Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WR7yDEU8Ka7Wnwmb-wKind5Keqo.roa
File: WR7yDEU8Ka7Wnwmb-wKind5Keqo.roa (raw, json)
Hash identifier: 1BFvoob0sg10mdF2rx3VLbhGe2T3EWUmtnV22m4wPWI=
Subject key identifier: 59:1E:F2:0C:45:3C:29:AE:D6:9F:09:9B:FB:02:A2:9D:DE:4A:7A:AA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01955BE3A6BC20759E3A38412E24DC0E4AF1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WR7yDEU8Ka7Wnwmb-wKind5Keqo.roa
Signing time: Mon 03 Mar 2025 12:03:20 +0000
ROA not before: Mon 03 Mar 2025 12:03:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 185.238.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:e3:a6:bc:20:75:9e:3a:38:41:2e:24:dc:0e:4a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 3 12:03:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=591ef20c453c29aed69f099bfb02a29dde4a7aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:f1:f8:ee:0c:8e:a6:16:67:e0:a9:48:ee:
7a:3a:50:ef:d5:7a:7a:25:cd:1c:38:17:e3:5d:10:
00:3d:f6:2b:55:c7:45:09:10:17:1d:7a:4e:c1:aa:
89:43:79:39:70:f0:39:2c:c6:7f:3c:2d:14:04:6e:
6f:4e:d8:e2:ba:80:84:35:36:b1:4f:06:96:be:3e:
ac:c1:17:9a:42:80:0b:0c:30:dd:17:49:c7:09:5b:
d3:6c:fe:2f:77:2f:6f:46:e2:ef:01:3d:5b:71:39:
8e:55:22:42:ab:e7:8f:cb:e0:0b:cb:93:6b:c4:e4:
3d:2d:55:b6:35:1e:2f:69:e1:ef:2f:79:0b:16:53:
65:c8:05:ab:73:b8:4c:84:b8:44:81:60:45:ff:92:
1a:8e:63:e3:f6:75:53:de:91:40:31:e4:56:86:f2:
12:cb:f6:67:ac:9f:b8:5f:e4:15:f2:8f:41:f8:a7:
1e:ab:be:ea:31:3c:91:f5:0d:ff:cf:2b:35:1b:b7:
bc:8a:e8:c4:a2:83:69:70:30:bd:03:3f:10:c3:28:
75:64:61:f6:f5:6c:8e:72:62:ed:81:51:aa:7d:37:
30:32:db:e7:cc:9d:c4:9f:ef:04:de:65:b9:2d:af:
37:b1:e2:e9:b8:e5:05:30:33:27:0f:e6:4e:b5:84:
4d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1E:F2:0C:45:3C:29:AE:D6:9F:09:9B:FB:02:A2:9D:DE:4A:7A:AA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WR7yDEU8Ka7Wnwmb-wKind5Keqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.188.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d9:47:88:9e:fd:d0:8f:3e:74:a4:d3:34:4d:33:9a:53:63:
cc:42:06:91:4f:1c:84:99:48:ad:be:ca:1a:8e:6c:67:c2:2a:
8c:8b:9d:0e:e1:f2:f5:cd:65:83:a4:ad:96:de:5c:b4:85:24:
36:f1:25:0f:5a:14:95:28:76:d7:bc:a4:e5:b1:7f:9d:fb:9c:
1f:5e:74:47:bf:45:dd:f6:f8:d2:43:67:09:50:47:03:9c:3d:
f7:28:c2:92:d7:ef:de:d4:43:31:50:0b:51:85:aa:91:6d:6b:
31:e9:da:d5:8f:21:e5:3e:20:95:67:24:16:76:b8:dd:5e:16:
62:f2:d9:c3:a8:73:32:b6:2a:f1:05:17:43:84:13:ef:40:94:
b4:85:40:3b:0f:8a:c1:a0:8c:d8:93:4a:de:a8:51:9f:55:40:
4a:59:ca:0c:2f:15:77:1d:83:4d:74:35:3d:4d:8e:41:b2:9b:
da:91:68:ad:c8:9a:7b:a1:44:1b:de:78:87:19:8b:ba:b2:ff:
c6:3e:57:8d:e7:44:4c:d5:1c:d2:3a:c9:30:f3:fb:0e:7e:f0:
46:1a:35:38:ef:ef:7d:bc:eb:a3:e7:ba:40:13:f9:6c:60:68:
a7:4e:bb:3b:6c:ea:6d:7b:27:88:83:fb:56:60:1b:6c:f2:69:
dd:5d:d1:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVb46a8IHWeOjhBLiTcDkrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMzAzMTIwMzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTFlZjIwYzQ1M2MyOWFlZDY5ZjA5OWJmYjAyYTI5ZGRlNGE3YWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmETx+O4MjqYWZ+CpSO56OlDv1Xp6
Jc0cOBfjXRAAPfYrVcdFCRAXHXpOwaqJQ3k5cPA5LMZ/PC0UBG5vTtjiuoCENTax
TwaWvj6swReaQoALDDDdF0nHCVvTbP4vdy9vRuLvAT1bcTmOVSJCq+ePy+ALy5Nr
xOQ9LVW2NR4vaeHvL3kLFlNlyAWrc7hMhLhEgWBF/5IajmPj9nVT3pFAMeRWhvIS
y/ZnrJ+4X+QV8o9B+Kceq77qMTyR9Q3/zys1G7e8iujEooNpcDC9Az8Qwyh1ZGH2
9WyOcmLtgVGqfTcwMtvnzJ3En+8E3mW5La83seLpuOUFMDMnD+ZOtYRNdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFke8gxFPCmu1p8Jm/sCop3eSnqqMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvV1I3eURFVThLYTdXbndtYi13S2luZDVLZXFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue68MA0G
CSqGSIb3DQEBCwUAA4IBAQB22UeInv3Qjz50pNM0TTOaU2PMQgaRTxyEmUitvsoa
jmxnwiqMi50O4fL1zWWDpK2W3ly0hSQ28SUPWhSVKHbXvKTlsX+d+5wfXnRHv0Xd
9vjSQ2cJUEcDnD33KMKS1+/e1EMxUAtRhaqRbWsx6drVjyHlPiCVZyQWdrjdXhZi
8tnDqHMytirxBRdDhBPvQJS0hUA7D4rBoIzYk0reqFGfVUBKWcoMLxV3HYNNdDU9
TY5BspvakWityJp7oUQb3niHGYu6sv/GPleN50RM1RzSOskw8/sOfvBGGjU47+99
vOuj57pAE/lsYGinTrs7bOpteyeIg/tWYBts8mndXdFt
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:53 2025 by rpki-client