fd:cc:a3:cf:8f:
9f:e4:0b:db:3e:ec:f0:b9:8d:1c:ab:51:b5:b2:dc:
4d:09:30:56:55:34:04:e6:f4:55:7b:7d:bd:78:3d:
42:28:6d:bf:56:3d:d4:55:0c:64:db:8c:e0:ec:35:
cf:5c:cd:7e:8c:93:f7:90:a2:07:46:dd:ca:94:cc:
e5:ab:93:bc:e7:7d:92:75:d0:ad:65:d9:ee:85:cd:
a4:a8:e5:9c:25:2b:5a:3a:02:dd:dc:7d:8b:53:47:
5d:df:0f:d9:3c:33:7d:e4:07:16:b3:9a:92:ea:fc:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CC:31:51:66:DD:A5:4B:2A:85:59:F9:17:77:BB:27:E2:96:13:FB
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/acwxUWbdpUsqhVn5F3e7J-KWE_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.9.96.0/19
IPv6:
2a02:2b90::/29
Signature Algorithm: sha256WithRSAEncryption
79:aa:74:e7:85:64:81:62:3a:ab:d3:18:b6:80:57:17:0d:f1:
c1:77:19:b6:aa:f6:db:93:c3:49:ad:2c:2d:99:dc:b9:f0:84:
b0:3c:9e:55:09:d5:03:b8:af:06:3c:fd:85:e3:a3:eb:fb:0d:
3a:a4:82:b9:e0:6d:74:ec:49:45:5f:91:dd:18:12:5f:a8:8c:
24:ae:36:67:40:98:9f:31:17:52:c3:86:bd:18:59:69:f2:ef:
ed:a0:7e:d7:7d:33:d3:b1:08:08:02:6f:7d:fd:75:86:f5:22:
67:f1:ac:31:ce:bd:4a:5e:a9:65:ea:9e:1e:a1:97:c6:d6:de:
50:a4:d8:4e:c3:21:6d:4d:5d:ff:5d:77:2a:5f:b2:df:e9:24:
a3:8c:94:5a:e0:f2:9c:c5:91:6d:f3:69:3a:30:b0:53:f9:21:
15:54:f0:d2:4f:4f:47:60:11:d7:63:3e:ea:40:47:98:83:21:
8f:01:13:b9:78:87:8c:5b:ed:4e:c2:38:eb:d6:e3:5d:49:70:
08:33:88:6b:cf:76:a1:0c:46:04:f1:5c:91:4a:eb:c7:37:4f:
f0:bd:cd:fe:31:fa:08:5c:80:20:c6:95:06:60:92:ac:ff:13:
82:e6:22:30:20:f2:48:ae:47:93:90:cb:e7:07:b4:1f:28:36:
c5:b6:8f:64
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQijbpLUvN4KoPOxygF9meuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm
ZjQzODAwHhcNMjUwMTAxMTU0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWNjMzE1MTY2ZGRhNTRiMmE4NTU5ZjkxNzc3YmIyN2UyOTYxM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnQ8ptekSQDH1bb0r888GiMLDs1b
T8TMtq++6kvalAxm9Tjhe4ZIuGK0gfJF+s6QPUhnbUqOfbZNyTsnHg+v1gEWEYzB
ZckFJ10lQBHLH13wPFIzqNafCE5dPEBtt25oWYR3bVhbTcGt6CRblArLK3IdOntm
C0DJm7TqlYR+IVYt8tWO/u3ncC85iFVzgjn3/cyjz4+f5AvbPuzwuY0cq1G1stxN
CTBWVTQE5vRVe329eD1CKG2/Vj3UVQxk24zg7DXPXM1+jJP3kKIHRt3KlMzlq5O8
532SddCtZdnuhc2kqOWcJStaOgLd3H2LU0dd3w/ZPDN95AcWs5qS6vwGRQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGnMMVFm3aVLKoVZ+Rd3uyfilhP7MB8GA1UdIwQY
MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt
MDYzZmNkZDNhMDU3LzEvYWN3eFVXYmRwVXNxaFZuNUYzZTdKLUtXRV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3
LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1AlgMA0E
AgACMAcDBQMqAiuQMA0GCSqGSIb3DQEBCwUAA4IBAQB5qnTnhWSBYjqr0xi2gFcX
DfHBdxm2qvbbk8NJrSwtmdy58ISwPJ5VCdUDuK8GPP2F46Pr+w06pIK54G107ElF
X5HdGBJfqIwkrjZnQJifMRdSw4a9GFlp8u/toH7XfTPTsQgIAm99/XWG9SJn8awx
zr1KXqll6p4eoZfG1t5QpNhOwyFtTV3/XXcqX7Lf6SSjjJRa4PKcxZFt82k6MLBT
+SEVVPDST09HYBHXYz7qQEeYgyGPARO5eIeMW+1Owjjr1uNdSXAIM4hrz3ahDEYE
8VyRSuvHN0/wvc3+MfoIXIAgxpUGYJKs/xOC5iIwIPJIrkeTkMvnB7QfKDbFto9k
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:54:43 2025 by rpki-client