Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa
File: Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa (raw, json)
Hash identifier: YXn3MdI9fbwK137bu2N/c5GjDCAVC9bePDhOy7NGC2E=
Subject key identifier: 5A:5E:DD:7C:F0:4C:8F:3B:7B:77:70:11:3C:76:73:BC:10:EF:0B:3E
Certificate issuer: /CN=d67f1283b630e588cb039ba652b90299d71a8e78
Certificate serial: 019423D7CF6D77D20A58FBEC4D3FD3191C8E
Authority key identifier: D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa
Signing time: Wed 01 Jan 2025 21:48:53 +0000
ROA not before: Wed 01 Jan 2025 21:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 188.92.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:cf:6d:77:d2:0a:58:fb:ec:4d:3f:d3:19:1c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d67f1283b630e588cb039ba652b90299d71a8e78
Validity
Not Before: Jan 1 21:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a5edd7cf04c8f3b7b7770113c7673bc10ef0b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:9e:16:99:f1:de:cd:8b:37:46:fa:12:15:
8f:5f:50:11:f0:1b:85:34:88:e0:f3:13:42:c8:7e:
89:33:56:fd:8f:0f:64:3c:26:7e:84:4a:2d:40:ac:
5c:3a:38:fb:15:f1:0a:1a:c4:54:55:09:43:6e:9a:
5e:10:09:b1:ea:66:cb:f6:1f:e6:b5:17:d7:81:25:
ed:67:28:5e:97:f4:17:31:ac:40:81:00:70:c6:8e:
36:83:a7:07:72:0c:ac:c2:1b:e0:c0:b4:83:ac:62:
c4:76:3d:25:8a:31:9a:ef:75:16:86:f6:f4:1f:41:
69:7d:4e:99:06:90:a1:44:c9:7a:cf:6c:46:10:f9:
3d:1d:21:a8:a2:90:22:39:af:f2:50:63:f1:62:e4:
f4:e6:87:86:fe:2a:59:43:26:4a:ef:0f:ea:a0:4d:
58:35:1b:43:0f:e0:87:10:79:95:86:42:c8:05:72:
80:c8:e1:bc:ba:78:fa:fa:b6:d9:37:80:ed:b9:4a:
43:7f:57:a5:0f:cb:1c:ce:ee:99:bc:c4:bb:c1:8f:
82:04:eb:1e:9c:cf:ac:0a:00:af:60:90:3a:55:08:
e2:41:4d:40:ed:2c:8f:3b:e9:5a:ed:83:c1:66:44:
0d:81:59:dd:1c:44:ff:a4:3b:10:28:0f:eb:98:6f:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5E:DD:7C:F0:4C:8F:3B:7B:77:70:11:3C:76:73:BC:10:EF:0B:3E
X509v3 Authority Key Identifier:
keyid:D6:7F:12:83:B6:30:E5:88:CB:03:9B:A6:52:B9:02:99:D7:1A:8E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1n8Sg7Yw5YjLA5umUrkCmdcajng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/Wl7dfPBMjzt7d3ARPHZzvBDvCz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2a860c-1005-4423-95bd-3079d588aa99/1/1n8Sg7Yw5YjLA5umUrkCmdcajng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.25.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:20:7b:88:2c:38:a4:3b:80:86:c4:17:3d:08:7f:52:09:c6:
82:80:e0:e6:29:7d:39:da:a6:62:d0:23:08:75:18:21:9f:fe:
77:61:21:16:a3:ac:31:3c:11:c8:a0:b1:5c:ae:02:9d:a0:9e:
d9:ce:1c:e6:11:77:3d:0c:82:fb:ea:17:68:96:15:a0:72:45:
93:62:16:b2:71:56:f9:c0:ef:fa:70:e7:4d:d7:23:ba:35:b8:
20:f7:33:f9:76:d8:84:0e:65:c5:80:97:52:46:7e:36:db:49:
16:7d:83:b4:6d:92:29:95:0e:67:42:77:e9:69:a8:78:57:72:
13:7f:c9:06:53:8e:4e:2e:1f:52:ad:53:ce:41:3a:b2:26:26:
e5:8b:d9:af:02:83:8a:64:36:2e:95:b2:52:47:18:e3:3a:9c:
b5:38:2e:e1:c9:6f:9a:57:38:d0:47:7b:c3:f6:95:91:6f:bc:
d8:30:cb:5e:96:98:74:24:49:3d:60:e9:1c:40:a8:2e:82:fa:
cc:98:af:00:fe:54:3d:7d:25:e2:81:bf:4b:6a:b9:d4:4d:6d:
de:3c:15:1b:5e:93:4b:80:85:45:21:d9:6e:85:e0:8e:ce:a6:
00:07:e7:d5:8a:ba:1d:72:b9:d0:d8:a3:9b:0b:c3:e3:7b:72:
18:7c:7c:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj189td9IKWPvsTT/TGRyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2N2YxMjgzYjYzMGU1ODhjYjAzOWJhNjUyYjkwMjk5ZDcx
YThlNzgwHhcNMjUwMTAxMjE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTVlZGQ3Y2YwNGM4ZjNiN2I3NzcwMTEzYzc2NzNiYzEwZWYwYjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/SeFpnx3s2LN0b6EhWPX1AR8BuF
NIjg8xNCyH6JM1b9jw9kPCZ+hEotQKxcOjj7FfEKGsRUVQlDbppeEAmx6mbL9h/m
tRfXgSXtZyhel/QXMaxAgQBwxo42g6cHcgyswhvgwLSDrGLEdj0lijGa73UWhvb0
H0FpfU6ZBpChRMl6z2xGEPk9HSGoopAiOa/yUGPxYuT05oeG/ipZQyZK7w/qoE1Y
NRtDD+CHEHmVhkLIBXKAyOG8unj6+rbZN4DtuUpDf1elD8sczu6ZvMS7wY+CBOse
nM+sCgCvYJA6VQjiQU1A7SyPO+la7YPBZkQNgVndHET/pDsQKA/rmG+umwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpe3XzwTI87e3dwETx2c7wQ7ws+MB8GA1UdIwQY
MBaAFNZ/EoO2MOWIywObplK5ApnXGo54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQt
MzA3OWQ1ODhhYTk5LzEvV2w3ZGZQQk1qenQ3ZDNBUlBIWnp2QkR2Q3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yYTg2MGMtMTAwNS00NDIzLTk1YmQtMzA3OWQ1ODhhYTk5
LzEvMW44U2c3WXc1WWpMQTV1bVVya0NtZGNham5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvFwZMA0G
CSqGSIb3DQEBCwUAA4IBAQC5IHuILDikO4CGxBc9CH9SCcaCgODmKX052qZi0CMI
dRghn/53YSEWo6wxPBHIoLFcrgKdoJ7ZzhzmEXc9DIL76hdolhWgckWTYhaycVb5
wO/6cOdN1yO6Nbgg9zP5dtiEDmXFgJdSRn4220kWfYO0bZIplQ5nQnfpaah4V3IT
f8kGU45OLh9SrVPOQTqyJibli9mvAoOKZDYulbJSRxjjOpy1OC7hyW+aVzjQR3vD
9pWRb7zYMMtelph0JEk9YOkcQKgugvrMmK8A/lQ9fSXigb9LarnUTW3ePBUbXpNL
gIVFIdluheCOzqYAB+fVirodcrnQ2KObC8Pje3IYfHx9
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:10 2025 by rpki-client