Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/WtEu1vXVIHUsF5D6OAe331VeZb0.roa
File: WtEu1vXVIHUsF5D6OAe331VeZb0.roa (raw, json)
Hash identifier: innXLSTpadWQE6vdl9sJcpwKBMT3URBPykIR8bFPun8=
Subject key identifier: 5A:D1:2E:D6:F5:D5:20:75:2C:17:90:FA:38:07:B7:DF:55:5E:65:BD
Certificate issuer: /CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Certificate serial: 018CC5DC081875C92C68EE865F7E46E0F20B
Authority key identifier: B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/WtEu1vXVIHUsF5D6OAe331VeZb0.roa
Signing time: Mon 01 Jan 2024 16:29:40 +0000
ROA not before: Mon 01 Jan 2024 16:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 195.177.248.0/23 maxlen: 23
193.22.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:08:18:75:c9:2c:68:ee:86:5f:7e:46:e0:f2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32f015f6a2345345cb3daf230c25c8fae02305a
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ad12ed6f5d520752c1790fa3807b7df555e65bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:e1:2d:f8:1f:69:c3:64:52:c8:68:ce:91:
0d:e8:bd:14:b7:97:b7:79:18:e9:25:a2:47:f1:56:
d0:f8:32:71:61:8a:15:14:93:78:db:ff:e4:70:62:
b2:a7:8c:ca:85:f8:e0:d5:2c:e4:13:7d:71:48:72:
b4:b9:b1:fc:70:51:71:83:6a:5a:8c:e7:00:0a:0a:
54:0f:b1:2e:8b:a7:41:60:33:6a:cf:ae:f9:76:a1:
fd:05:cb:75:bf:26:bb:b1:aa:db:dc:11:91:5b:17:
fb:91:55:27:ff:55:be:b6:39:53:48:5b:dd:8d:a9:
88:ec:a7:09:c9:24:06:84:a7:b5:bd:ce:25:42:da:
39:54:79:e7:9f:a2:fa:ee:d1:8a:76:9a:7a:b2:00:
d1:77:e9:f4:7c:3a:7a:f5:11:5c:a6:50:10:31:64:
ce:56:4f:4c:7f:27:39:c2:de:e7:b3:ea:61:b1:43:
ea:4d:4c:ab:ea:4f:3f:7e:8d:73:5d:07:9c:7e:e0:
1c:0d:0a:92:2b:2c:c7:c9:e7:fb:a6:73:88:37:25:
7d:b5:d8:23:75:ae:43:d3:49:d7:a5:9f:96:d3:02:
28:b5:16:0b:c5:31:94:41:70:06:08:55:10:b1:6f:
f9:af:a8:1e:79:fe:db:ad:24:48:e1:0f:1a:8a:17:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D1:2E:D6:F5:D5:20:75:2C:17:90:FA:38:07:B7:DF:55:5E:65:BD
X509v3 Authority Key Identifier:
keyid:B3:2F:01:5F:6A:23:45:34:5C:B3:DA:F2:30:C2:5C:8F:AE:02:30:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy8BX2ojRTRcs9ryMMJcj64CMFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/WtEu1vXVIHUsF5D6OAe331VeZb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c01f5b-6d28-441d-8c15-1fcdac6f0183/1/sy8BX2ojRTRcs9ryMMJcj64CMFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.103.0/24
195.177.248.0/23
Signature Algorithm: sha256WithRSAEncryption
51:06:31:bf:0b:74:39:1e:16:51:0e:ea:48:a5:fd:b5:78:78:
