Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wUevmhZX2VylUs3tqEwu3N4i5Rw.roa
File: wUevmhZX2VylUs3tqEwu3N4i5Rw.roa (raw, json)
Hash identifier: +n6gGfGt/l9LEuw9jw4PqvOu1dgXZkoS3xM8wk02a5Y=
Subject key identifier: C1:47:AF:9A:16:57:D9:5C:A5:52:CD:ED:A8:4C:2E:DC:DE:22:E5:1C
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD24F90E99D6D2F43E75A18F6B55FF
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wUevmhZX2VylUs3tqEwu3N4i5Rw.roa
Signing time: Thu 02 Jan 2025 07:48:54 +0000
ROA not before: Thu 02 Jan 2025 07:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200525
IP address blocks: 104.250.200.0/22 maxlen: 22
104.250.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:24:f9:0e:99:d6:d2:f4:3e:75:a1:8f:6b:55:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c147af9a1657d95ca552cdeda84c2edcde22e51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:52:e9:00:f8:99:e6:82:f4:bd:64:82:f0:e3:
d3:dc:ae:27:50:13:42:c5:ff:21:4a:99:72:57:62:
95:ca:17:97:7f:ce:03:53:26:8c:14:78:61:d2:ac:
93:75:ca:3e:89:2f:70:4a:ae:d9:e2:0f:4d:64:af:
5a:f8:01:36:aa:18:0b:02:bb:15:2a:ea:ca:b5:87:
38:6a:85:c9:eb:fd:42:a5:65:87:c2:fc:22:b8:fb:
b3:a4:39:c6:99:75:77:1b:74:b4:2c:82:80:b2:87:
97:11:d0:72:73:f1:0e:65:ed:8d:df:08:87:e8:b0:
3c:5b:12:d9:78:c3:cd:36:65:2d:57:81:cb:8a:ac:
a2:2d:27:26:28:a9:a0:9a:97:9c:3c:c6:0a:1d:5a:
30:ef:c4:b8:de:47:38:aa:55:9d:14:4d:1e:69:41:
d4:f8:18:8c:6d:8c:ce:aa:a7:27:cb:6d:f7:10:c5:
8d:df:95:d0:00:d1:90:78:5e:5d:cc:bb:f8:2a:0c:
11:ef:ca:0f:48:0b:69:46:df:1c:76:ca:1e:37:22:
d2:f2:21:ca:9d:64:31:e1:f8:8d:c9:8c:00:b2:fb:
31:d5:7c:56:54:5b:a3:aa:83:7a:c5:fd:75:ba:05:
5a:6a:fa:8f:99:0f:7d:59:33:24:d9:bf:7c:78:8c:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:AF:9A:16:57:D9:5C:A5:52:CD:ED:A8:4C:2E:DC:DE:22:E5:1C
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/wUevmhZX2VylUs3tqEwu3N4i5Rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.250.200.0/21
Signature Algorithm: sha256WithRSAEncryption
88:bb:05:d0:83:94:85:54:b8:2e:51:0b:83:42:3d:1c:a3:ad:
e7:20:49:ac:e9:cb:b4:d7:6b:93:3d:b6:c6:67:7d:e9:58:a3:
b2:81:44:5d:0f:4f:2d:09:77:5b:bc:3e:5f:87:78:d4:bf:b6:
e1:10:f3:3c:c2:06:cb:fa:a4:4c:a2:76:d6:5d:3b:6c:cb:4f:
b9:bf:3d:56:1b:41:5e:2a:da:ca:33:73:38:8c:09:60:2d:1a:
cf:41:43:1b:30:dd:3c:be:69:e0:ed:de:15:17:fb:95:f7:fb:
24:ba:57:51:4a:d8:0b:f4:60:72:6a:a1:b5:39:0c:f5:73:85:
23:a6:44:fa:5a:94:bd:9d:37:3e:d6:15:35:57:ab:0e:90:95:
21:e6:15:f4:d7:82:55:6f:50:1d:d5:ac:8b:70:e2:b5:69:2b:
d7:f7:12:b7:ca:76:66:2c:28:da:e2:14:82:6e:c9:d9:ab:b2:
3d:cd:f8:b5:da:02:12:59:28:da:83:bc:87:9b:1a:50:b7:55:
3f:e1:a3:33:b9:c6:89:63:64:03:51:24:93:9e:27:70:0d:3a:
d8:0b:f8:23:1f:73:55:c6:50:e5:09:fb:6b:93:fb:80:62:35:
19:64:0c:64:ef:1b:c1:f1:86:d0:8b:dc:01:4a:bf:78:f8:ed:
ea:59:6f:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ST5DpnW0vQ+daGPa1X/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMTAyMDc0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTQ3YWY5YTE2NTdkOTVjYTU1MmNkZWRhODRjMmVkY2RlMjJlNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlLpAPiZ5oL0vWSC8OPT3K4nUBNC
xf8hSplyV2KVyheXf84DUyaMFHhh0qyTdco+iS9wSq7Z4g9NZK9a+AE2qhgLArsV
KurKtYc4aoXJ6/1CpWWHwvwiuPuzpDnGmXV3G3S0LIKAsoeXEdByc/EOZe2N3wiH
6LA8WxLZeMPNNmUtV4HLiqyiLScmKKmgmpecPMYKHVow78S43kc4qlWdFE0eaUHU
+BiMbYzOqqcny233EMWN35XQANGQeF5dzLv4KgwR78oPSAtpRt8cdsoeNyLS8iHK
nWQx4fiNyYwAsvsx1XxWVFujqoN6xf11ugVaavqPmQ99WTMk2b98eIwEBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFHr5oWV9lcpVLN7ahMLtzeIuUcMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvd1Vldm1oWlgyVnlsVXMzdHFFd3UzTjRpNVJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaPrIMA0G
CSqGSIb3DQEBCwUAA4IBAQCIuwXQg5SFVLguUQuDQj0co63nIEms6cu012uTPbbG
Z33pWKOygURdD08tCXdbvD5fh3jUv7bhEPM8wgbL+qRMonbWXTtsy0+5vz1WG0Fe
KtrKM3M4jAlgLRrPQUMbMN08vmng7d4VF/uV9/skuldRStgL9GByaqG1OQz1c4Uj
pkT6WpS9nTc+1hU1V6sOkJUh5hX014JVb1Ad1ayLcOK1aSvX9xK3ynZmLCja4hSC
bsnZq7I9zfi12gISWSjag7yHmxpQt1U/4aMzucaJY2QDUSSTnidwDTrYC/gjH3NV
xlDlCftrk/uAYjUZZAxk7xvB8YbQi9wBSr94+O3qWW8I
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:19 2025 by rpki-client