Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/DamwXsWqw-pNiIY7Y9gzUoz46SI.roa
File: DamwXsWqw-pNiIY7Y9gzUoz46SI.roa (raw, json)
Hash identifier: 1+3IDizWDcTViB++VKv1xbkAGlHPeiHczREvYVy1BEk=
Subject key identifier: 0D:A9:B0:5E:C5:AA:C3:EA:4D:88:86:3B:63:D8:33:52:8C:F8:E9:22
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC3F757479689861436E97F3A52062
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/DamwXsWqw-pNiIY7Y9gzUoz46SI.roa
Signing time: Wed 01 Jan 2025 17:49:04 +0000
ROA not before: Wed 01 Jan 2025 17:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206950
IP address blocks: 94.188.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:3f:75:74:79:68:98:61:43:6e:97:f3:a5:20:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0da9b05ec5aac3ea4d88863b63d833528cf8e922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:6f:c1:05:b1:bd:7b:74:20:e4:7f:f0:23:
17:d1:5e:f8:b3:04:2a:05:a3:4b:1d:94:82:0f:d3:
40:e4:20:85:22:d5:1c:88:64:be:4d:94:88:9d:8b:
e5:85:2f:c7:1d:06:f8:7e:d5:03:a7:8c:1f:a4:3f:
83:8e:83:68:27:9e:2b:1c:5e:cd:23:5c:76:45:95:
94:2b:ea:75:32:41:db:94:ae:ca:43:a9:64:93:0c:
da:da:c7:de:4c:d5:27:14:73:b2:72:bd:bd:dc:3e:
98:7c:06:cd:67:5b:13:3b:69:a0:ff:e6:4e:32:ee:
bd:41:22:af:a3:bd:55:f1:d9:e4:bd:53:04:ec:eb:
e4:d2:a7:04:92:45:18:98:17:1b:04:87:1e:e2:f0:
f2:00:b9:53:97:a5:12:2c:71:f6:1a:54:a8:c7:d8:
a3:6b:36:f6:00:9e:e4:95:ad:2d:66:c7:af:f6:3d:
26:8a:cf:cb:38:09:f0:8e:13:55:ac:a3:60:a8:fe:
b3:a1:21:42:4e:54:cb:ba:33:a2:31:43:f0:27:c6:
d5:2d:d5:d0:83:bd:81:37:c2:ac:97:40:b7:c0:e3:
4f:c5:f6:d6:4d:5c:57:03:28:e5:fa:f7:06:a3:89:
bf:66:c4:5d:09:1b:04:42:7d:b7:45:d7:9f:24:55:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A9:B0:5E:C5:AA:C3:EA:4D:88:86:3B:63:D8:33:52:8C:F8:E9:22
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/DamwXsWqw-pNiIY7Y9gzUoz46SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.185.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:65:5c:b2:c4:2e:d4:bb:42:07:32:9d:ee:e7:0d:f3:35:f2:
05:4c:fa:2a:38:57:2e:f4:87:54:8c:70:81:01:b8:40:d8:b5:
fe:eb:63:5f:4d:7b:78:3a:79:e8:b0:d9:0e:c5:59:ee:f3:e4:
2a:f4:74:0c:f4:10:64:51:bb:ca:f0:43:ee:02:41:cd:40:14:
a9:90:7c:3b:11:be:a6:5e:2c:18:6b:ec:c4:c3:3f:e8:8d:11:
d5:bc:1c:47:14:e0:00:15:eb:fe:bc:98:e1:2a:9a:d0:4e:d8:
d4:2a:e4:d7:93:6f:61:8a:30:ed:75:45:d7:e8:25:57:d9:73:
a6:30:61:36:59:6b:01:c6:ea:89:81:b6:5d:93:4d:0b:89:1e:
21:8d:c9:66:46:37:d9:1c:63:c1:6b:f0:4c:74:f3:4f:1b:cf:
63:f0:e6:dc:f7:1a:fa:3c:f7:d8:1c:15:d6:70:21:d9:d5:7d:
7c:3a:29:8f:81:74:2f:ce:03:75:f4:21:0c:e6:31:1e:13:ab:
39:c8:e2:1d:8d:37:04:be:a8:7d:32:1c:59:e8:63:23:4c:3a:
57:3d:d9:f4:68:41:a2:1e:a4:d4:a2:c6:40:2a:17:d6:1d:f8:
c9:3d:bd:07:26:1e:c4:69:d6:ce:7e:60:6c:c4:7c:84:b1:58:
35:1c:6e:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/D91dHlomGFDbpfzpSBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5
YTBkODYwHhcNMjUwMTAxMTc0OTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGE5YjA1ZWM1YWFjM2VhNGQ4ODg2M2I2M2Q4MzM1MjhjZjhlOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnZvwQWxvXt0IOR/8CMX0V74swQq
BaNLHZSCD9NA5CCFItUciGS+TZSInYvlhS/HHQb4ftUDp4wfpD+DjoNoJ54rHF7N
I1x2RZWUK+p1MkHblK7KQ6lkkwza2sfeTNUnFHOycr293D6YfAbNZ1sTO2mg/+ZO
Mu69QSKvo71V8dnkvVME7Ovk0qcEkkUYmBcbBIce4vDyALlTl6USLHH2GlSox9ij
azb2AJ7kla0tZsev9j0mis/LOAnwjhNVrKNgqP6zoSFCTlTLujOiMUPwJ8bVLdXQ
g72BN8Ksl0C3wONPxfbWTVxXAyjl+vcGo4m/ZsRdCRsEQn23RdefJFU2CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2psF7FqsPqTYiGO2PYM1KM+OkiMB8GA1UdIwQY
MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt
NDIxZTZiYzdlMmU4LzEvRGFtd1hzV3F3LXBOaUlZN1k5Z3pVb3o0NlNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4
LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXry5MA0G
CSqGSIb3DQEBCwUAA4IBAQAvZVyyxC7Uu0IHMp3u5w3zNfIFTPoqOFcu9IdUjHCB
AbhA2LX+62NfTXt4OnnosNkOxVnu8+Qq9HQM9BBkUbvK8EPuAkHNQBSpkHw7Eb6m
XiwYa+zEwz/ojRHVvBxHFOAAFev+vJjhKprQTtjUKuTXk29hijDtdUXX6CVX2XOm
MGE2WWsBxuqJgbZdk00LiR4hjclmRjfZHGPBa/BMdPNPG89j8Obc9xr6PPfYHBXW
cCHZ1X18OimPgXQvzgN19CEM5jEeE6s5yOIdjTcEvqh9MhxZ6GMjTDpXPdn0aEGi
HqTUosZAKhfWHfjJPb0HJh7EadbOfmBsxHyEsVg1HG45
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:12 2025 by rpki-client