01:d3:ae:9f:6c:5c:96:04:fa:be:17:aa:a8:1c:53:27:4e:75:
82:05:89:c1:da:93:66:bd:f6:86:c5:93:2f:f4:64:4e:94:6f:
86:7c:8f:d9:b1:23:8d:01:0f:93:2f:49:9e:b9:9a:49:4f:92:
c2:72:1b:94:76:00:f4:85:46:fd:2c:55:8d:97:8e:25:d0:c9:
f0:95:8f:08:b7:32:c4:4c:6f:51:e7:01:78:5f:3c:33:80:47:
eb:05:a5:60:f9:f9:ff:bb:98:f6:b6:50:ad:0b:58:89:0f:3f:
6a:2c:88:ef:38:d0:0d:2e:11:c7:0b:d9:a0:79:54:c6:77:78:
09:e3:31:2c:b8:9c:6f:87:c5:0b:e8:13:34:93:b2:ac:fb:ee:
76:c8:3f:d0:5f:3f:f1:a6:b1:e1:86:c4:3c:46:c8:1b:60:81:
eb:0d:e9:96:86:bc:79:06:76:b6:18:5d:ae:7d:0f:9a:7f:d5:
a3:d9:98:a7:e6:96:bb:56:67:f8:17:b2:e8:99:b0:95:1d:b7:
f1:71:0b:9b:69:20:c1:f9:94:6c:e9:f5:1d:bd:4b:a0:ba:90:
29:fb:52:8d:da:3e:3f:02:25:95:dc:f6:45:01:f9:5a:a5:01:
50:a0:97:20
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzF3AgYdcksaO6GX35G4PILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmYwMTVmNmEyMzQ1MzQ1Y2IzZGFmMjMwYzI1YzhmYWUw
MjMwNWEwHhcNMjQwMTAxMTYyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWQxMmVkNmY1ZDUyMDc1MmMxNzkwZmEzODA3YjdkZjU1NWU2NWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRnhLfgfacNkUshozpEN6L0Ut5e3
eRjpJaJH8VbQ+DJxYYoVFJN42//kcGKyp4zKhfjg1SzkE31xSHK0ubH8cFFxg2pa
jOcACgpUD7Eui6dBYDNqz675dqH9Bct1vya7sarb3BGRWxf7kVUn/1W+tjlTSFvd
jamI7KcJySQGhKe1vc4lQto5VHnnn6L67tGKdpp6sgDRd+n0fDp69RFcplAQMWTO
Vk9Mfyc5wt7ns+phsUPqTUyr6k8/fo1zXQecfuAcDQqSKyzHyef7pnOINyV9tdgj
da5D00nXpZ+W0wIotRYLxTGUQXAGCFUQsW/5r6geef7brSRI4Q8aiheGtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFrRLtb11SB1LBeQ+jgHt99VXmW9MB8GA1UdIwQY
MBaAFLMvAV9qI0U0XLPa8jDCXI+uAjBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3k4Qlgyb2pSVFJjczlyeU1NSmNqNjRDTUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9jMDFmNWItNmQyOC00NDFkLThjMTUt
MWZjZGFjNmYwMTgzLzEvV3RFdTF2WFZJSFVzRjVENk9BZTMzMVZlWmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9jMDFmNWItNmQyOC00NDFkLThjMTUtMWZjZGFjNmYwMTgz
LzEvc3k4Qlgyb2pSVFJjczlyeU1NSmNqNjRDTUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRZnAwQB
w7H4MA0GCSqGSIb3DQEBCwUAA4IBAQBRBjG/C3Q5HhZRDupIpf21eHgB066fbFyW
BPq+F6qoHFMnTnWCBYnB2pNmvfaGxZMv9GROlG+GfI/ZsSONAQ+TL0meuZpJT5LC
chuUdgD0hUb9LFWNl44l0MnwlY8ItzLETG9R5wF4XzwzgEfrBaVg+fn/u5j2tlCt
C1iJDz9qLIjvONANLhHHC9mgeVTGd3gJ4zEsuJxvh8UL6BM0k7Ks++52yD/QXz/x
prHhhsQ8RsgbYIHrDemWhrx5Bna2GF2ufQ+af9Wj2Zin5pa7Vmf4F7LombCVHbfx
cQubaSDB+ZRs6fUdvUugupAp+1KN2j4/AiWV3PZFAflapQFQoJcg
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:15 2025 by rpki-client