Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wnNvNmzvzCCih2FxGfWs_7gJtpA.roa
File: wnNvNmzvzCCih2FxGfWs_7gJtpA.roa (raw, json)
Hash identifier: mX0370Zu8olBk5KAG6YxIJnVUtjU6ENkDqGHOQBbkzI=
Subject key identifier: C2:73:6F:36:6C:EF:CC:20:A2:87:61:71:19:F5:AC:FF:B8:09:B6:90
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746A1F4B07C61CC9186A19466D6D3BC
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wnNvNmzvzCCih2FxGfWs_7gJtpA.roa
Signing time: Thu 02 Jan 2025 13:48:47 +0000
ROA not before: Thu 02 Jan 2025 13:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197748
IP address blocks: 188.132.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:a1:f4:b0:7c:61:cc:91:86:a1:94:66:d6:d3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2736f366cefcc20a287617119f5acffb809b690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:36:61:7d:a0:b7:70:ec:9c:5c:79:52:e5:
e8:c6:6e:37:6d:40:67:24:8e:4d:d8:4c:c6:be:c7:
8c:a9:c9:17:2f:6c:8a:aa:4c:f5:d6:a4:c6:78:e0:
e4:48:a9:34:f7:aa:7a:f7:25:14:4b:88:dc:42:3d:
e4:29:23:47:b0:f2:e2:87:88:13:3c:3c:33:69:b0:
b7:1f:fe:18:f2:07:7d:e4:a9:75:af:35:33:00:de:
63:38:3c:8f:54:89:4c:69:e1:91:2b:7b:6c:d5:bf:
ef:53:62:bb:0f:36:04:67:91:3c:7f:39:43:35:ae:
3a:1e:67:20:aa:28:9f:5b:40:b9:de:ea:28:0d:0a:
82:6c:d5:02:d8:c9:25:07:e6:66:2b:26:ba:d5:43:
2b:42:25:d1:d4:38:53:5b:93:d6:84:aa:a0:79:49:
57:5b:63:69:fb:a0:7f:cb:a3:b3:06:6f:ea:f1:8d:
d4:d0:8e:37:b1:01:b5:ea:dd:f9:8d:b3:84:94:56:
6e:ab:db:ad:d7:30:25:ca:51:2b:ca:c9:4e:8c:00:
53:72:e3:71:f4:26:f0:0e:c3:00:3d:4e:25:18:b9:
f2:a7:98:0e:69:bb:ec:d0:99:18:df:a8:dc:0c:92:
db:49:f7:d7:b2:d6:dc:2f:8a:d6:00:d5:79:c6:4e:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:6F:36:6C:EF:CC:20:A2:87:61:71:19:F5:AC:FF:B8:09:B6:90
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/wnNvNmzvzCCih2FxGfWs_7gJtpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5b:24:b6:25:04:41:db:d2:0c:7f:3e:19:5e:90:d4:ac:f7:
47:f1:49:72:7d:80:be:e7:4f:e0:88:64:7b:56:57:20:e1:27:
cb:1d:25:f6:c7:28:3f:81:af:e2:f8:0c:bc:8e:fd:1e:e6:37:
6e:b9:f0:85:e1:5a:83:d8:b8:d4:db:33:e8:db:13:13:23:88:
de:24:27:fa:6d:98:f9:4e:c1:02:3d:66:65:56:ee:d9:bf:c5:
a0:99:ee:b5:d5:dd:3c:a0:7a:f1:8c:2c:b6:c7:74:7b:68:8d:
db:cf:53:85:96:60:13:83:83:d6:3a:67:05:3a:cf:c8:3a:20:
d9:90:72:99:27:42:ca:1a:82:66:66:09:ac:17:5a:d4:ea:31:
a1:12:f2:2d:28:3c:69:14:1a:41:43:c2:13:54:50:83:9f:37:
1d:51:1b:01:98:9c:7d:66:61:e5:41:15:19:16:17:b7:b3:5d:
25:33:7c:d9:f9:7b:30:85:38:cf:da:a2:e7:39:75:3b:6c:5b:
01:02:9a:db:bf:79:83:17:15:62:13:8d:61:cb:24:da:c3:92:
7c:a3:f3:1e:0c:5f:25:a0:da:ec:88:5d:4e:f9:e7:53:b8:e6:
fd:52:30:f7:09:e4:16:0d:34:33:1e:69:1e:c9:c4:f9:27:a8:
70:04:5c:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRqH0sHxhzJGGoZRm1tO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjUwMTAyMTM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjczNmYzNjZjZWZjYzIwYTI4NzYxNzExOWY1YWNmZmI4MDliNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApig2YX2gt3DsnFx5UuXoxm43bUBn
JI5N2EzGvseMqckXL2yKqkz11qTGeODkSKk096p69yUUS4jcQj3kKSNHsPLih4gT
PDwzabC3H/4Y8gd95Kl1rzUzAN5jODyPVIlMaeGRK3ts1b/vU2K7DzYEZ5E8fzlD
Na46HmcgqiifW0C53uooDQqCbNUC2MklB+ZmKya61UMrQiXR1DhTW5PWhKqgeUlX
W2Np+6B/y6OzBm/q8Y3U0I43sQG16t35jbOElFZuq9ut1zAlylEryslOjABTcuNx
9CbwDsMAPU4lGLnyp5gOabvs0JkY36jcDJLbSffXstbcL4rWANV5xk7SrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJzbzZs78wgoodhcRn1rP+4CbaQMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvd25Odk5tenZ6Q0NpaDJGeEdmV3NfN2dKdHBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISNMA0G
CSqGSIb3DQEBCwUAA4IBAQAaWyS2JQRB29IMfz4ZXpDUrPdH8UlyfYC+50/giGR7
Vlcg4SfLHSX2xyg/ga/i+Ay8jv0e5jduufCF4VqD2LjU2zPo2xMTI4jeJCf6bZj5
TsECPWZlVu7Zv8Wgme611d08oHrxjCy2x3R7aI3bz1OFlmATg4PWOmcFOs/IOiDZ
kHKZJ0LKGoJmZgmsF1rU6jGhEvItKDxpFBpBQ8ITVFCDnzcdURsBmJx9ZmHlQRUZ
Fhe3s10lM3zZ+XswhTjP2qLnOXU7bFsBAprbv3mDFxViE41hyyTaw5J8o/MeDF8l
oNrsiF1O+edTuOb9UjD3CeQWDTQzHmkeycT5J6hwBFwI
-----END CERTIFICATE-----
Generated at Wed Apr 9 09:27:24 2025 by rpki-client