Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/WvZhz4-xli7Jg3AjUEb09s8yIcg.roa
File: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (raw, json)
Hash identifier: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=
Subject key identifier: 5A:F6:61:CF:8F:B1:96:2E:C9:83:70:23:50:46:F4:F6:CF:32:21:C8
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 0194228DCA1B01E2DD2D3472B1C31AB01D28
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/WvZhz4-xli7Jg3AjUEb09s8yIcg.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 80.128.0.0/11 maxlen: 11
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ca:1b:01:e2:dd:2d:34:72:b1:c3:1a:b0:1d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5af661cf8fb1962ec98370235046f4f6cf3221c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:a9:04:ab:e2:b4:1c:d6:9b:2b:ce:f5:07:
5b:21:11:ef:3a:d8:cc:07:bd:98:ad:da:70:c8:32:
fa:1e:b0:f3:2b:54:69:87:0c:c5:2e:6a:85:1b:fd:
47:c3:80:dc:00:e7:9a:e6:28:e0:8d:25:63:31:8b:
00:68:05:eb:17:f2:ee:d1:f4:e5:a1:86:04:00:c2:
d1:6e:48:94:9d:46:a1:f6:41:3a:3d:e3:4e:ba:a8:
98:d1:62:3b:93:7c:9f:0d:43:e8:1a:a7:f2:83:3c:
a1:33:51:46:9e:43:8e:5b:63:37:20:cd:86:3e:fd:
eb:e5:5b:39:c2:dc:4a:8a:ea:e7:62:51:1a:e7:86:
99:ac:da:5a:4b:49:1b:c3:36:6d:53:6f:c5:35:1d:
12:2b:9c:e3:a2:c4:ab:63:c8:e6:64:c8:de:60:c3:
80:55:21:d3:40:72:17:02:29:4b:f5:1a:3d:d3:1d:
53:52:77:7c:8d:66:85:35:9e:54:bf:6d:72:51:e6:
4c:bb:ce:a6:97:94:86:b3:ae:cc:2e:fe:b0:e1:24:
9d:3e:7e:e4:c3:f4:ff:44:07:53:74:9a:2e:43:35:
37:0f:5e:48:0c:89:63:ad:6d:58:ed:c3:af:1c:75:
d3:9b:be:ec:c9:5c:ff:72:f1:1d:d7:c7:32:0b:19:
74:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F6:61:CF:8F:B1:96:2E:C9:83:70:23:50:46:F4:F6:CF:32:21:C8
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/WvZhz4-xli7Jg3AjUEb09s8yIcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.128.0.0/11
Signature Algorithm: sha256WithRSAEncryption
a7:f9:37:61:68:75:89:7a:b5:98:3c:b7:ee:c6:94:74:e0:8c:
5d:30:22:af:d3:5d:db:9e:fb:6e:d4:90:26:84:89:36:b1:c8:
3d:ca:05:28:a2:47:8b:2f:12:ba:18:b1:61:a4:cc:8e:18:72:
a4:84:d6:fe:46:bd:e8:63:a7:02:b7:20:58:67:71:8b:0c:61:
4b:19:af:b1:5b:0c:2e:2a:4e:8f:2a:36:61:64:28:2a:ba:57:
ad:bf:16:4a:80:f8:eb:4a:44:0c:4e:cf:bd:17:56:45:35:10:
68:0b:9a:e3:14:f0:fb:55:31:5e:9c:e1:cb:f1:2c:e9:ba:9f:
86:5e:23:5b:7d:7f:ee:00:e6:ab:44:9d:c6:29:2b:af:f2:e8:
fd:7d:c8:1d:01:80:24:07:07:45:bc:ed:da:11:35:96:c9:8f:
d6:75:9e:00:d1:7b:2e:c0:c1:61:f5:ed:71:8b:1d:a1:d8:5a:
ec:41:0b:aa:75:06:84:15:8e:a7:ed:4c:bc:09:66:48:5e:c4:
de:33:d6:0e:c6:7e:e3:a5:7e:88:cc:2d:7d:31:0a:83:0d:e1:
4d:2d:60:8c:f4:06:bc:55:7e:9a:cd:ee:2f:1c:69:01:c9:bb:
f2:51:7c:d6:a3:b3:5e:ee:d8:3f:28:47:62:1d:90:b2:20:bf:
9d:92:dd:c3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQijcobAeLdLTRyscMasB0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZDcxMDBlNzdlZDkxMTlkNjZlMjMyMWJiNjcxMWQ3ZTc2
MDk4MmIwHhcNMjUwMTAxMTU0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWY2NjFjZjhmYjE5NjJlYzk4MzcwMjM1MDQ2ZjRmNmNmMzIyMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQGpBKvitBzWmyvO9QdbIRHvOtjM
B72YrdpwyDL6HrDzK1RphwzFLmqFG/1Hw4DcAOea5ijgjSVjMYsAaAXrF/Lu0fTl
oYYEAMLRbkiUnUah9kE6PeNOuqiY0WI7k3yfDUPoGqfygzyhM1FGnkOOW2M3IM2G
Pv3r5Vs5wtxKiurnYlEa54aZrNpaS0kbwzZtU2/FNR0SK5zjosSrY8jmZMjeYMOA
VSHTQHIXAilL9Ro90x1TUnd8jWaFNZ5Uv21yUeZMu86ml5SGs67MLv6w4SSdPn7k
w/T/RAdTdJouQzU3D15IDIljrW1Y7cOvHHXTm77syVz/cvEd18cyCxl05QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFr2Yc+PsZYuyYNwI1BG9PbPMiHIMB8GA1UdIwQY
MBaAFPrXEA537ZEZ1m4jIbtnEdfnYJgrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS10Y1FEbmZ0a1JuV2JpTWh1MmNSMS1kZ21Dcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUy
LTc2YjBkZGEyYmYzZS8xL1d2Wmh6NC14bGk3SmczQWpVRWIwOXM4eUljZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2UvMDFkNDExLWQ5MTUtNDI3Ny04ZmUyLTc2YjBkZGEyYmYz
ZS8xLzEtdGNRRG5mdGtSbldiaU1odTJjUjEtZGdtQ3MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwVQgDAN
BgkqhkiG9w0BAQsFAAOCAQEAp/k3YWh1iXq1mDy37saUdOCMXTAir9Nd2577btSQ
JoSJNrHIPcoFKKJHiy8SuhixYaTMjhhypITW/ka96GOnArcgWGdxiwxhSxmvsVsM
LipOjyo2YWQoKrpXrb8WSoD460pEDE7PvRdWRTUQaAua4xTw+1UxXpzhy/Es6bqf
hl4jW31/7gDmq0Sdxikrr/Lo/X3IHQGAJAcHRbzt2hE1lsmP1nWeANF7LsDBYfXt
cYsdodha7EELqnUGhBWOp+1MvAlmSF7E3jPWDsZ+46V+iMwtfTEKgw3hTS1gjPQG
vFV+ms3uLxxpAcm78lF81qOzXu7YPyhHYh2QsiC/nZLdww==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:23 2025 by rpki-client