Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/wxtKEuNe56lc-lN0JbH1C0rrfW0.roa
File: wxtKEuNe56lc-lN0JbH1C0rrfW0.roa (raw, json)
Hash identifier: iqFF7fs0ADyfr4Y5X3YsTjUs9DfIivrp7B/2EW4AVrs=
Subject key identifier: C3:1B:4A:12:E3:5E:E7:A9:5C:FA:53:74:25:B1:F5:0B:4A:EB:7D:6D
Certificate issuer: /CN=66da7e85676b96e9ba6953460ef52809952287e2
Certificate serial: CBFA
Authority key identifier: 66:DA:7E:85:67:6B:96:E9:BA:69:53:46:0E:F5:28:09:95:22:87:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztp-hWdrlum6aVNGDvUoCZUih-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/wxtKEuNe56lc-lN0JbH1C0rrfW0.roa
Signing time: Mon 28 Feb 2022 13:15:33 +0000
ROA not before: Mon 28 Feb 2022 13:15:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8220
IP address blocks: 193.118.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52218 (0xcbfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66da7e85676b96e9ba6953460ef52809952287e2
Validity
Not Before: Feb 28 13:15:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c31b4a12e35ee7a95cfa537425b1f50b4aeb7d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:75:31:6f:32:d6:9c:93:b3:97:d1:d3:44:
2a:5c:70:f9:9b:a8:8a:b7:57:d9:f3:89:bc:91:eb:
37:97:ba:b4:ca:3b:20:ba:81:92:5c:bd:7d:5f:a1:
91:47:74:ee:a0:db:5d:ec:f3:3f:e0:3e:c7:46:9f:
30:17:31:e0:3b:2e:e7:d2:85:97:00:27:60:7f:1c:
db:7b:46:98:a7:72:4f:b1:53:6d:1c:90:d5:88:b2:
d1:dd:24:59:38:99:38:f6:88:28:ee:5a:08:33:c2:
a1:cb:14:58:95:6b:c2:93:6e:75:a6:cd:58:49:a4:
3d:62:62:3f:52:50:46:4d:52:ba:df:8e:02:f2:eb:
a2:62:52:a2:7d:12:46:92:c1:d0:fd:24:04:48:b8:
ae:6f:2d:78:50:6f:5a:3b:06:16:42:47:18:f7:62:
e6:60:8d:ff:d6:57:f4:3e:49:19:66:df:28:95:ff:
da:6e:78:22:44:85:fb:70:ed:28:a3:51:80:0d:e1:
06:09:c2:be:52:7e:8b:f3:e7:ba:99:fb:f7:f1:df:
63:7a:c0:8d:2d:82:74:73:ed:eb:15:60:91:b7:0d:
e2:68:ca:cf:4e:35:3b:f2:70:77:02:71:ea:33:b4:
1c:b7:27:38:16:49:3d:24:9c:60:a8:c1:1e:30:3e:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1B:4A:12:E3:5E:E7:A9:5C:FA:53:74:25:B1:F5:0B:4A:EB:7D:6D
X509v3 Authority Key Identifier:
keyid:66:DA:7E:85:67:6B:96:E9:BA:69:53:46:0E:F5:28:09:95:22:87:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztp-hWdrlum6aVNGDvUoCZUih-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/wxtKEuNe56lc-lN0JbH1C0rrfW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8a:f4:ba:3e:65:3a:94:1f:08:dc:4f:51:57:6b:51:b5:ca:
62:24:d3:62:74:dc:2f:9a:45:c5:3c:78:60:47:12:f0:ea:10:
