Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/1WZ95Wg0s9pLpvM-jzr7_MWbImE.roa
File: 1WZ95Wg0s9pLpvM-jzr7_MWbImE.roa (raw, json)
Hash identifier: l3k3Lh2O5iHj4wR10Uu2X0tHCVc4Ye6Z9QFj6uUWQLA=
Subject key identifier: D5:66:7D:E5:68:34:B3:DA:4B:A6:F3:3E:8F:3A:FB:FC:C5:9B:22:61
Certificate issuer: /CN=983dd29a579875009dbc4139668b148b8884b637
Certificate serial: 018CCA99559C26FD4B157C3BCBFC0EBE5410
Authority key identifier: 98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/1WZ95Wg0s9pLpvM-jzr7_MWbImE.roa
Signing time: Tue 02 Jan 2024 14:34:55 +0000
ROA not before: Tue 02 Jan 2024 14:34:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41354
IP address blocks: 185.179.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:55:9c:26:fd:4b:15:7c:3b:cb:fc:0e:be:54:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983dd29a579875009dbc4139668b148b8884b637
Validity
Not Before: Jan 2 14:34:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5667de56834b3da4ba6f33e8f3afbfcc59b2261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:7d:30:b1:06:b9:0e:ed:f2:38:48:e8:be:
98:62:2c:db:e5:7a:5c:f0:58:5f:63:04:7d:75:97:
e0:a9:d1:04:92:87:01:dd:0b:33:06:8d:d8:be:e9:
49:78:1b:01:32:c1:be:0c:cd:70:88:d8:da:75:88:
c8:b7:0d:9b:4e:f4:1f:8d:93:28:62:c1:3e:8e:af:
8c:be:3a:86:be:30:61:e7:8b:5d:84:8b:8a:3c:46:
af:ae:b9:a9:6b:d0:85:e4:c3:e2:52:26:ee:71:27:
b7:f1:f5:c2:a7:f3:a8:f4:13:a9:a7:0c:f4:ca:da:
b2:1b:96:de:8b:8c:b3:dc:14:bf:dd:20:ce:06:f5:
b5:b7:0f:44:2f:75:f8:58:60:85:b4:82:41:5a:af:
b7:b8:5a:b4:50:8c:d8:a1:5e:85:b6:6f:52:ae:88:
9d:b5:73:0f:4d:57:70:e5:5f:5e:d2:6e:90:71:e7:
d2:ad:88:df:cd:2f:dd:20:1e:6e:2d:14:9d:dd:eb:
1b:20:fe:00:32:a8:b6:39:73:4c:2f:5d:24:95:48:
cd:60:fb:67:38:d7:c2:39:bc:23:d1:19:72:8b:dd:
ef:af:17:66:7f:8f:cd:0c:68:74:f3:b2:84:8b:5f:
70:eb:46:e0:6a:bb:aa:dd:08:59:94:7d:44:dc:a1:
63:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:7D:E5:68:34:B3:DA:4B:A6:F3:3E:8F:3A:FB:FC:C5:9B:22:61
X509v3 Authority Key Identifier:
keyid:98:3D:D2:9A:57:98:75:00:9D:BC:41:39:66:8B:14:8B:88:84:B6:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD3SmleYdQCdvEE5ZosUi4iEtjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/1WZ95Wg0s9pLpvM-jzr7_MWbImE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/434e80-299c-4ca5-badd-ab95f7c7a476/1/mD3SmleYdQCdvEE5ZosUi4iEtjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.123.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e4:6c:63:f8:2d:37:16:14:9a:6d:d0:bb:6c:cf:32:3e:c1:
b2:a5:95:ab:93:fe:cb:ed:b4:fc:b2:1d:0b:69:1e:dc:39:d5:
04:fa:47:6c:46:94:fa:17:02:d3:2e:9b:d7:e0:c3:64:60:9c:
27:7b:e7:2c:b8:1f:92:70:1c:fd:88:3f:f3:1e:4e:ae:cf:96:
07:12:85:d1:0a:9b:ab:ee:34:25:3f:43:cd:b3:ff:d1:09:a6:
33:16:aa:f2:b0:74:7e:17:81:11:02:de:51:f7:98:1f:44:43:
6d:2e:29:97:78:b8:07:c4:0e:ee:7c:ac:da:20:c4:ee:02:0d:
6f:23:04:40:de:cc:49:56:23:65:bf:d1:54:24:43:a7:cd:ec:
13:c8:c0:9c:cc:3c:cb:1c:fb:28:4b:f8:0e:66:61:74:c6:65:
35:73:87:c7:ca:ee:c1:15:26:35:10:f2:e3:b0:3c:b2:47:13:
40:91:d3:03:5a:84:db:c4:8e:a3:63:0e:03:c1:0f:80:5b:18:
d3:53:68:11:6d:d0:a6:9e:2e:6d:74:a7:07:00:a4:97:2b:97:
a5:55:c9:8a:a7:1a:77:4d:a2:8c:cd:3e:1a:a6:c5:be:97:bf:
90:88:cf:c3:4b:38:b9:ab:b2:dc:a8:77:1e:0e:2a:aa:3d:4d:
71:a6:6f:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKmVWcJv1LFXw7y/wOvlQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4M2RkMjlhNTc5ODc1MDA5ZGJjNDEzOTY2OGIxNDhiODg4
NGI2MzcwHhcNMjQwMTAyMTQzNDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTY2N2RlNTY4MzRiM2RhNGJhNmYzM2U4ZjNhZmJmY2M1OWIyMjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1t9MLEGuQ7t8jhI6L6YYizb5Xpc
8FhfYwR9dZfgqdEEkocB3QszBo3YvulJeBsBMsG+DM1wiNjadYjItw2bTvQfjZMo
YsE+jq+MvjqGvjBh54tdhIuKPEavrrmpa9CF5MPiUibucSe38fXCp/Oo9BOppwz0
ytqyG5bei4yz3BS/3SDOBvW1tw9EL3X4WGCFtIJBWq+3uFq0UIzYoV6Ftm9Sroid
tXMPTVdw5V9e0m6QcefSrYjfzS/dIB5uLRSd3esbIP4AMqi2OXNML10klUjNYPtn
ONfCObwj0Rlyi93vrxdmf4/NDGh087KEi19w60bgaruq3QhZlH1E3KFjHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNVmfeVoNLPaS6bzPo86+/zFmyJhMB8GA1UdIwQY
MBaAFJg90ppXmHUAnbxBOWaLFIuIhLY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUQzU21sZVlkUUNkdkVFNVpvc1VpNGlFdGpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80MzRlODAtMjk5Yy00Y2E1LWJhZGQt
YWI5NWY3YzdhNDc2LzEvMVdaOTVXZzBzOXBMcHZNLWp6cjdfTVdiSW1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80MzRlODAtMjk5Yy00Y2E1LWJhZGQtYWI5NWY3YzdhNDc2
LzEvbUQzU21sZVlkUUNkdkVFNVpvc1VpNGlFdGpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubN7MA0G
CSqGSIb3DQEBCwUAA4IBAQBj5Gxj+C03FhSabdC7bM8yPsGypZWrk/7L7bT8sh0L
aR7cOdUE+kdsRpT6FwLTLpvX4MNkYJwne+csuB+ScBz9iD/zHk6uz5YHEoXRCpur
7jQlP0PNs//RCaYzFqrysHR+F4ERAt5R95gfRENtLimXeLgHxA7ufKzaIMTuAg1v
IwRA3sxJViNlv9FUJEOnzewTyMCczDzLHPsoS/gOZmF0xmU1c4fHyu7BFSY1EPLj
sDyyRxNAkdMDWoTbxI6jYw4DwQ+AWxjTU2gRbdCmni5tdKcHAKSXK5elVcmKpxp3
TaKMzT4apsW+l7+QiM/DSzi5q7LcqHceDiqqPU1xpm/m
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:47 2025 by rpki-client