7e:85:94:8a:b4:38:53:0d:a0:b8:a9:92:e5:d4:61:6f:4b:05:
c1:50:18:71:b2:05:fe:76:24:cd:9a:9e:86:bc:ab:bc:c1:2c:
62:90:14:fe:36:67:ee:50:66:e8:b9:f6:72:2f:39:63:da:25:
09:34:08:8e:bc:8d:b1:1a:1b:5a:ae:27:d0:cb:b0:f4:09:b3:
c7:b9:17:3d:fa:cd:ac:42:b4:74:eb:a0:df:d8:44:a6:a7:b8:
90:fe:38:b0:f9:dc:b4:c2:67:a5:11:39:5f:f9:64:14:1c:44:
e7:d2:a7:f7:fd:82:8f:b4:65:15:ea:35:1a:a0:47:02:51:c9:
c1:43:8f:04:ac:e4:e6:90:86:66:69:6a:32:35:9b:39:03:19:
5e:1d:f9:fa:76:ef:18:13:de:4b:10:6f:dd:9d:a2:2e:36:64:
16:09:ff:a5:f7:55:17:6e:10:65:94:0c:ba:18:f2:84:7c:3e:
e6:31:ae:95:5f:9e:f0:bb:83:32:bb:e0:1f:de:77:fa:9e:b3:
ba:3e:38:a3:d9:a3:65:4e:7e:ed:b6:4a:69:3a:cf:f7:77:c4:
e8:23:f2:cc
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDAMv6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY2
ZGE3ZTg1Njc2Yjk2ZTliYTY5NTM0NjBlZjUyODA5OTUyMjg3ZTIwHhcNMjIwMjI4
MTMxNTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhjMzFiNGExMmUzNWVl
N2E5NWNmYTUzNzQyNWIxZjUwYjRhZWI3ZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjqR1MW8y1pyTs5fR00QqXHD5m6iKt1fZ84m8kes3l7q0yjsg
uoGSXL19X6GRR3TuoNtd7PM/4D7HRp8wFzHgOy7n0oWXACdgfxzbe0aYp3JPsVNt
HJDViLLR3SRZOJk49ogo7loIM8KhyxRYlWvCk251ps1YSaQ9YmI/UlBGTVK6344C
8uuiYlKifRJGksHQ/SQESLiuby14UG9aOwYWQkcY92LmYI3/1lf0PkkZZt8olf/a
bngiRIX7cO0oo1GADeEGCcK+Un6L8+e6mfv38d9jesCNLYJ0c+3rFWCRtw3iaMrP
TjU78nB3AnHqM7Qctyc4Fkk9JJxgqMEeMD6jbQIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFMMbShLjXuepXPpTdCWx9QtK631tMB8GA1UdIwQYMBaAFGbafoVna5bpumlT
Rg71KAmVIofiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WnRwLWhXZHJsdW02YVZOR0R2VW9DWlVpaC1JLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC80Yi84N2Q5ZDAtYTU4MC00MGI0LTlhNGItNjY5ZmMxZTg0MGY4LzEv
d3h0S0V1TmU1NmxjLWxOMEpiSDFDMHJyZlcwLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi84
N2Q5ZDAtYTU4MC00MGI0LTlhNGItNjY5ZmMxZTg0MGY4LzEvWnRwLWhXZHJsdW02
YVZOR0R2VW9DWlVpaC1JLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXa/MA0GCSqGSIb3DQEBCwUAA4IB
AQAfivS6PmU6lB8I3E9RV2tRtcpiJNNidNwvmkXFPHhgRxLw6hB+hZSKtDhTDaC4
qZLl1GFvSwXBUBhxsgX+diTNmp6GvKu8wSxikBT+NmfuUGboufZyLzlj2iUJNAiO
vI2xGhtarifQy7D0CbPHuRc9+s2sQrR066Df2ESmp7iQ/jiw+dy0wmelETlf+WQU
HETn0qf3/YKPtGUV6jUaoEcCUcnBQ48ErOTmkIZmaWoyNZs5AxleHfn6du8YE95L
EG/dnaIuNmQWCf+l91UXbhBllAy6GPKEfD7mMa6VX57wu4Myu+Af3nf6nrO6Pjij
2aNlTn7ttkppOs/3d8ToI/LM
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:39 2025 by rpki-client